Skip to content
This repository has been archived by the owner on Jun 5, 2023. It is now read-only.

Issues: NVISOsecurity/ee-outliers

29 Open 131 Closed
29 Open 131 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Wrong count of number of outliers and whitelisted outliers
#580 opened Aug 17, 2020 by maximilienroberti
@maximilienroberti
Improvement idea sudden_appearance model
#579 opened Aug 17, 2020 by maximilienroberti
@maximilienroberti
whitelist information should not be added to events
#560 opened Jul 22, 2020 by daanraman
@maximilienroberti
2
Notifier TheHive
#532 opened Jun 15, 2020 by V1D1AN
1
Add parameter to use cases to not re-analyze previously tagged events per use case
#514 opened Apr 15, 2020 by daanraman
add use_derived_fields to the examples using the timestamp grok filter field
#512 opened Apr 10, 2020 by daanraman
Factor out copying of defaults config file & move to Ansible
#501 opened Apr 7, 2020 by daanraman
Add a new detection metric: string similarity
#458 opened Mar 16, 2020 by daanraman
Deal with exotic DSL queries in configuration INI file with special characters
#455 opened Mar 2, 2020 by daanraman
global whitelist not applied to historical matches for which use case has been removed
#454 opened Mar 2, 2020 by daanraman
@michielmeersmans
Optimize terms queries by using composite aggragations
#452 opened Feb 17, 2020 by olivierbuez
@daanraman
Create logging StreamHandler with sys.stdout as output stream
#450 opened Feb 10, 2020 by michielmeersmans
Build in support for CPU & Memory throttling through docker compose file
#442 opened Jan 24, 2020 by daanraman
Handle ES conflict errors causing outliers to stop/restart
#422 opened Nov 18, 2019 by jvanwilder
@michielmeersmans
1
optimize outliers whitelisting by FIRST checking the outliers dictionary and then all the other fields to triage
#293 opened Aug 2, 2019 by daanraman
1
Adapt across_aggregators for coeff_of_variation in Terms Analyzer
#254 opened Jul 26, 2019 by detobel36
@daanraman
1
Create documentation about es_dsl_filter to triage
#131 opened Jun 28, 2019 by detobel36
detect long running use cases and make them stop if they keep running too long enhancement New feature or request
#100 opened May 3, 2019 by daanraman
@daanraman
Add possiblity to specify a list of elasticsearch node instead of one enhancement New feature or request to triage
#69 opened Apr 9, 2019 by olivierbuez
2
support target value transformations such as to_lowercase to triage
#66 opened Apr 5, 2019 by daanraman
1
Look into ways of throttling running of ee-outliers (less CPU's, ...)
#61 opened Apr 5, 2019 by daanraman
1
Implement Local Outlier Factor as trigger_method good first issue Good for newcomers to triage
#59 opened Apr 3, 2019 by daanraman
New metrics idea: obfuscation encoded length enhancement New feature or request to triage
#38 opened Jan 28, 2019 by daanraman
Verify that pct_of_average and other trigger methods actually takes into account the total number of hits for each bucket to triage
#34 opened Jan 15, 2019 by daanraman
1
Add support for target_count_method in metrics models enhancement New feature or request to triage
#31 opened Jan 14, 2019 by daanraman
ProTip! Adding no:label will show everything without a label.