Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

New Cisco AnyConnect/DHCP, updated PrintService maps #158

Merged
merged 17 commits into from
Jul 6, 2021

Conversation

esecrpm
Copy link
Contributor

@esecrpm esecrpm commented Jul 6, 2021

Description

Please include a summary of the change and (if applicable) which issue is fixed.

Checklist:

Please replace every instance of [ ] with [X]

  • I have ensured a Provider is listed for the new Map(s) being submitted
  • I have ensured the filename(s) of any new Map(s) being submitted follows the approved format, i.e. Channel-Name_Provider-Name_EventID.map. In summary, all spaces and special characters are replaced with a hyphen with an underscore separates Channel Name, Provider Name, and Event ID
  • I have tested and validated the new Map(s) work with my test data and achieve the desired output
  • I have provided example event data (# Example Event Data:) at the bottom of my Map(s), if possible
  • I have consulted the Guide/Template to ensure my Map(s) follow the same format

Thank you for your submission and for contributing to the DFIR community!

esecrpm added 8 commits July 2, 2021 08:40
New map to capture Cisco AnyConnect VPN connection established events.
New map to capture Cisco AnyConnect VPN Active Interface Address.
New map to capture Cisco AnyConnect VPN Host Configuration, including VPN client public and private addresses.
New map to capture Cisco AnyConnect VPN client public address.
New map to capture Cisco AnyConnect VPN session established events.
New map to capture WiFi beacon SSID values.
Include both Document Name (requires Group Policy Change) and Printer Port (records full path of print to PDF).
@AndrewRathbun
Copy link
Collaborator

I will take care of it this time but please check the lint details. Lots of trailing spaces.

@AndrewRathbun AndrewRathbun merged commit bf53d67 into EricZimmerman:master Jul 6, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants