counteractive/o365beat

Issues

• o365beat /Debian 12

  #62 opened a month ago by sh-jh
  0

• How to run o365beat in Ubuntu as pull office logs connectors

  #61 opened a month ago by eugene-ho-mssp
  0

• Log file is not getting created

  #60 opened 2 years ago by sriramb12
  0

• Does O365beat support multiple Office 365 tenants scenario

  #59 opened 3 years ago by khaloud40
  0

• Tenant ID not found

  #58 opened 3 years ago by shad0wcrawl3r
  0

• GCC High no available content locations:

  #57 opened 3 years ago by mgovolt
  1

• AzureActiveDirectory Logs not pulled

  #55 opened 4 years ago by andy13th
  3

• Question about possibility of monitoring multiple tenant domains

  #26 opened 5 years ago by ipninichuck
  14

• Log content changed recently?

  #56 opened 4 years ago by GenCr
  0

• visualization not working

  #38 opened 4 years ago by CVMCTONY
  5

• future request Azure Beats

  #34 opened 4 years ago by creatoni4
  4

• Docker Instructions

  #40 opened 4 years ago by BenB196
  3

• Dashboard and visualizations not working - error with fields.keyword

  #43 opened 4 years ago by Rajprince2793
  5

• Live Realoding Credentials

  #51 opened 4 years ago by cloudziu
  2

• Certificate signed by unknown authority message

  #54 opened 4 years ago by robm82
  2

• Support client certificate/public key authentication

  #33 opened 4 years ago by chris-counteractive
  2

• Proxy support for the API requests

  #53 opened 4 years ago by kristofver
  1

• Logstash connection errors

  #45 opened 4 years ago by GenCr
  7

• o365 audit.exchange not returning threat audit logs

  #46 opened 4 years ago by CustosClarus
  3

• WARN beater/o365beat.go:249 start XX must be <=YY hrs ago, resetting

  #47 opened 4 years ago by rob570
  3

• Preventing Duplicate Events

  #42 opened 4 years ago by shwetas-syd
  4

• Response body not printed for authentication errors which hinders debugging.

  #21 opened 5 years ago by chris-counteractive
  4

• `make release` names package files with libbeat version rather than beat version

  #10 opened 5 years ago by chris-counteractive
  0

• User Data Enhancement

  #35 opened 5 years ago by Michael-vdL
  3

• Killing the beat process from the command line is unreliable

  #29 opened 5 years ago by chris-counteractive
  2

• Incorrect system time can lead to failed requests

  #22 opened 5 years ago by chris-counteractive
  1

• SIGABRT during `make release` packaging

  #32 opened 5 years ago by chris-counteractive
  3

• [ModifiedProperties] Can't get text on a START_OBJECT

  #18 opened 5 years ago by borg333
  3

• Understanding Authentication Data

  #37 opened 5 years ago by Von-dy
  4

• Parsing Extended Properties

  #41 opened 5 years ago by ion-storm
  4

• Client.Timeout for Exchange/General/Sharepoint

  #39 opened 5 years ago by kevinserafin
  6

• Exiting: error loading config file: yaml: line 2: did not find expected node content

  #36 opened 5 years ago by leogoldim
  5

• Cannot index event

  #23 opened 5 years ago by nealmadhu
  2

• GCC High - Endpoint Used Returning no data

  #25 opened 5 years ago by cyanitol
  5

• Certain events don't trigger the dissect processor

  #31 opened 5 years ago by GenCr
  5

• Index pattern doesn't change

  #30 opened 5 years ago by ebvjr
  5

• Config template "processors" section shadows custom ECS processors

  #9 opened 5 years ago by chris-counteractive
  3

• ClientIP not parsed to ECS client.ip when it has port but no brackets

  #16 opened 5 years ago by chris-counteractive
  1

• Incorrect file name on o365beat-1.4.3-x86_64.rpm.sha512

  #28 opened 5 years ago by fuef
  1

• Error parsing Audit.AzureActiveDirectory (other content types work fine)

  #27 opened 5 years ago by jheidecker
  3

• Question regarding installing other modules on o365beat

  #24 opened 5 years ago by ipninichuck
  3

• Error Parsing @timestamp

  #19 opened 5 years ago by Z3r01mPact
  4

• Publisher ID is not set

  #17 opened 5 years ago by jjkoster
  9

• How to use debugging output enabled on Centos7

  #20 opened 5 years ago by sebastianfon94
  0

• object mapping for [ModifiedProperties]

  #15 opened 5 years ago by borg333
  3

• ModifiedProperties field is sent as object which causes problems for elasticsearch

  #14 opened 5 years ago by chris-counteractive
  0

• beat keystore possibiity

  #11 opened 5 years ago by ipninichuck
  3

• ClientIP real-world values don't match ip data type in fields.yml, causing errors in elasticsearch parsing

  #12 opened 5 years ago by chris-counteractive
  0

• ECS event.severity is type long, whereas O365 Severity is a string

  #13 opened 5 years ago by chris-counteractive
  0

• Vendor field not correctly set, which caused failed tests during `make release`

  #8 opened 5 years ago by chris-counteractive
  0