{ "name": "tychon", "title": "TYCHON Agentless", "version": "0.4.0", "release": "beta", "source": { "license": "Elastic-2.0" }, "description": "Collect complete master endpoint datasets including vulnerability and STIG to comply with DISA endpoint requirements and C2C without adding services to your endpoints.", "type": "integration", "download": "/epr/tychon/tychon-0.4.0.zip", "path": "/package/tychon/0.4.0", "icons": [ { "src": "/img/TychonLogo.svg", "path": "/package/tychon/0.4.0/img/TychonLogo.svg", "title": "TYCHON", "size": "32x32", "type": "image/svg+xml" } ], "conditions": { "kibana": { "version": "^8.14.0 || ^9.0.0" }, "elastic": { "subscription": "basic", "capabilities": [ "security" ] } }, "owner": { "type": "partner", "github": "elastic/security-service-integrations" }, "categories": [ "security", "config_management", "vulnerability_management" ], "signature_path": "/epr/tychon/tychon-0.4.0.zip.sig", "format_version": "3.2.2", "readme": "/package/tychon/0.4.0/docs/README.md", "license": "basic", "screenshots": [ { "src": "/img/screenshot-v-dashboards.png", "path": "/package/tychon/0.4.0/img/screenshot-v-dashboards.png", "title": "Dashboards", "size": "1908x3034", "type": "image/png" }, { "src": "/img/screenshot-v-dashboard-tychon-arp-tables.png", "path": "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-arp-tables.png", "title": "Dashboard [TYCHON] ARP Tables", "size": "1920x2043", "type": "image/png" }, { "src": "/img/screenshot-v-dashboard-tychon-browser-configuration.png", "path": "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-browser-configuration.png", "title": "Dashboard [TYCHON] Browser Configuration", "size": "1920x2043", "type": "image/png" }, { "src": "/img/screenshot-v-dashboard-tychon-encryption-usage-summary-dashboard.png", "path": "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-encryption-usage-summary-dashboard.png", "title": "Dashboard [TYCHON] Encryption Usage Summary Dashboard", "size": "1920x2043", "type": "image/png" }, { "src": "/img/screenshot-v-dashboard-tychon-endpoint-browser-benchmark-results.png", "path": "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-endpoint-browser-benchmark-results.png", "title": "Dashboard [TYCHON] Endpoint Browser - Benchmark Results", "size": "1920x2043", "type": "image/png" }, { "src": "/img/screenshot-v-dashboard-tychon-endpoint-browser-drives-and-disks.png", "path": "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-endpoint-browser-drives-and-disks.png", "title": "Dashboard [TYCHON] Endpoint Browser - Drives and Disks", "size": "1920x2043", "type": "image/png" }, { "src": "/img/screenshot-v-dashboard-tychon-endpoint-browser-endpoint-protection.png", "path": "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-endpoint-browser-endpoint-protection.png", "title": "Dashboard [TYCHON] Endpoint Browser - Endpoint Protection", "size": "1920x2043", "type": "image/png" }, { "src": "/img/screenshot-v-dashboard-tychon-endpoint-browser-hardware-inventory.png", "path": "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-endpoint-browser-hardware-inventory.png", "title": "Dashboard [TYCHON] Endpoint Browser - Hardware Inventory", "size": "1920x2043", "type": "image/png" }, { "src": "/img/screenshot-v-dashboard-tychon-endpoint-browser-host-information.png", "path": "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-endpoint-browser-host-information.png", "title": "Dashboard [TYCHON] Endpoint Browser - Host Information", "size": "1920x2043", "type": "image/png" }, { "src": "/img/screenshot-v-dashboard-tychon-endpoint-browser-network-cards.png", "path": "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-endpoint-browser-network-cards.png", "title": "Dashboard [TYCHON] Endpoint Browser - Network Cards", "size": "1920x2043", "type": "image/png" }, { "src": "/img/screenshot-v-dashboard-tychon-endpoint-browser-services-and-ports.png", "path": "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-endpoint-browser-services-and-ports.png", "title": "Dashboard [TYCHON] Endpoint Browser - Services and Ports", "size": "1920x2043", "type": "image/png" }, { "src": "/img/screenshot-v-dashboard-tychon-endpoint-browser-software-inventory.png", "path": "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-endpoint-browser-software-inventory.png", "title": "Dashboard [TYCHON] Endpoint Browser - Software Inventory", "size": "1920x2043", "type": "image/png" }, { "src": "/img/screenshot-v-dashboard-tychon-endpoint-browser-vulnerabilities.png", "path": "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-endpoint-browser-vulnerabilities.png", "title": "Dashboard [TYCHON] Endpoint Browser - Vulnerabilities", "size": "1920x2043", "type": "image/png" }, { "src": "/img/screenshot-v-dashboard-tychon-endpoint-protection-status.png", "path": "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-endpoint-protection-status.png", "title": "Dashboard [TYCHON] Endpoint Protection Status", "size": "1920x2043", "type": "image/png" }, { "src": "/img/screenshot-v-dashboard-tychon-exposed-services.png", "path": "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-exposed-services.png", "title": "Dashboard [TYCHON] Exposed Services", "size": "1920x2043", "type": "image/png" }, { "src": "/img/screenshot-v-dashboard-tychon-file-system-certificates.png", "path": "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-file-system-certificates.png", "title": "Dashboard [TYCHON] File System Certificates", "size": "1920x2043", "type": "image/png" }, { "src": "/img/screenshot-v-dashboard-tychon-hardware-inventory.png", "path": "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-hardware-inventory.png", "title": "Dashboard [TYCHON] Hardware Inventory", "size": "1920x2043", "type": "image/png" }, { "src": "/img/screenshot-v-dashboard-tychon-host-cpus.png", "path": "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-host-cpus.png", "title": "Dashboard [TYCHON] Host CPUs", "size": "1920x2043", "type": "image/png" }, { "src": "/img/screenshot-v-dashboard-tychon-host-drives.png", "path": "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-host-drives.png", "title": "Dashboard [TYCHON] Host Drives", "size": "1920x2043", "type": "image/png" }, { "src": "/img/screenshot-v-dashboard-tychon-host-network-adapters.png", "path": "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-host-network-adapters.png", "title": "Dashboard [TYCHON] Host Network Adapters", "size": "1920x2043", "type": "image/png" }, { "src": "/img/screenshot-v-dashboard-tychon-listening-certificates.png", "path": "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-listening-certificates.png", "title": "Dashboard [TYCHON] Listening Certificates", "size": "1920x2043", "type": "image/png" }, { "src": "/img/screenshot-v-dashboard-tychon-port-services-encryption-protocol.png", "path": "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-port-services-encryption-protocol.png", "title": "Dashboard [TYCHON] Port Services Encryption / Protocol", "size": "1920x2043", "type": "image/png" }, { "src": "/img/screenshot-v-dashboard-tychon-stig-report-dashboard.png", "path": "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-stig-report-dashboard.png", "title": "Dashboard [TYCHON] STIG Report Dashboard", "size": "1920x2043", "type": "image/png" }, { "src": "/img/screenshot-v-dashboard-tychon-virtualization-based-security-settings.png", "path": "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-virtualization-based-security-settings.png", "title": "Dashboard [TYCHON] Virtualization Based Security Settings", "size": "1920x2043", "type": "image/png" }, { "src": "/img/screenshot-v-dashboard-tychon-vulnerability-dashboard.png", "path": "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-vulnerability-dashboard.png", "title": "Dashboard [TYCHON] Vulnerability Dashboard", "size": "1920x2043", "type": "image/png" } ], "assets": [ "/package/tychon/0.4.0/DEVELOPMENT.md", "/package/tychon/0.4.0/LICENSE.txt", "/package/tychon/0.4.0/changelog.yml", "/package/tychon/0.4.0/manifest.yml", "/package/tychon/0.4.0/docs/README.md", "/package/tychon/0.4.0/img/TychonLogo.svg", "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-arp-tables.png", "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-browser-configuration.png", "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-encryption-usage-summary-dashboard.png", "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-endpoint-browser-benchmark-results.png", "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-endpoint-browser-drives-and-disks.png", "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-endpoint-browser-endpoint-protection.png", "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-endpoint-browser-hardware-inventory.png", "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-endpoint-browser-host-information.png", "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-endpoint-browser-network-cards.png", "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-endpoint-browser-services-and-ports.png", "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-endpoint-browser-software-inventory.png", "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-endpoint-browser-vulnerabilities.png", "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-endpoint-protection-status.png", "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-exposed-services.png", "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-file-system-certificates.png", "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-hardware-inventory.png", "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-host-cpus.png", "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-host-drives.png", "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-host-network-adapters.png", "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-listening-certificates.png", "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-port-services-encryption-protocol.png", "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-stig-report-dashboard.png", "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-virtualization-based-security-settings.png", "/package/tychon/0.4.0/img/screenshot-v-dashboard-tychon-vulnerability-dashboard.png", "/package/tychon/0.4.0/img/screenshot-v-dashboards.png", "/package/tychon/0.4.0/img/tychon-color.png", "/package/tychon/0.4.0/data_stream/arp/manifest.yml", "/package/tychon/0.4.0/data_stream/arp/sample_event.json", "/package/tychon/0.4.0/data_stream/browser/manifest.yml", "/package/tychon/0.4.0/data_stream/browser/sample_event.json", "/package/tychon/0.4.0/data_stream/ciphers/manifest.yml", "/package/tychon/0.4.0/data_stream/ciphers/sample_event.json", "/package/tychon/0.4.0/data_stream/cmrs/manifest.yml", "/package/tychon/0.4.0/data_stream/cmrs/sample_event.json", "/package/tychon/0.4.0/data_stream/coams/manifest.yml", "/package/tychon/0.4.0/data_stream/coams/sample_event.json", "/package/tychon/0.4.0/data_stream/cpu/manifest.yml", "/package/tychon/0.4.0/data_stream/cpu/sample_event.json", "/package/tychon/0.4.0/data_stream/cve/manifest.yml", "/package/tychon/0.4.0/data_stream/cve/sample_event.json", "/package/tychon/0.4.0/data_stream/epp/manifest.yml", "/package/tychon/0.4.0/data_stream/epp/sample_event.json", "/package/tychon/0.4.0/data_stream/exposedservice/manifest.yml", "/package/tychon/0.4.0/data_stream/exposedservice/sample_event.json", "/package/tychon/0.4.0/data_stream/externaldevicecontrol/manifest.yml", "/package/tychon/0.4.0/data_stream/externaldevicecontrol/sample_event.json", "/package/tychon/0.4.0/data_stream/features/manifest.yml", "/package/tychon/0.4.0/data_stream/features/sample_event.json", "/package/tychon/0.4.0/data_stream/harddrive/manifest.yml", "/package/tychon/0.4.0/data_stream/harddrive/sample_event.json", "/package/tychon/0.4.0/data_stream/hardware/manifest.yml", "/package/tychon/0.4.0/data_stream/hardware/sample_event.json", "/package/tychon/0.4.0/data_stream/host/manifest.yml", "/package/tychon/0.4.0/data_stream/host/sample_event.json", "/package/tychon/0.4.0/data_stream/networkadapter/manifest.yml", "/package/tychon/0.4.0/data_stream/networkadapter/sample_event.json", "/package/tychon/0.4.0/data_stream/softwareinventory/manifest.yml", "/package/tychon/0.4.0/data_stream/softwareinventory/sample_event.json", "/package/tychon/0.4.0/data_stream/stig/manifest.yml", "/package/tychon/0.4.0/data_stream/stig/sample_event.json", "/package/tychon/0.4.0/data_stream/systemcerts/manifest.yml", "/package/tychon/0.4.0/data_stream/systemcerts/sample_event.json", "/package/tychon/0.4.0/data_stream/volume/manifest.yml", "/package/tychon/0.4.0/data_stream/volume/sample_event.json", "/package/tychon/0.4.0/kibana/dashboard/tychon-078edb40-d137-11e9-a2af-693b633cf871-stig.json", "/package/tychon/0.4.0/kibana/dashboard/tychon-0c036be0-3de5-11ee-9610-15dee918f31a-exposedservice.json", "/package/tychon/0.4.0/kibana/dashboard/tychon-19325010-4597-11ee-83e4-c92ed141b9e5-hardware.json", "/package/tychon/0.4.0/kibana/dashboard/tychon-1af57010-41b6-11ee-83e4-c92ed141b9e5-networkadapter.json", "/package/tychon/0.4.0/kibana/dashboard/tychon-267716e0-e9d8-11ed-9d4a-9513ae375d2b-epp.json", "/package/tychon/0.4.0/kibana/dashboard/tychon-2bd4ca50-3dfd-11ee-9610-15dee918f31a-softwareinventory.json", "/package/tychon/0.4.0/kibana/dashboard/tychon-2de7a3c0-3e08-11ee-9610-15dee918f31a-cve.json", "/package/tychon/0.4.0/kibana/dashboard/tychon-380b6c10-3dbd-11ee-9610-15dee918f31a-harddrive.json", "/package/tychon/0.4.0/kibana/dashboard/tychon-3cb855d0-3c5e-11ee-8557-a7ea91123f8b-networkadapter.json", "/package/tychon/0.4.0/kibana/dashboard/tychon-6165bf50-3dbf-11ee-9610-15dee918f31a-host.json", "/package/tychon/0.4.0/kibana/dashboard/tychon-67134e90-886f-11ee-9c38-4f37dc7b49bb-browser.json", "/package/tychon/0.4.0/kibana/dashboard/tychon-75c383c0-e508-11ed-8a95-ab70156d4b18-cve.json", "/package/tychon/0.4.0/kibana/dashboard/tychon-8082ac00-3d41-11ee-9610-15dee918f31a-harddrive.json", "/package/tychon/0.4.0/kibana/dashboard/tychon-8c858ea0-3c74-11ee-8557-a7ea91123f8b-cpu.json", "/package/tychon/0.4.0/kibana/dashboard/tychon-993e07a0-3e02-11ee-9610-15dee918f31a-hardware.json", "/package/tychon/0.4.0/kibana/dashboard/tychon-ae961760-aa58-11ee-a807-b73fc989b238-cipher.json", "/package/tychon/0.4.0/kibana/dashboard/tychon-b85e87c0-41ab-11ee-83e4-c92ed141b9e5-epp.json", "/package/tychon/0.4.0/kibana/dashboard/tychon-cb312af0-3