https://github.com/crowdstrike/logscale-community-content

This repository contains Community and Field contributed content for LogScale

https://github.com/crowdstrike/logscale-community-content

Science Score: 26.0%

This score indicates how likely this project is to be science-related based on various indicators:

  • CITATION.cff file
  • codemeta.json file
    Found codemeta.json file
  • .zenodo.json file
    Found .zenodo.json file
  • DOI references
  • Academic publication links
  • Committers with academic emails
  • Institutional organization owner
  • JOSS paper metadata
  • Scientific vocabulary similarity
    Low similarity (9.5%) to scientific vocabulary

Keywords from Contributors

transformation
Last synced: 11 months ago · JSON representation

Repository

This repository contains Community and Field contributed content for LogScale

Basic Info
  • Host: GitHub
  • Owner: CrowdStrike
  • License: unlicense
  • Language: Shell
  • Default Branch: main
  • Homepage:
  • Size: 92.4 MB
Statistics
  • Stars: 256
  • Watchers: 46
  • Forks: 48
  • Open Issues: 2
  • Releases: 0
Created over 3 years ago · Last pushed 11 months ago
Metadata Files
Readme Contributing License Code of conduct

README.md

CrowdStrike

Community Content

Welcome to the Community Content Repository. This covers both NG-SIEM and LogScale.

To keep it simple, we'll just use the name CQL Community Content for this repo. What is CQL? It's the CrowdStrike Query Language used in both NG-SIEM and LogScale. There is content in here that applies to both.

This repository contains community and field contributed content which includes: - Complete Packages - Queries - Dashboards - Alerts - Lookup Files

...as well as Tutorials and FAQs.

NOTE: These are not meant as replacements for the official documentation or the LogScale Package Marketplace. However, please feel free to use and contribute as much as you'd like.

Content

Here's a quick summary of the various folders in this repository:

  • Log-Sources:
    • Complete packages grouped by vendor and application.
    • Queries, dashboards, alerts, etc.
  • Config-Samples:
    • These folders contain quick starts, configuration examples, and other useful artifacts.
  • Next-Gen-SIEM:
    • Content related specifically to Next-Gen SIEM, e.g. dashboards, queries, etc.
  • Parsers-Only:
    • Standalone parsers beyond the official ones.
  • Queries-Only:
    • Standalone CQL queries for NG-SIEM and LogScale.

Wiki

The wiki can be found here.

Issues and Questions

Is something going wrong? GitHub Issues are used to report bugs and errors. You can check to see if anyone else has reported the issue or create a new issue here: Report Issue

Owner

  • Name: CrowdStrike
  • Login: CrowdStrike
  • Kind: organization
  • Email: github@crowdstrike.com
  • Location: United States of America

GitHub Events

Total
  • Create event: 6
  • Issues event: 3
  • Watch event: 92
  • Delete event: 3
  • Member event: 3
  • Issue comment event: 5
  • Push event: 121
  • Pull request review event: 11
  • Pull request event: 27
  • Gollum event: 29
  • Fork event: 20
Last Year
  • Create event: 6
  • Issues event: 3
  • Watch event: 92
  • Delete event: 3
  • Member event: 3
  • Issue comment event: 5
  • Push event: 121
  • Pull request review event: 11
  • Pull request event: 27
  • Gollum event: 29
  • Fork event: 20

Committers

Last synced: about 1 year ago

All Time
  • Total Commits: 613
  • Total Committers: 30
  • Avg Commits per committer: 20.433
  • Development Distribution Score (DDS): 0.555
Past Year
  • Commits: 223
  • Committers: 12
  • Avg Commits per committer: 18.583
  • Development Distribution Score (DDS): 0.395
Top Committers
Name Email Commits
nlabadie-crwd n****e@c****m 273
Andrew Munchbach a****h@c****m 110
nthnthcandrew 9****w 80
Andrew a****m@c****m 32
OBSEC-Latham 1****m 22
Adam Hogan a****n@g****m 12
Dan g****g@g****m 12
MacGyver 5****r 11
bgraabek 4****k 10
Shane Shellenbarger s****r@c****m 7
Evan Bullock-Morales e****s@c****m 6
Alex Armstrong 5
jsmeyers j****s 5
Andre Mair a****r@c****m 4
NamNguyen-CRWD 1****D 3
Nilesh Khetia n****a@c****m 3
socketz s****z 2
sourav-ri s****v@r****m 2
Sebastian Selig s****g@g****m 2
Tomek Semkiw t****w@c****m 2
Asjad Athick a****k@g****m 1
Adam Hogan a****n@c****m 1
soggysec 1****c 1
nihilstic 4****c 1
canders-crwd 1****d 1
FuzzyBug 1****g 1
Chris Kachigian c****n 1
Curtis Johnson c****n@g****m 1
Eric Sherman e****n@t****m 1
crwd-surf e****l@c****m 1
Committer Domains (Top 20 + Academic)

Issues and Pull Requests

Last synced: 11 months ago

All Time
  • Total issues: 2
  • Total pull requests: 91
  • Average time to close issues: 6 months
  • Average time to close pull requests: 7 days
  • Total issue authors: 2
  • Total pull request authors: 27
  • Average comments per issue: 1.0
  • Average comments per pull request: 0.1
  • Merged pull requests: 71
  • Bot issues: 0
  • Bot pull requests: 0
Past Year
  • Issues: 1
  • Pull requests: 29
  • Average time to close issues: N/A
  • Average time to close pull requests: 18 days
  • Issue authors: 1
  • Pull request authors: 10
  • Average comments per issue: 0.0
  • Average comments per pull request: 0.14
  • Merged pull requests: 16
  • Bot issues: 0
  • Bot pull requests: 0
Top Authors
Issue Authors
  • ChroMagnus (1)
  • sheppyrsa (1)
Pull Request Authors
  • paulmacgyver (14)
  • bgraabek (11)
  • aarmstrong-crwd (10)
  • daningu (7)
  • nthnthcandrew (7)
  • AndreLogScale (6)
  • OBSEC-Latham (6)
  • jsmeyers (6)
  • nlabadie-crwd (5)
  • gumbasek (4)
  • socketz (4)
  • AHogan-CS (4)
  • NamNguyen-CRWD (3)
  • ITrunsDE (3)
  • soggysec (3)
Top Labels
Issue Labels
Pull Request Labels

Dependencies

Config-Samples/EventForwarding-Playground/docker-compose.yml docker
  • confluentinc/cp-kafka 6.2.0
  • confluentinc/cp-kafka-connect-base 6.2.0
  • confluentinc/cp-zookeeper 6.2.0
  • humio/humio latest