Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Permit event.type: access for event.category: file events #2174

Merged
merged 2 commits into from
Feb 23, 2023
Merged

Permit event.type: access for event.category: file events #2174

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
2630d8a
permit event.type:access for event.category: file
ebeahan Feb 23, 2023
09c9a9a
changelog
ebeahan Feb 23, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions CHANGELOG.next.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,6 +16,8 @@ Thanks, you're awesome :-) -->

#### Added

* Add `access` as an allowed type for `event.type: file`. #2174

#### Improvements

#### Deprecated
Expand Down
2 changes: 1 addition & 1 deletion docs/fields/field-values.asciidoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -240,7 +240,7 @@ Relating to a set of information that has been created on, or has existed on a f

*Expected event types for category file:*

change, creation, deletion, info
access, change, creation, deletion, info


[float]
Expand Down
1 change: 1 addition & 0 deletions experimental/generated/ecs/ecs_flat.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3022,6 +3022,7 @@ event.category:
from both host-based and network-based sources. An example source of a network-based
detection of a file transfer would be the Zeek file.log.
expected_event_types:
- access
- change
- creation
- deletion
Expand Down
1 change: 1 addition & 0 deletions experimental/generated/ecs/ecs_nested.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4014,6 +4014,7 @@ event:
can come from both host-based and network-based sources. An example source
of a network-based detection of a file transfer would be the Zeek file.log.
expected_event_types:
- access
- change
- creation
- deletion
Expand Down
1 change: 1 addition & 0 deletions generated/ecs/ecs_flat.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2953,6 +2953,7 @@ event.category:
from both host-based and network-based sources. An example source of a network-based
detection of a file transfer would be the Zeek file.log.
expected_event_types:
- access
- change
- creation
- deletion
Expand Down
1 change: 1 addition & 0 deletions generated/ecs/ecs_nested.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3934,6 +3934,7 @@ event:
can come from both host-based and network-based sources. An example source
of a network-based detection of a file transfer would be the Zeek file.log.
expected_event_types:
- access
- change
- creation
- deletion
Expand Down
1 change: 1 addition & 0 deletions schemas/event.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -239,6 +239,7 @@
from both host-based and network-based sources. An example source of a network-based
detection of a file transfer would be the Zeek file.log.
expected_event_types:
- access
- change
- creation
- deletion
Expand Down