Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Sophos firewall XG series Decoders and Rules #519

Closed
wants to merge 1 commit into from
Closed

Sophos firewall XG series Decoders and Rules #519

wants to merge 1 commit into from

Conversation

jmmallorq
Copy link
Contributor

I added new Decoder and Rules files to parse Sophos firewall XG210 logs.
Files:

  • decoders/0500-sophos_fw_decoders.xml
  • rules/0690-sophos_fw_rules.xml
  • tools/rules-testing/tests/sophos_fw.ini

Test result:

# python runtests.py
- [ File = ./tests/sophos_fw.ini ] ---------
..........

Regards.

@jmmallorq jmmallorq added operations rules Rules related issues decoders Decoders related issues labels Nov 11, 2019
@jmmallorq jmmallorq self-assigned this Nov 11, 2019
@h0rv4th h0rv4th mentioned this pull request Jan 30, 2020
Closed
@MiguelCasaresRobles MiguelCasaresRobles added the threatintel Threat Intelligence label Jan 8, 2021
@72nomada 72nomada added the threatintel/migrate ready for a ride to wazuh/wazuh label Jan 23, 2021
@juanrricci
Copy link

Hello team, we close this PR without applying changes in the current repository. However, they were applied with minimal changes (addressing compatibility with the whole ruleset) in the Wazuh last version repository under the following PR: wazuh/wazuh#7289.

@juanrricci juanrricci closed this Jan 29, 2021
@juanrricci juanrricci mentioned this pull request Jan 29, 2021
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@juanrricci juanrricci Awaiting requested review from juanrricci

Assignees

@jmmallorq jmmallorq

Labels
decoders Decoders related issues operations rules Rules related issues threatintel/migrate ready for a ride to wazuh/wazuh threatintel Threat Intelligence
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
4 participants
@jmmallorq @juanrricci @MiguelCasaresRobles @72nomada