Graylog2 / Graylog2/illuminate-documentation
Windows Detection Chains - add/improve documentation
Open
- Dominant language
- HTML
- Stars
- 2
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Description
Note:
The Windows Detection Chains (Graylog 7.2) Content Pack is not a normal Content Pack, it is the enhanced combination of two older content packs but only works on Graylog 7.2 and higher.
The two older content packs get deleted after installation and in the future, we only have one pack.
The old content pack was a SIGMA rule based pack, the new pack is based on Event Definitions.
The Documentation is besides the numbers very similar to the old description.
Contributor guide
Assessment
This issue has not been assessed yet.