Skip to content

pipe-list.md

Latest commit

 

History

History
30 lines (21 loc) · 812 Bytes

pipe-list.md

File metadata and controls

30 lines (21 loc) · 812 Bytes
Raw

pipe list

Schema ID: https://github.com/NextronSystems/jsonlog/thorlog/v3/windows-pipe-list | JSON Schema: https://json-schema.org/draft/2020-12/schema | Definition: WindowsPipeList

Fields

Field names are shown in UPPERCASE as used in Sigma rules. The lowercase JSON name is shown in parentheses for reference.

Sigma Field JSON Name Type Required Description Example Values
PIPES pipes array of string ✅
TYPE type string ✅

No nested fields in this type.

Sigma Rule Template

logsource:
    product: THOR
    service: "pipe list"

detection:
    selection:
        PIPES: '192.168.1.100'
    condition: selection

level: medium