d4c-11ee-9610-15dee918f31a-arp.json", "/package/tychon/0.4.0/kibana/dashboard/tychon-ccc4fb80-8865-11ee-9c38-4f37dc7b49bb-cipher.json", "/package/tychon/0.4.0/kibana/dashboard/tychon-da7f6300-8865-11ee-9c38-4f37dc7b49bb-cipher.json", "/package/tychon/0.4.0/kibana/dashboard/tychon-e1c9c490-41a5-11ee-83e4-c92ed141b9e5-stig.json", "/package/tychon/0.4.0/kibana/dashboard/tychon-e24ce070-3c85-11ee-9610-15dee918f31a-exposedservice.json", "/package/tychon/0.4.0/kibana/dashboard/tychon-e8482f80-99d6-11ee-a807-b73fc989b238-cipher.json", "/package/tychon/0.4.0/kibana/dashboard/tychon-f3f86a20-3d47-11ee-9610-15dee918f31a-host.json", "/package/tychon/0.4.0/kibana/security_rule/0c5a9660-eaa9-11ee-a30d-e7740197132d.json", "/package/tychon/0.4.0/kibana/security_rule/10359860-1139-11ee-af86-538da1394f27.json", "/package/tychon/0.4.0/kibana/security_rule/2140f083-6e39-4df4-ba41-aa1f41cb81b8.json", "/package/tychon/0.4.0/kibana/security_rule/2e5a7e20-1137-11ee-af86-538da1394f27.json", "/package/tychon/0.4.0/kibana/security_rule/2e9c9ac0-1138-11ee-af86-538da1394f27.json", "/package/tychon/0.4.0/kibana/security_rule/55faa99b-ce17-4a41-9f63-4a7439e3543a.json", "/package/tychon/0.4.0/kibana/security_rule/5be38411-3902-4686-8209-1ab75a6d3847.json", "/package/tychon/0.4.0/kibana/security_rule/6040cb5c-5e01-4f4d-af7f-9ca9c11dbdc7.json", "/package/tychon/0.4.0/kibana/security_rule/6839b82b-22bf-418f-a86b-7e7a4cd074d7.json", "/package/tychon/0.4.0/kibana/security_rule/6d34f6dc-4a36-46cd-a4bb-ea2f1a01ab8a.json", "/package/tychon/0.4.0/kibana/security_rule/867e3450-1139-11ee-af86-538da1394f27.json", "/package/tychon/0.4.0/kibana/security_rule/934a39a0-1138-11ee-af86-538da1394f27.json", "/package/tychon/0.4.0/kibana/security_rule/bdf083c5-63cb-41ae-bb7a-563cc4e8719f.json", "/package/tychon/0.4.0/kibana/security_rule/beeea32f-31ba-4be8-9e2c-14de47280aac.json", "/package/tychon/0.4.0/kibana/security_rule/c40eaba1-7507-4fe7-aae5-78e59cd7b8f2.json", "/package/tychon/0.4.0/kibana/security_rule/ccffb8f0-601f-46f6-8ae9-ab8af5e6bbf4.json", "/package/tychon/0.4.0/kibana/security_rule/d0d735ed-08fe-4393-9aa6-120236995152.json", "/package/tychon/0.4.0/data_stream/arp/fields/ecs-required.yml", "/package/tychon/0.4.0/data_stream/arp/fields/fields.yml", "/package/tychon/0.4.0/data_stream/arp/fields/filestream.yml", "/package/tychon/0.4.0/data_stream/arp/fields/is-transform-source-true.yml", "/package/tychon/0.4.0/data_stream/arp/fields/tychon-agent.yml", "/package/tychon/0.4.0/data_stream/arp/fields/tychon-ecs.yml", "/package/tychon/0.4.0/data_stream/browser/fields/ecs-required.yml", "/package/tychon/0.4.0/data_stream/browser/fields/fields.yml", "/package/tychon/0.4.0/data_stream/browser/fields/filestream.yml", "/package/tychon/0.4.0/data_stream/browser/fields/is-transform-source-true.yml", "/package/tychon/0.4.0/data_stream/browser/fields/tychon-agent.yml", "/package/tychon/0.4.0/data_stream/browser/fields/tychon-ecs.yml", "/package/tychon/0.4.0/data_stream/ciphers/fields/ecs-required.yml", "/package/tychon/0.4.0/data_stream/ciphers/fields/fields.yml", "/package/tychon/0.4.0/data_stream/ciphers/fields/filestream.yml", "/package/tychon/0.4.0/data_stream/ciphers/fields/is-transform-source-true.yml", "/package/tychon/0.4.0/data_stream/ciphers/fields/tychon-agent.yml", "/package/tychon/0.4.0/data_stream/ciphers/fields/tychon-ecs.yml", "/package/tychon/0.4.0/data_stream/cmrs/fields/ecs-required.yml", "/package/tychon/0.4.0/data_stream/cmrs/fields/fields.yml", "/package/tychon/0.4.0/data_stream/cmrs/fields/filestream.yml", "/package/tychon/0.4.0/data_stream/cmrs/fields/is-transform-source-true.yml", "/package/tychon/0.4.0/data_stream/cmrs/fields/tychon-agent.yml", "/package/tychon/0.4.0/data_stream/cmrs/fields/tychon-ecs.yml", "/package/tychon/0.4.0/data_stream/coams/fields/ecs-required.yml", "/package/tychon/0.4.0/data_stream/coams/fields/fields.yml", "/package/tychon/0.4.0/data_stream/coams/fields/filestream.yml", "/package/tychon/0.4.0/data_stream/coams/fields/is-transform-source-true.yml", "/package/tychon/0.4.0/data_stream/coams/fields/tychon-agent.yml", "/package/tychon/0.4.0/data_stream/coams/fields/tychon-ecs.yml", "/package/tychon/0.4.0/data_stream/cpu/fields/ecs-required.yml", "/package/tychon/0.4.0/data_stream/cpu/fields/fields.yml", "/package/tychon/0.4.0/data_stream/cpu/fields/filestream.yml", "/package/tychon/0.4.0/data_stream/cpu/fields/is-transform-source-true.yml", "/package/tychon/0.4.0/data_stream/cpu/fields/tychon-agent.yml", "/package/tychon/0.4.0/data_stream/cpu/fields/tychon-ecs.yml", "/package/tychon/0.4.0/data_stream/cve/fields/ecs-required.yml", "/package/tychon/0.4.0/data_stream/cve/fields/fields.yml", "/package/tychon/0.4.0/data_stream/cve/fields/filestream.yml", "/package/tychon/0.4.0/data_stream/cve/fields/is-transform-source-true.yml", "/package/tychon/0.4.0/data_stream/cve/fields/tychon-agent.yml", "/package/tychon/0.4.0/data_stream/cve/fields/tychon-ecs.yml", "/package/tychon/0.4.0/data_stream/epp/fields/ecs-required.yml", "/package/tychon/0.4.0/data_stream/epp/fields/fields.yml", "/package/tychon/0.4.0/data_stream/epp/fields/filestream.yml", "/package/tychon/0.4.0/data_stream/epp/fields/is-transform-source-true.yml", "/package/tychon/0.4.0/data_stream/epp/fields/tychon-agent.yml", "/package/tychon/0.4.0/data_stream/epp/fields/tychon-ecs.yml", "/package/tychon/0.4.0/data_stream/exposedservice/fields/ecs-required.yml", "/package/tychon/0.4.0/data_stream/exposedservice/fields/fields.yml", "/package/tychon/0.4.0/data_stream/exposedservice/fields/filestream.yml", "/package/tychon/0.4.0/data_stream/exposedservice/fields/is-transform-source-true.yml", "/package/tychon/0.4.0/data_stream/exposedservice/fields/tychon-agent.yml", "/package/tychon/0.4.0/data_stream/exposedservice/fields/tychon-ecs.yml", "/package/tychon/0.4.0/data_stream/externaldevicecontrol/fields/ecs-required.yml", "/package/tychon/0.4.0/data_stream/externaldevicecontrol/fields/fields.yml", "/package/tychon/0.4.0/data_stream/externaldevicecontrol/fields/filestream.yml", "/package/tychon/0.4.0/data_stream/externaldevicecontrol/fields/is-transform-source-true.yml", "/package/tychon/0.4.0/data_stream/externaldevicecontrol/fields/tychon-agent.yml", "/package/tychon/0.4.0/data_stream/externaldevicecontrol/fields/tychon-ecs.yml", "/package/tychon/0.4.0/data_stream/features/fields/ecs-required.yml", "/package/tychon/0.4.0/data_stream/features/fields/fields.yml", "/package/tychon/0.4.0/data_stream/features/fields/filestream.yml", "/package/tychon/0.4.0/data_stream/features/fields/is-transform-source-true.yml", "/package/tychon/0.4.0/data_stream/features/fields/tychon-agent.yml", "/package/tychon/0.4.0/data_stream/features/fields/tychon-ecs.yml", "/package/tychon/0.4.0/data_stream/harddrive/fields/ecs-required.yml", "/package/tychon/0.4.0/data_stream/harddrive/fields/fields.yml", "/package/tychon/0.4.0/data_stream/harddrive/fields/filestream.yml", "/package/tychon/0.4.0/data_stream/harddrive/fields/is-transform-source-true.yml", "/package/tychon/0.4.0/data_stream/harddrive/fields/tychon-agent.yml", "/package/tychon/0.4.0/data_stream/harddrive/fields/tychon-ecs.yml", "/package/tychon/0.4.0/data_stream/hardware/fields/ecs-required.yml", "/package/tychon/0.4.0/data_stream/hardware/fields/fields.yml", "/package/tychon/0.4.0/data_stream/hardware/fields/filestream.yml", "/package/tychon/0.4.0/data_stream/hardware/fields/is-transform-source-true.yml", "/package/tychon/0.4.0/data_stream/hardware/fields/tychon-agent.yml", "/package/tychon/0.4.0/data_stream/hardware/fields/tychon-ecs.yml", "/package/tychon/0.4.0/data_stream/host/fields/ecs-required.yml", "/package/tychon/0.4.0/data_stream/host/fields/fields.yml", "/package/tychon/0.4.0/data_stream/host/fields/filestream.yml", "/package/tychon/0.4.0/data_stream/host/fields/is-transform-source-true.yml", "/package/tychon/0.4.0/data_stream/host/fields/tychon-agent.yml", "/package/tychon/0.4.0/data_stream/host/fields/tychon-ecs.yml", "/package/tychon/0.4.0/data_stream/networkadapter/fields/ecs-required.yml", "/package/tychon/0.4.0/data_stream/networkadapter/fields/fields.yml", "/package/tychon/0.4.0/data_stream/networkadapter/fields/filestream.yml", "/package/tychon/0.4.0/data_stream/networkadapter/fields/is-transform-source-true.yml", "/package/tychon/0.4.0/data_stream/networkadapter/fields/tychon-agent.yml", "/package/tychon/0.4.0/data_stream/networkadapter/fields/tychon-ecs.yml", "/package/tychon/0.4.0/data_stream/softwareinventory/fields/ecs-required.yml", "/package/tychon/0.4.0/data_stream/softwareinventory/fields/fields.yml", "/package/tychon/0.4.0/data_stream/softwareinventory/fields/filestream.yml", "/package/tychon/0.4.0/data_stream/softwareinventory/fields/is-transform-source-true.yml", "/package/tychon/0.4.0/data_stream/softwareinventory/fields/tychon-agent.yml", "/package/tychon/0.4.0/data_stream/softwareinventory/fields/tychon-ecs.yml", "/package/tychon/0.4.0/data_stream/stig/fields/ecs-required.yml", "/package/tychon/0.4.0/data_stream/stig/fields/fields.yml", "/package/tychon/0.4.0/data_stream/stig/fields/filestream.yml", "/package/tychon/0.4.0/data_stream/stig/fields/is-transform-source-true.yml", "/package/tychon/0.4.0/data_stream/stig/fields/tychon-agent.yml", "/package/tychon/0.4.0/data_stream/stig/fields/tychon-ecs.yml", "/package/tychon/0.4.0/data_stream/systemcerts/fields/ecs-required.yml", "/package/tychon/0.4.0/data_stream/systemcerts/fields/fields.yml", "/package/tychon/0.4.0/data_stream/systemcerts/fields/filestream.yml", "/package/tychon/0.4.0/data_stream/systemcerts/fields/is-transform-source-true.yml", "/package/tychon/0.4.0/data_stream/systemcerts/fields/tychon-agent.yml", "/package/tychon/0.4.0/data_stream/systemcerts/fields/tychon-ecs.yml", "/package/tychon/0.4.0/data_stream/volume/fields/ecs-required.yml", "/package/tychon/0.4.0/data_stream/volume/fields/fields.yml", "/package/tychon/0.4.0/data_stream/volume/fields/filestream.yml", "/package/tychon/0.4.0/data_stream/volume/fields/is-transform-source-true.yml", "/package/tychon/0.4.0/data_stream/volume/fields/tychon-agent.yml", "/package/tychon/0.4.0/data_stream/volume/fields/tychon-ecs.yml", "/package/tychon/0.4.0/elasticsearch/transform/arp/manifest.yml", "/package/tychon/0.4.0/elasticsearch/transform/arp/transform.yml", "/package/tychon/0.4.0/elasticsearch/transform/browser/manifest.yml", "/package/tychon/0.4.0/elasticsearch/transform/browser/transform.yml", "/package/tychon/0.4.0/elasticsearch/transform/ciphers/manifest.yml", "/package/tychon/0.4.0/elasticsearch/transform/ciphers/transform.yml", "/package/tychon/0.4.0/elasticsearch/transform/coams/manifest.yml", "/package/tychon/0.4.0/elasticsearch/transform/coams/transform.yml", "/package/tychon/0.4.0/elasticsearch/transform/cpu/manifest.yml", "/package/tychon/0.4.0/elasticsearch/transform/cpu/transform.yml", "/package/tychon/0.4.0/elasticsearch/transform/cve/manifest.yml", "/package/tychon/0.4.0/elasticsearch/transform/cve/transform.yml", "/package/tychon/0.4.0/elasticsearch/transform/epp/manifest.yml", "/package/tychon/0.4.0/elasticsearch/transform/epp/transform.yml", "/package/tychon/0.4.0/elasticsearch/transform/exposedservice/manifest.yml", "/package/tychon/0.4.0/elasticsearch/transform/exposedservice/transform.yml", "/package/tychon/0.4.0/elasticsearch/transform/externaldevicecontrol/manifest.yml", "/package/tychon/0.4.0/elasticsearch/transform/externaldevicecontrol/transform.yml", "/package/tychon/0.4.0/elasticsearch/transform/features/manifest.yml", "/package/tychon/0.4.0/elasticsearch/transform/features/transform.yml", "/package/tychon/0.4.0/elasticsearch/transform/harddrive/manifest.yml", "/package/tychon/0.4.0/elasticsearch/transform/harddrive/transform.yml", "/package/tychon/0.4.0/elasticsearch/transform/hardware/manifest.yml", "/package/tychon/0.4.0/elasticsearch/transform/hardware/transform.yml", "/package/tychon/0.4.0/elasticsearch/transform/host/manifest.yml", "/package/tychon/0.4.0/elasticsearch/transform/host/transform.yml", "/package/tychon/0.4.0/elasticsearch/transform/networkadapter/manifest.yml", "/package/tychon/0.4.0/elasticsearch/transform/networkadapter/transform.yml", "/package/tychon/0.4.0/elasticsearch/transform/softwareinventory/manifest.yml", "/package/tychon/0.4.0/elasticsearch/transform/softwareinventory/transform.yml", "/package/tychon/0.4.0/elasticsearch/transform/stig/manifest.yml", "/package/tychon/0.4.0/elasticsearch/transform/stig/transform.yml", "/package/tychon/0.4.0/elasticsearch/transform/systemcerts/manifest.yml", "/package/tychon/0.4.0/elasticsearch/transform/systemcerts/transform.yml", "/package/tychon/0.4.0/elasticsearch/transform/volume/manifest.yml", "/package/tychon/0.4.0/elasticsearch/transform/volume/transform.yml", "/package/tychon/0.4.0/data_stream/arp/agent/stream/filestream.yml.hbs", "/package/tychon/0.4.0/data_stream/arp/elasticsearch/ilm/default_policy.json", "/package/tychon/0.4.0/data_stream/arp/elasticsearch/ingest_pipeline/common_host.yml", "/package/tychon/0.4.0/data_stream/arp/elasticsearch/ingest_pipeline/common_init.yml", "/package/tychon/0.4.0/data_stream/arp/elasticsearch/ingest_pipeline/default.yml", "/package/tychon/0.4.0/data_stream/arp/elasticsearch/ingest_pipeline/rest.yml", "/package/tychon/0.4.0/data_stream/browser/agent/stream/filestream.yml.hbs", "/package/tychon/0.4.0/data_stream/browser/elasticsearch/ilm/default_policy.json", "/package/tychon/0.4.0/data_stream/browser/elasticsearch/ingest_pipeline/common_host.yml", "/package/tychon/0.4.0/data_stream/browser/elasticsearch/ingest_pipeline/common_init.yml", "/package/tychon/0.4.0/data_stream/browser/elasticsearch/ingest_pipeline/default.yml", "/package/tychon/0.4.0/data_stream/browser/elasticsearch/ingest_pipeline/rest.yml", "/package/tychon/0.4.0/data_stream/ciphers/agent/stream/filestream.yml.hbs", "/package/tychon/0.4.0/data_stream/ciphers/elasticsearch/ilm/default_policy.json", "/package/tychon/0.4.0/data_stream/ciphers/elasticsearch/ingest_pipeline/common_host.yml", "/package/tychon/0.4.0/data_stream/ciphers/elasticsearch/ingest_pipeline/common_init.yml", "/package/tychon/0.4.0/data_stream/ciphers/elasticsearch/ingest_pipeline/default.yml", "/package/tychon/0.4.0/data_stream/ciphers/elasticsearch/ingest_pipeline/rest.yml", "/package/tychon/0.4.0/data_stream/cmrs/agent/stream/filestream.yml.hbs", "/package/tychon/0.4.0/data_stream/cmrs/elasticsearch/ilm/default_policy.json", "/package/tychon/0.4.0/data_stream/cmrs/elasticsearch/ingest_pipeline/common_init.yml", "/package/tychon/0.4.0/data_stream/cmrs/elasticsearch/ingest_pipeline/default.yml", "/package/tychon/0.4.0/data_stream/cmrs/elasticsearch/ingest_pipeline/rest.yml", "/package/tychon/0.4.0/data_stream/coams/agent/stream/filestream.yml.hbs", "/package/tychon/0.4.0/data_stream/coams/elasticsearch/ilm/default_policy.json", "/package/tychon/0.4.0/data_stream/coams/elasticsearch/ingest_pipeline/common_host.yml", "/package/tychon/0.4.0/data_stream/coams/elasticsearch/ingest_pipeline/common_init.yml", "/package/tychon/0.4.0/data_stream/coams/elasticsearch/ingest_pipeline/default.yml", "/package/tychon/0.4.0/data_stream/coams/elasticsearch/ingest_pipeline/rest.yml", "/package/tychon/0.4.0/data_stream/cpu/agent/stream/filestream.yml.hbs", "/package/tychon/0.4.0/data_stream/cpu/elasticsearch/ilm/default_policy.json", "/package/tychon/0.4.0/data_stream/cpu/elasticsearch/ingest_pipeline/common_host.yml", "/package/tychon/0.4.0/data_stream/cpu/elasticsearch/ingest_pipeline/common_init.yml", "/package/tychon/0.4.0/data_stream/cpu/elasticsearch/ingest_pipeline/default.yml", "/package/tychon/0.4.0/data_stream/cpu/elasticsearch/ingest_pipeline/rest.yml", "/package/tychon/0.4.0/data_stream/cve/agent/stream/filestream.yml.hbs", "/package/tychon/0.4.0/data_stream/cve/elasticsearch/ilm/default_policy.json", "/package/tychon/0.4.0/data_stream/cve/elasticsearch/ingest_pipeline/common_host.yml", "/package/tychon/0.4.0/data_stream/cve/elasticsearch/ingest_pipeline/common_init.yml", "/package/tychon/0.4.0/data_stream/cve/elasticsearch/ingest_pipeline/default.yml", "/package/tychon/0.4.0/data_stream/cve/elasticsearch/ingest_pipeline/rest.yml", "/package/tychon/0.4.0/data_stream/epp/agent/stream/filestream.yml.hbs", "/package/tychon/0.4.0/data_stream/epp/elasticsearch/ilm/default_policy.json", "/package/tychon/0.4.0/data_stream/epp/elasticsearch/ingest_pipeline/common_host.yml", "/package/tychon/0.4.0/data_stream/epp/elasticsearch/ingest_pipeline/common_init.yml", "/package/tychon/0.4.0/data_stream/epp/elasticsearch/ingest_pipeline/default.yml", "/package/tychon/0.4.0/data_stream/epp/elasticsearch/ingest_pipeline/rest.yml", "/package/tychon/0.4.0/data_stream/exposedservice/agent/stream/filestream.yml.hbs", "/package/tychon/0.4.0/data_stream/exposedservice/elasticsearch/ilm/default_policy.json", "/package/tychon/0.4.0/data_stream/exposedservice/elasticsearch/ingest_pipeline/common_host.yml", "/package/tychon/0.4.0/data_stream/exposedservice/elasticsearch/ingest_pipeline/common_init.yml", "/package/tychon/0.4.0/data_stream/exposedservice/elasticsearch/ingest_pipeline/default.yml", "/package/tychon/0.4.0/data_stream/exposedservice/elasticsearch/ingest_pipeline/rest.yml", "/package/tychon/0.4.0/data_stream/externaldevicecontrol/agent/stream/filestream.yml.hbs", "/package/tychon/0.4.0/data_stream/externaldevicecontrol/elasticsearch/ilm/default_policy.json", "/package/tychon/0.4.0/data_stream/externaldevicecontrol/elasticsearch/ingest_pipeline/common_host.yml", "/package/tychon/0.4.0/data_stream/externaldevicecontrol/elasticsearch/ingest_pipeline/common_init.yml", "/package/tychon/0.4.0/data_stream/externaldevicecontrol/elasticsearch/ingest_pipeline/default.yml", "/package/tychon/0.4.0/data_stream/externaldevicecontrol/elasticsearch/ingest_pipeline/rest.yml", "/package/tychon/0.4.0/data_stream/features/agent/stream/filestream.yml.hbs", "/package/tychon/0.4.0/data_stream/features/elasticsearch/ilm/default_policy.json", "/package/tychon/0.4.0/data_stream/features/elasticsearch/ingest_pipeline/common_host.yml", "/package/tychon/0.4.0/data_stream/features/elasticsearch/ingest_pipeline/common_init.yml", "/package/tychon/0.4.0/data_stream/features/elasticsearch/ingest_pipeline/default.yml", "/package/tychon/0.4.0/data_stream/features/elasticsearch/ingest_pipeline/rest.yml", "/package/tychon/0.4.0/data_stream/harddrive/agent/stream/filestream.yml.hbs", "/package/tychon/0.4.0/data_stream/harddrive/elasticsearch/ilm/default_policy.json", "/package/tychon/0.4.0/data_stream/harddrive/elasticsearch/ingest_pipeline/common_host.yml", "/package/tychon/0.4.0/data_stream/harddrive/elasticsearch/ingest_pipeline/common_init.yml", "/package/tychon/0.4.0/data_stream/harddrive/elasticsearch/ingest_pipeline/default.yml", "/package/tychon/0.4.0/data_stream/harddrive/elasticsearch/ingest_pipeline/rest.yml", "/package/tychon/0.4.0/data_stream/hardware/agent/stream/filestream.yml.hbs", "/package/tychon/0.4.0/data_stream/hardware/elasticsearch/ilm/default_policy.json", "/package/tychon/0.4.0/data_stream/hardware/elasticsearch/ingest_pipeline/common_host.yml", "/package/tychon/0.4.0/data_stream/hardware/elasticsearch/ingest_pipeline/common_init.yml", "/package/tychon/0.4.0/data_stream/hardware/elasticsearch/ingest_pipeline/default.yml", "/package/tychon/0.4.0/data_stream/hardware/elasticsearch/ingest_pipeline/rest.yml", "/package/tychon/0.4.0/data_stream/host/agent/stream/filestream.yml.hbs", "/package/tychon/0.4.0/data_stream/host/elasticsearch/ilm/default_policy.json", "/package/tychon/0.4.0/data_stream/host/elasticsearch/ingest_pipeline/common_host.yml", "/package/tychon/0.4.0/data_stream/host/elasticsearch/ingest_pipeline/common_init.yml", "/package/tychon/0.4.0/data_stream/host/elasticsearch/ingest_pipeline/default.yml", "/package/tychon/0.4.0/data_stream/host/elasticsearch/ingest_pipeline/rest.yml", "/package/tychon/0.4.0/data_stream/networkadapter/agent/stream/filestream.yml.hbs", "/package/tychon/0.4.0/data_stream/networkadapter/elasticsearch/ilm/default_policy.json", "/package/tychon/0.4.0/data_stream/networkadapter/elasticsearch/ingest_pipeline/common_host.yml", "/package/tychon/0.4.0/data_stream/networkadapter/elasticsearch/ingest_pipeline/common_init.yml", "/package/tychon/0.4.0/data_stream/networkadapter/elasticsearch/ingest_pipeline/default.yml", "/package/tychon/0.4.0/data_stream/networkadapter/elasticsearch/ingest_pipeline/rest.yml", "/package/tychon/0.4.0/data_stream/softwareinventory/agent/stream/filestream.yml.hbs", "/package/tychon/0.4.0/data_stream/softwareinventory/elasticsearch/ilm/default_policy.json", "/package/tychon/0.4.0/data_stream/softwareinventory/elasticsearch/ingest_pipeline/common_host.yml", "/package/tychon/0.4.0/data_stream/softwareinventory/elasticsearch/ingest_pipeline/common_init.yml", "/package/tychon/0.4.0/data_stream/softwareinventory/elasticsearch/ingest_pipeline/default.yml", "/package/tychon/0.4.0/data_stream/softwareinventory/elasticsearch/ingest_pipeline/rest.yml", "/package/tychon/0.4.0/data_stream/stig/agent/stream/filestream.yml.hbs", "/package/tychon/0.4.0/data_stream/stig/elasticsearch/ilm/default_policy.json", "/package/tychon/0.4.0/data_stream/stig/elasticsearch/ingest_pipeline/common_host.yml", "/package/tychon/0.4.0/data_stream/stig/elasticsearch/ingest_pipeline/common_init.yml", "/package/tychon/0.4.0/data_stream/stig/elasticsearch/ingest_pipeline/default.yml", "/package/tychon/0.4.0/data_stream/stig/elasticsearch/ingest_pipeline/rest.yml", "/package/tychon/0.4.0/data_stream/systemcerts/agent/stream/filestream.yml.hbs", "/package/tychon/0.4.0/data_stream/systemcerts/elasticsearch/ilm/default_policy.json", "/package/tychon/0.4.0/data_stream/systemcerts/elasticsearch/ingest_pipeline/common_host.yml", "/package/tychon/0.4.0/data_stream/systemcerts/elasticsearch/ingest_pipeline/common_init.yml", "/package/tychon/0.4.0/data_stream/systemcerts/elasticsearch/ingest_pipeline/default.yml", "/package/tychon/0.4.0/data_stream/systemcerts/elasticsearch/ingest_pipeline/rest.yml", "/package/tychon/0.4.0/data_stream/volume/agent/stream/filestream.yml.hbs", "/package/tychon/0.4.0/data_stream/volume/elasticsearch/ilm/default_policy.json", "/package/tychon/0.4.0/data_stream/volume/elasticsearch/ingest_pipeline/common_host.yml", "/package/tychon/0.4.0/data_stream/volume/elasticsearch/ingest_pipeline/common_init.yml", "/package/tychon/0.4.0/data_stream/volume/elasticsearch/ingest_pipeline/default.yml", "/package/tychon/0.4.0/data_stream/volume/elasticsearch/ingest_pipeline/rest.yml", "/package/tychon/0.4.0/elasticsearch/transform/arp/fields/ecs-required.yml", "/package/tychon/0.4.0/elasticsearch/transform/arp/fields/ecs.yml", "/package/tychon/0.4.0/elasticsearch/transform/arp/fields/fields.yml", "/package/tychon/0.4.0/elasticsearch/transform/arp/fields/filestream.yml", "/package/tychon/0.4.0/elasticsearch/transform/arp/fields/is-transform-source-false.yml", "/package/tychon/0.4.0/elasticsearch/transform/arp/fields/tychon-agent.yml", "/package/tychon/0.4.0/elasticsearch/transform/arp/fields/tychon-ecs.yml", "/package/tychon/0.4.0/elasticsearch/transform/browser/fields/ecs-required.yml", "/package/tychon/0.4.0/elasticsearch/transform/browser/fields/ecs.yml", "/package/tychon/0.4.0/elasticsearch/transform/browser/fields/fields.yml", "/package/tychon/0.4.0/elasticsearch/transform/browser/fields/filestream.yml", "/package/tychon/0.4.0/elasticsearch/transform/browser/fields/is-transform-source-false.yml", "/package/tychon/0.4.0/elasticsearch/transform/browser/fields/tychon-agent.yml", "/package/tychon/0.4.0/elasticsearch/transform/browser/fields/tychon-ecs.yml", "/package/tychon/0.4.0/elasticsearch/transform/ciphers/fields/ecs-required.yml", "/package/tychon/0.4.0/elasticsearch/transform/ciphers/fields/ecs.yml", "/package/tychon/0.4.0/elasticsearch/transform/ciphers/fields/fields.yml", "/package/tychon/0.4.0/elasticsearch/transform/ciphers/fields/filestream.yml", "/package/tychon/0.4.0/elasticsearch/transform/ciphers/fields/is-transform-source-false.yml", "/package/tychon/0.4.0/elasticsearch/transform/ciphers/fields/tychon-agent.yml", "/package/tychon/0.4.0/elasticsearch/transform/ciphers/fields/tychon-ecs.yml", "/package/tychon/0.4.0/elasticsearch/transform/coams/fields/ecs-required.yml", "/package/tychon/0.4.0/elasticsearch/transform/coams/fields/ecs.yml", "/package/tychon/0.4.0/elasticsearch/transform/coams/fields/fields.yml", "/package/tychon/0.4.0/elasticsearch/transform/coams/fields/filestream.yml", "/package/tychon/0.4.0/elasticsearch/transform/coams/fields/is-transform-source-false.yml", "/package/tychon/0.4.0/elasticsearch/transform/coams/fields/tychon-agent.yml", "/package/tychon/0.4.0/elasticsearch/transform/coams/fields/tychon-ecs.yml", "/package/tychon/0.4.0/elasticsearch/transform/cpu/fields/ecs-required.yml", "/package/tychon/0.4.0/elasticsearch/transform/cpu/fields/ecs.yml", "/package/tychon/0.4.0/elasticsearch/transform/cpu/fields/fields.yml", "/package/tychon/0.4.0/elasticsearch/transform/cpu/fields/filestream.yml", "/package/tychon/0.4.0/elasticsearch/transform/cpu/fields/is-transform-source-false.yml", "/package/tychon/0.4.0/elasticsearch/transform/cpu/fields/tychon-agent.yml", "/package/tychon/0.4.0/elasticsearch/transform/cpu/fields/tychon-ecs.yml", "/package/tychon/0.4.0/elasticsearch/transform/cve/fields/ecs-required.yml", "/package/tychon/0.4.0/elasticsearch/transform/cve/fields/ecs.yml", "/package/tychon/0.4.0/elasticsearch/transform/cve/fields/fields.yml", "/package/tychon/0.4.0/elasticsearch/transform/cve/fields/filestream.yml", "/package/tychon/0.4.0/elasticsearch/transform/cve/fields/is-transform-source-false.yml", "/package/tychon/0.4.0/elasticsearch/transform/cve/fields/tychon-agent.yml", "/package/tychon/0.4.0/elasticsearch/transform/cve/fields/tychon-ecs.yml", "/package/tychon/0.4.0/elasticsearch/transform/epp/fields/ecs-required.yml", "/package/tychon/0.4.0/elasticsearch/transform/epp/fields/ecs.yml", "/package/tychon/0.4.0/elasticsearch/transform/epp/fields/fields.yml", "/package/tychon/0.4.0/elasticsearch/transform/epp/fields/filestream.yml", "/package/tychon/0.4.0/elasticsearch/transform/epp/fields/is-transform-source-false.yml", "/package/tychon/0.4.0/elasticsearch/transform/epp/fields/tychon-agent.yml", "/package/tychon/0.4.0/elasticsearch/transform/epp/fields/tychon-ecs.yml", "/package/tychon/0.4.0/elasticsearch/transform/exposedservice/fields/ecs-required.yml", "/package/tychon/0.4.0/elasticsearch/transform/exposedservice/fields/ecs.yml", "/package/tychon/0.4.0/elasticsearch/transform/exposedservice/fields/fields.yml", "/package/tychon/0.4.0/elasticsearch/transform/exposedservice/fields/filestream.yml", "/package/tychon/0.4.0/elasticsearch/transform/exposedservice/fields/is-transform-source-false.yml", "/package/tychon/0.4.0/elasticsearch/transform/exposedservice/fields/tychon-agent.yml", "/package/tychon/0.4.0/elasticsearch/transform/exposedservice/fields/tychon-ecs.yml", "/package/tychon/0.4.0/elasticsearch/transform/externaldevicecontrol/fields/ecs-required.yml", "/package/tychon/0.4.0/elasticsearch/transform/externaldevicecontrol/fields/ecs.yml", "/package/tychon/0.4.0/elasticsearch/transform/externaldevicecontrol/fields/fields.yml", "/package/tychon/0.4.0/elasticsearch/transform/externaldevicecontrol/fields/filestream.yml", "/package/tychon/0.4.0/elasticsearch/transform/externaldevicecontrol/fields/is-transform-source-false.yml", "/package/tychon/0.4.0/elasticsearch/transform/externaldevicecontrol/fields/tychon-agent.yml", "/package/tychon/0.4.0/elasticsearch/transform/externaldevicecontrol/fields/tychon-ecs.yml", "/package/tychon/0.4.0/elasticsearch/transform/features/fields/ecs-required.yml", "/package/tychon/0.4.0/elasticsearch/transform/features/fields/ecs.yml", "/package/tychon/0.4.0/elasticsearch/transform/features/fields/fields.yml", "/package/tychon/0.4.0/elasticsearch/transform/features/fields/filestream.yml", "/package/tychon/0.4.0/elasticsearch/transform/features/fields/is-transform-source-false.yml", "/package/tychon/0.4.0/elasticsearch/transform/features/fields/tychon-agent.yml", "/package/tychon/0.4.0/elasticsearch/transform/features/fields/tychon-ecs.yml", "/package/tychon/0.4.0/elasticsearch/transform/harddrive/fields/ecs-required.yml", "/package/tychon/0.4.0/elasticsearch/transform/harddrive/fields/ecs.yml", "/package/tychon/0.4.0/elasticsearch/transform/harddrive/fields/fields.yml", "/package/tychon/0.4.0/elasticsearch/transform/harddrive/fields/filestream.yml", "/package/tychon/0.4.0/elasticsearch/transform/harddrive/fields/is-transform-source-false.yml", "/package/tychon/0.4.0/elasticsearch/transform/harddrive/fields/tychon-agent.yml", "/package/tychon/0.4.0/elasticsearch/transform/harddrive/fields/tychon-ecs.yml", "/package/tychon/0.4.0/elasticsearch/transform/hardware/fields/ecs-required.yml", "/package/tychon/0.4.0/elasticsearch/transform/hardware/fields/ecs.yml", "/package/tychon/0.4.0/elasticsearch/transform/hardware/fields/fields.yml", "/package/tychon/0.4.0/elasticsearch/transform/hardware/fields/filestream.yml", "/package/tychon/0.4.0/elasticsearch/transform/hardware/fields/is-transform-source-false.yml", "/package/tychon/0.4.0/elasticsearch/transform/hardware/fields/tychon-agent.yml", "/package/tychon/0.4.0/elasticsearch/transform/hardware/fields/tychon-ecs.yml", "/package/tychon/0.4.0/elasticsearch/transform/host/fields/ecs-required.yml", "/package/tychon/0.4.0/elasticsearch/transform/host/fields/ecs.yml", "/package/tychon/0.4.0/elasticsearch/transform/host/fields/fields.yml", "/package/tychon/0.4.0/elasticsearch/transform/host/fields/filestream.yml", "/package/tychon/0.4.0/elasticsearch/transform/host/fields/is-transform-source-false.yml", "/package/tychon/0.4.0/elasticsearch/transform/host/fields/tychon-agent.yml", "/package/tychon/0.4.0/elasticsearch/transform/host/fields/tychon-ecs.yml", "/package/tychon/0.4.0/elasticsearch/transform/networkadapter/fields/ecs-required.yml", "/package/tychon/0.4.0/elasticsearch/transform/networkadapter/fields/ecs.yml", "/package/tychon/0.4.0/elasticsearch/transform/networkadapter/fields/fields.yml", "/package/tychon/0.4.0/elasticsearch/transform/networkadapter/fields/filestream.yml", "/package/tychon/0.4.0/elasticsearch/transform/networkadapter/fields/is-transform-source-false.yml", "/package/tychon/0.4.0/elasticsearch/transform/networkadapter/fields/tychon-agent.yml", "/package/tychon/0.4.0/elasticsearch/transform/networkadapter/fields/tychon-ecs.yml", "/package/tychon/0.4.0/elasticsearch/transform/softwareinventory/fields/ecs-required.yml", "/package/tychon/0.4.0/elasticsearch/transform/softwareinventory/fields/ecs.yml", "/package/tychon/0.4.0/elasticsearch/transform/softwareinventory/fields/fields.yml", "/package/tychon/0.4.0/elasticsearch/transform/softwareinventory/fields/filestream.yml", "/package/tychon/0.4.0/elasticsearch/transform/softwareinventory/fields/is-transform-source-false.yml", "/package/tychon/0.4.0/elasticsearch/transform/softwareinventory/fields/tychon-agent.yml", "/package/tychon/0.4.0/elasticsearch/transform/softwareinventory/fields/tychon-ecs.yml", "/package/tychon/0.4.0/elasticsearch/transform/stig/fields/ecs-required.yml", "/package/tychon/0.4.0/elasticsearch/transform/stig/fields/ecs.yml", "/package/tychon/0.4.0/elasticsearch/transform/stig/fields/fields.yml", "/package/tychon/0.4.0/elasticsearch/transform/stig/fields/filestream.yml", "/package/tychon/0.4.0/elasticsearch/transform/stig/fields/is-transform-source-false.yml", "/package/tychon/0.4.0/elasticsearch/transform/stig/fields/tychon-agent.yml", "/package/tychon/0.4.0/elasticsearch/transform/stig/fields/tychon-ecs.yml", "/package/tychon/0.4.0/elasticsearch/transform/systemcerts/fields/ecs-required.yml", "/package/tychon/0.4.0/elasticsearch/transform/systemcerts/fields/ecs.yml", "/package/tychon/0.4.0/elasticsearch/transform/systemcerts/fields/fields.yml", "/package/tychon/0.4.0/elasticsearch/transform/systemcerts/fields/filestream.yml", "/package/tychon/0.4.0/elasticsearch/transform/systemcerts/fields/is-transform-source-false.yml", "/package/tychon/0.4.0/elasticsearch/transform/systemcerts/fields/tychon-agent.yml", "/package/tychon/0.4.0/elasticsearch/transform/systemcerts/fields/tychon-ecs.yml", "/package/tychon/0.4.0/elasticsearch/transform/volume/fields/ecs-required.yml", "/package/tychon/0.4.0/elasticsearch/transform/volume/fields/ecs.yml", "/package/tychon/0.4.0/elasticsearch/transform/volume/fields/fields.yml", "/package/tychon/0.4.0/elasticsearch/transform/volume/fields/filestream.yml", "/package/tychon/0.4.0/elasticsearch/transform/volume/fields/is-transform-source-false.yml", "/package/tychon/0.4.0/elasticsearch/transform/volume/fields/tychon-agent.yml", "/package/tychon/0.4.0/elasticsearch/transform/volume/fields/tychon-ecs.yml" ], "policy_templates": [ { "name": "tychon", "title": "Tychon", "description": "Tychon", "inputs": [ { "type": "filestream", "title": "Tychon", "description": "Tychon" } ], "multiple": true } ], "data_streams": [ { "type": "logs", "dataset": "tychon.arp", "title": "Endpoint Arp Table Information", "release": "beta", "ingest_pipeline": "default", "streams": [ { "input": "filestream", "vars": [ { "name": "paths", "type": "text", "title": "TYCHON Output Arp Location", "multi": true, "required": true, "show_user": true, "default": [ "C:\\ProgramData\\TYCHONCLOUD\\eventlogs\\tychon_arp_info.json", "/var/log/tychoncloud/eventlogs/tychon_arp_info.json" ] }, { "name": "tags", "type": "text", "title": "Tags", "multi": true, "required": true, "show_user": false, "default": [ "tychon-arp" ] }, { "name": "preserve_original_event", "type": "bool", "title": "Preserve original event", "description": "Preserves a raw copy of the original event, added to the field `event.original`", "multi": false, "required": true, "show_user": true, "default": false }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.", "multi": false, "required": false, "show_user": false } ], "template_path": "filestream.yml.hbs", "title": "Endpoint Arp Table Information", "description": "TYCHON will report on the entire ARP table from an endpoint.", "enabled": true, "ingestion_method": "File" } ], "package": "tychon", "path": "arp" }, { "type": "logs", "dataset": "tychon.browser", "title": "Endpoint Browser Configurations", "release": "beta", "ingest_pipeline": "default", "streams": [ { "input": "filestream", "vars": [ { "name": "paths", "type": "text", "title": "TYCHON Output Browser Settings", "multi": true, "required": true, "show_user": true, "default": [ "C:\\ProgramData\\TYCHONCLOUD\\eventlogs\\tychon_browsercryptography_info.json", "/var/log/tychoncloud/eventlogs/tychon_browsercryptography_info.json" ] }, { "name": "tags", "type": "text", "title": "Tags", "multi": true, "required": true, "show_user": false, "default": [ "tychon-browser" ] }, { "name": "preserve_original_event", "type": "bool", "title": "Preserve original event", "description": "Preserves a raw copy of the original event, added to the field `event.original`", "multi": false, "required": true, "show_user": true, "default": false }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.", "multi": false, "required": false, "show_user": false } ], "template_path": "filestream.yml.hbs", "title": "Endpoint Browser Configurations", "description": "TYCHON will report on configuration settings for Chrome, Edge and Firefox Browsers.", "enabled": true, "ingestion_method": "File" } ], "package": "tychon", "path": "browser" }, { "type": "logs", "dataset": "tychon.ciphers", "title": "Certificate Ciphers", "release": "beta", "ingest_pipeline": "default", "streams": [ { "input": "filestream", "vars": [ { "name": "paths", "type": "text", "title": "Certificate Ciphers Log Location (Windows)", "multi": true, "required": true, "show_user": true, "default": [ "C:\\ProgramData\\TYCHONCLOUD\\eventlogs\\tychon_listeningcipher_info.json", "/var/log/tychoncloud/eventlogs/tychon_listeningcipher_info.json" ] }, { "name": "tags", "type": "text", "title": "Tags", "multi": true, "required": true, "show_user": false, "default": [ "tychon-ciphers" ] }, { "name": "preserve_original_event", "type": "bool", "title": "Preserve