Request the output result send to SIEM #13

jjjan · 2018-01-08T07:57:04Z

add output of sinkholed and malicious domain detection to SIEM such as splunk.

dpicollege · 2018-01-10T13:05:42Z

good request we need the data send to SIEM in real time with this standard. for example
time,src ip, src port,dst ip,dst port, request domain, if malicious domain detect(write it here), ref(which service detect that for example google dns, if blocked(by user intent), and etc that's you think useful.
thanks

NavyTitanium and others added 30 commits January 4, 2018 20:47

Delete CHANGELOG

1766c29

Delete TODO

72cdc45

Delete dnschef.ini

48c7feb

Update dnschef.py

dec9df7

Update dnschef.py

c1e81d8

Update dnschef.py

f825e69

Update dnschef.py

8844e7f

Update dnschef.py

416f49a

Update dnschef.py

a4ad608

Update dnschef.py

e3ad693

Update dnschef.py

5f0be9c

Create async-test.py

b634ebf

Create domains.txt

a7a070f

Create index.md

34555e3

Update index.md

21e5340

Update index.md

5f71757

Update async-test.py

e07ed7a

Update async-test.py

9ea916e

Update async-test.py

a1da0d7

Update index.md

9564520

Update index.md

a1b489a

Update index.md

c71b2bb

d

5111087

Update README

ee60909

Update README

2727022

Rename README to index.md

108f2d7

Rename index.md to README.md

4b8610d

BIND Configuration Files

b746aa1

BIND Configuration Files

9cc352c

Update named.conf

8d24df1

NavyTitanium and others added 17 commits January 6, 2018 14:16

Update README.md

1d668c5

Update README.md

3641a5a

Update README.md

44fa284

Set theme jekyll-theme-midnight

4ffd202

Create index.md

347524e

Update index.md

36ff941

Add files via upload

e03c572

Update index.md

7ce6045

Update index.md

3ea315e

Update index.md

c36db2d

Optional - blockpage where users get redirected

3fbee83

Optional - blockpage where users get redirected

631a2c2

Update dnsMasterChef.py

c74972b

Updated IP to ASN database - IPv4 only

0761366

Update named.conf

65a8cd1

Update index.md

6d08770

Update index.md

a362086

jjjan changed the title ~~Request~~ Request the output result send to SIEM Jan 8, 2018

NavyTitanium and others added 6 commits January 9, 2018 17:24

Update named.conf

688f0ed

Avoid conflict with RFC 6762

c6886ab

file does not end with newline

25372ff

Missing subnet mask

86ad3bb

Update README.md

4b92150

Minor improvement

8610cb4

NavyTitanium and others added 5 commits January 12, 2018 19:00

Create requirements.txt

9d52926

Update README.md

a3d5195

Update README.md

e0b2025

Updating IP to AS database

0b9aac7

Update dnsMasterChef.py

e1c21da

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Request the output result send to SIEM #13

Request the output result send to SIEM #13

jjjan commented Jan 8, 2018

dpicollege commented Jan 10, 2018

Request the output result send to SIEM #13

Are you sure you want to change the base?

Request the output result send to SIEM #13

Conversation

jjjan commented Jan 8, 2018

dpicollege commented Jan 10, 2018