Josh Lemon

M365 UAL JSON Logs Not Parsed

7

The M365 UAL JSON output from this tool (https://github.com/invictus-ir/Microsoft-Extractor-Suite) is not parsed correctly by the M365 parser in SOF-ELK. FYI @invictus-ir @Pierre450 I'll also try to take a look at...

LimaCharlie update to include Named Pipe activity. # EDR Telemetry Pull Request ## Contribution Details Updated the LimaChalie telemetry for Named Pipe Creation and Named Pipe Connection. Example of a...

Domain with Space - Possible Typo

1

I think the space after the wildcard in this domain might be a mistake that needs to be corrected. https://github.com/magicsword-io/LOLRMM/blob/810af90edbf384b8b7c48fb9365972541798d5a0/yaml/ultraviewer.yaml#L39

Can you please include the Hash used to look up against VT in the output (i.e. CSV and EVTX)? It would be helpful also to include the Hash even if...