| { | |
| "idx_to_label": { | |
| "0": "aws|cloudtrail", | |
| "1": "azure|activitylogs", | |
| "2": "azure|auditlogs", | |
| "3": "azure|pim", | |
| "4": "azure|riskdetection", | |
| "5": "azure|signinlogs", | |
| "6": "bitbucket|audit", | |
| "7": "category:antivirus", | |
| "8": "category:database", | |
| "9": "category:dns_query", | |
| "10": "cisco|duo", | |
| "11": "gcp|gcp.audit", | |
| "12": "gcp|google_workspace.admin", | |
| "13": "gcp|google_workspace.login", | |
| "14": "github|audit", | |
| "15": "jvm|application", | |
| "16": "kubernetes|audit", | |
| "17": "linux", | |
| "18": "linux|auditd", | |
| "19": "linux|clamav", | |
| "20": "linux|file_event", | |
| "21": "linux|guacamole", | |
| "22": "linux|network_connection", | |
| "23": "linux|process_creation", | |
| "24": "linux|sshd", | |
| "25": "linux|syslog", | |
| "26": "linux|vsftpd", | |
| "27": "m365|audit", | |
| "28": "m365|exchange", | |
| "29": "m365|threat_management", | |
| "30": "nodejs|application", | |
| "31": "okta|okta", | |
| "32": "onelogin|onelogin.events", | |
| "33": "opencanary|application", | |
| "34": "python|application", | |
| "35": "rpc_firewall|application", | |
| "36": "ruby_on_rails|application", | |
| "37": "spring|application", | |
| "38": "sql|application", | |
| "39": "velocity|application", | |
| "40": "windows|process_creation", | |
| "41": "windows|security", | |
| "42": "windows|sysmon" | |
| }, | |
| "labels": [ | |
| "aws|cloudtrail", | |
| "azure|activitylogs", | |
| "azure|auditlogs", | |
| "azure|pim", | |
| "azure|riskdetection", | |
| "azure|signinlogs", | |
| "bitbucket|audit", | |
| "category:antivirus", | |
| "category:database", | |
| "category:dns_query", | |
| "cisco|duo", | |
| "gcp|gcp.audit", | |
| "gcp|google_workspace.admin", | |
| "gcp|google_workspace.login", | |
| "github|audit", | |
| "jvm|application", | |
| "kubernetes|audit", | |
| "linux", | |
| "linux|auditd", | |
| "linux|clamav", | |
| "linux|file_event", | |
| "linux|guacamole", | |
| "linux|network_connection", | |
| "linux|process_creation", | |
| "linux|sshd", | |
| "linux|syslog", | |
| "linux|vsftpd", | |
| "m365|audit", | |
| "m365|exchange", | |
| "m365|threat_management", | |
| "nodejs|application", | |
| "okta|okta", | |
| "onelogin|onelogin.events", | |
| "opencanary|application", | |
| "python|application", | |
| "rpc_firewall|application", | |
| "ruby_on_rails|application", | |
| "spring|application", | |
| "sql|application", | |
| "velocity|application", | |
| "windows|process_creation", | |
| "windows|security", | |
| "windows|sysmon" | |
| ] | |
| } |