Skip to content

Commit

Permalink
Merge pull request #9 from fastlorenzo/fix-templates
Browse files Browse the repository at this point in the history 
Fixed ATT&CK Navigator links
  • Loading branch information
@fastlorenzo
fastlorenzo authored Mar 19, 2023
2 parents 43ef6d7 + cfbbd5b commit 398dd5f
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion server/templates/redelk_kibana_visualization.ndjson
View file
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@
{"attributes": {"description": "", "kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"}, "savedSearchRefName": "search_0", "title": "RedELK - Screenshots total count", "uiStateJSON": "{}", "version": 1, "visState": "{\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Screenshots\"}}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}},\"title\":\"RedELK - Screenshots total count\"}"}, "coreMigrationVersion": "7.16.3", "id": "389dddc0-d317-11ea-9301-a30a04251ae9", "migrationVersion": {"visualization": "7.14.0"}, "references": [{"id": "e8de79f0-b6aa-11e8-bc1a-cf8fa3255855", "name": "search_0", "type": "search"}], "sort": [1665957492205, 27608], "type": "visualization", "version": "1"}
{"attributes": {"description": "", "kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"}, "savedSearchRefName": "search_0", "title": "RedELK - Alarmed IOC over time", "uiStateJSON": "{}", "version": 1, "visState": "{\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Alarmed IOC\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-30h\",\"to\":\"now\"},\"useNormalizedEsInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}}}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Alarmed IOC\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Alarmed IOC\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true,\"circlesRadius\":1}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"},\"palette\":{\"type\":\"palette\",\"name\":\"kibana_palette\"},\"isVislibVis\":true,\"detailedTooltip\":true},\"title\":\"RedELK - Alarmed IOC over time\"}"}, "coreMigrationVersion": "7.16.3", "id": "3ae6c0c0-d4e2-11ea-9301-a30a04251ae9", "migrationVersion": {"visualization": "7.14.0"}, "references": [{"id": "10da2290-d4e2-11ea-9301-a30a04251ae9", "name": "search_0", "type": "search"}], "sort": [1665957492205, 27610], "type": "visualization", "version": "1"}
{"attributes": {"description": "", "kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"}, "savedSearchRefName": "search_0", "title": "RedELK - Downloads per user tag cloud", "uiStateJSON": "{}", "version": 1, "visState": "{\"type\":\"tagcloud\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"user.name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Downloads\"}}],\"params\":{\"scale\":\"linear\",\"orientation\":\"single\",\"minFontSize\":18,\"maxFontSize\":72,\"showLabel\":false,\"palette\":{\"type\":\"palette\",\"name\":\"kibana_palette\"}},\"title\":\"RedELK - Downloads per user tag cloud\"}"}, "coreMigrationVersion": "7.16.3", "id": "41f94ad0-d04c-11ea-9301-a30a04251ae9", "migrationVersion": {"visualization": "7.14.0"}, "references": [{"id": "26ba4cb0-0f73-11e9-8e1e-a16db980e11e", "name": "search_0", "type": "search"}], "sort": [1665957492205, 27612], "type": "visualization", "version": "1"}
{"attributes": {"description": "", "kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"}, "title": "RedELK - Dashboard links external", "uiStateJSON": "{}", "version": 1, "visState": "{\"type\":\"markdown\",\"aggs\":[],\"params\":{\"fontSize\":12,\"markdown\":\"**External tools** : [MITRE ATT&CK Navigator](/app/zredelk/attack-navigator/) | [Jupyter Notebook](/jupyter/) | [Neo4j Browser](/neo4jbrowser/) \",\"openLinksInNewTab\":true},\"title\":\"RedELK - Dashboard links external\"}"}, "coreMigrationVersion": "7.16.3", "id": "45491770-0886-11eb-a2d2-171dc8941414", "migrationVersion": {"visualization": "7.14.0"}, "references": [], "sort": [1665957492205, 27613], "type": "visualization", "version": "1"}
{"attributes": {"description": "", "kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"}, "title": "RedELK - Dashboard links external", "uiStateJSON": "{}", "version": 1, "visState": "{\"type\":\"markdown\",\"aggs\":[],\"params\":{\"fontSize\":12,\"markdown\":\"**External tools** : [MITRE ATT&CK Navigator](/app/redelk/attack-navigator/) | [Jupyter Notebook](/jupyter/) | [Neo4j Browser](/neo4jbrowser/) \",\"openLinksInNewTab\":true},\"title\":\"RedELK - Dashboard links external\"}"}, "coreMigrationVersion": "7.16.3", "id": "45491770-0886-11eb-a2d2-171dc8941414", "migrationVersion": {"visualization": "7.14.0"}, "references": [], "sort": [1665957492205, 27613], "type": "visualization", "version": "1"}
{"attributes": {"description": "", "kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"}, "savedSearchRefName": "search_0", "title": "RedELK - TTP Techniques unique count total ", "uiStateJSON": "{}", "version": 1, "visState": "{\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"threat.technique.id\",\"customLabel\":\"MITRE ATT&CK Techniques\"}}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}},\"title\":\"RedELK - TTP Techniques unique count total \"}"}, "coreMigrationVersion": "7.16.3", "id": "464660c0-d360-11ea-9301-a30a04251ae9", "migrationVersion": {"visualization": "7.14.0"}, "references": [{"id": "cc523820-d021-11ea-9301-a30a04251ae9", "name": "search_0", "type": "search"}], "sort": [1665957492205, 27615], "type": "visualization", "version": "1"}
{"attributes": {"description": "", "kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"}, "title": "RedELK - HTTP Redir filters", "uiStateJSON": "{}", "version": 1, "visState": "{\"title\":\"RedELK - HTTP Redir filters\",\"type\":\"input_control_vis\",\"aggs\":[],\"params\":{\"controls\":[{\"id\":\"1627506187584\",\"fieldName\":\"redir.backend.name\",\"parent\":\"\",\"label\":\"Backend\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_0_index_pattern\"},{\"id\":\"1627507362404\",\"fieldName\":\"source.as.organization.name\",\"parent\":\"\",\"label\":\"ASN\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_1_index_pattern\"},{\"id\":\"1627507398459\",\"fieldName\":\"source.geo.country_iso_code\",\"parent\":\"\",\"label\":\"Country\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_2_index_pattern\"},{\"id\":\"1627507415074\",\"fieldName\":\"tags\",\"parent\":\"\",\"label\":\"Tags\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_3_index_pattern\"}],\"updateFiltersOnChange\":true,\"useTimeFilter\":true,\"pinFilters\":false}}"}, "coreMigrationVersion": "7.16.3", "id": "56350050-efe7-11eb-8a9f-2572da287875", "migrationVersion": {"visualization": "7.14.0"}, "references": [{"id": "redirtraffic", "name": "control_0_index_pattern", "type": "index-pattern"}, {"id": "redirtraffic", "name": "control_1_index_pattern", "type": "index-pattern"}, {"id": "redirtraffic", "name": "control_2_index_pattern", "type": "index-pattern"}, {"id": "redirtraffic", "name": "control_3_index_pattern", "type": "index-pattern"}], "sort": [1665957492205, 27620], "type": "visualization", "version": "1"}
{"attributes": {"description": "", "kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"}, "savedSearchRefName": "search_0", "title": "RedELK - Implants total count ", "uiStateJSON": "{}", "version": 1, "visState": "{\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Implants\"}}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}},\"title\":\"RedELK - Implants total count \"}"}, "coreMigrationVersion": "7.16.3", "id": "57626ad0-d355-11ea-9301-a30a04251ae9", "migrationVersion": {"visualization": "7.14.0"}, "references": [{"id": "68e8e870-b6aa-11e8-bc1a-cf8fa3255855", "name": "search_0", "type": "search"}], "sort": [1665957492205, 27622], "type": "visualization", "version": "1"}
Expand Down

0 comments on commit 398dd5f

Please sign in to comment.