original event", "description": "Preserves a raw copy of the original event, added to the field `event.original`", "multi": false, "required": true, "show_user": true, "default": false }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.", "multi": false, "required": false, "show_user": false } ], "template_path": "filestream.yml.hbs", "title": "Certificate Ciphers", "description": "Certificate Ciphers that have been gathered from hosted services.", "enabled": true, "ingestion_method": "File" } ], "package": "tychon", "path": "ciphers" }, { "type": "logs", "dataset": "tychon.cmrs", "title": "DISA Continuous Monitoring and Risk Scoring Data", "release": "beta", "ingest_pipeline": "default", "streams": [ { "input": "filestream", "vars": [ { "name": "paths", "type": "text", "title": "TYCHON Output CMRS Data Location", "multi": true, "required": true, "show_user": true, "default": [ "C:\\ProgramData\\TYCHONCLOUD\\eventlogs\\tychon_cmrs.json", "/var/log/tychoncloud/eventlogs/tychon_cmrs.json" ] }, { "name": "tags", "type": "text", "title": "Tags", "multi": true, "required": true, "show_user": false, "default": [ "tychon-cmrs" ] }, { "name": "preserve_original_event", "type": "bool", "title": "Preserve original event", "description": "Preserves a raw copy of the original event, added to the field `event.original`", "multi": false, "required": true, "show_user": true, "default": false }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.", "multi": false, "required": false, "show_user": false } ], "template_path": "filestream.yml.hbs", "title": "DISA Continuous Monitoring and Risk Scoring (CMRS)", "description": "TYCHON Agentless will generate the complete Master Endpoint Record for reporting to CMRS, this dataset is unsearchable and encoded but required to send to DISA.", "enabled": true, "ingestion_method": "File" } ], "package": "tychon", "path": "cmrs" }, { "type": "logs", "dataset": "tychon.coams", "title": "Endpoint Operational Attributes (Requires DATT)", "release": "beta", "ingest_pipeline": "default", "streams": [ { "input": "filestream", "vars": [ { "name": "paths", "type": "text", "title": "TYCHON Output Operational Attribute Location", "multi": true, "required": true, "show_user": true, "default": [ "C:\\ProgramData\\TYCHONCLOUD\\eventlogs\\tychon_coams_info.json", "/var/log/tychoncloud/eventlogs/tychon_coams_info.json" ] }, { "name": "tags", "type": "text", "title": "Tags", "multi": true, "required": true, "show_user": false, "default": [ "tychon-coams" ] }, { "name": "preserve_original_event", "type": "bool", "title": "Preserve original event", "description": "Preserves a raw copy of the original event, added to the field `event.original`", "multi": false, "required": true, "show_user": true, "default": false }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.", "multi": false, "required": false, "show_user": false } ], "template_path": "filestream.yml.hbs", "title": "Endpoint Operational Attributes (Requires DATT)", "description": "TYCHON will report the DATT Operational Attributes set on an Endpoint.", "enabled": true, "ingestion_method": "File" } ], "package": "tychon", "path": "coams" }, { "type": "logs", "dataset": "tychon.cpu", "title": "Endpoint CPU Info", "release": "beta", "ingest_pipeline": "default", "streams": [ { "input": "filestream", "vars": [ { "name": "paths", "type": "text", "title": "TYCHON Endpoint CPU Output Location", "multi": true, "required": true, "show_user": true, "default": [ "C:\\ProgramData\\TYCHONCLOUD\\eventlogs\\tychon_cpu_info.json", "/var/log/tychoncloud/eventlogs/tychon_cpu_info.json" ] }, { "name": "tags", "type": "text", "title": "Tags", "multi": true, "required": true, "show_user": false, "default": [ "tychon-cpu" ] }, { "name": "preserve_original_event", "type": "bool", "title": "Preserve original event", "description": "Preserves a raw copy of the original event, added to the field `event.original`", "multi": false, "required": true, "show_user": true, "default": false }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.", "multi": false, "required": false, "show_user": false } ], "template_path": "filestream.yml.hbs", "title": "Endpoint CPU Info", "description": "Endpoint CPU Info", "enabled": true, "ingestion_method": "File" } ], "package": "tychon", "path": "cpu" }, { "type": "logs", "dataset": "tychon.cve", "title": "Vulnerabilites", "release": "beta", "ingest_pipeline": "default", "streams": [ { "input": "filestream", "vars": [ { "name": "paths", "type": "text", "title": "Vulnerability Results Location", "multi": true, "required": true, "show_user": true, "default": [ "C:\\ProgramData\\TYCHONCLOUD\\eventlogs\\tychon_cve_info.json", "/var/log/tychoncloud/eventlogs/tychon_cve_info.json" ] }, { "name": "tags", "type": "text", "title": "Tags", "multi": true, "required": true, "show_user": false, "default": [ "tychon-cve" ] }, { "name": "preserve_original_event", "type": "bool", "title": "Preserve original event", "description": "Preserves a raw copy of the original event, added to the field `event.original`", "multi": false, "required": true, "show_user": true, "default": false }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.", "multi": false, "required": false, "show_user": false } ], "template_path": "filestream.yml.hbs", "title": "Vulnerabilites", "description": "TYCHON reports on tens of thousands of Vulnerabilites, this data stream reads in the results as upserts to your Elastic database.", "enabled": true, "ingestion_method": "File" } ], "package": "tychon", "path": "cve" }, { "type": "logs", "dataset": "tychon.epp", "title": "Endpoint Protection Platform Info", "release": "beta", "ingest_pipeline": "default", "streams": [ { "input": "filestream", "vars": [ { "name": "paths", "type": "text", "title": "TYCHON EPP Output Location", "multi": true, "required": true, "show_user": true, "default": [ "C:\\ProgramData\\TYCHONCLOUD\\eventlogs\\tychon_epp_info.json", "/var/log/tychoncloud/eventlogs/tychon_epp_info.json" ] }, { "name": "tags", "type": "text", "title": "Tags", "multi": true, "required": true, "show_user": false, "default": [ "tychon-epp" ] }, { "name": "preserve_original_event", "type": "bool", "title": "Preserve original event", "description": "Preserves a raw copy of the original event, added to the field `event.original`", "multi": false, "required": true, "show_user": true, "default": false }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.", "multi": false, "required": false, "show_user": false } ], "template_path": "filestream.yml.hbs", "title": "Endpoint Protection Platform Info", "description": "Endpoint Protection Platform Info", "enabled": true, "ingestion_method": "File" } ], "package": "tychon", "path": "epp" }, { "type": "logs", "dataset": "tychon.exposedservice", "title": "Endpoint Exposed Services", "release": "beta", "ingest_pipeline": "default", "streams": [ { "input": "filestream", "vars": [ { "name": "paths", "type": "text", "title": "TYCHON Exposed Services Output Location", "multi": true, "required": true, "show_user": true, "default": [ "C:\\ProgramData\\TYCHONCLOUD\\eventlogs\\tychon_exposedservice_info.json", "/var/log/tychoncloud/eventlogs/tychon_exposedservice_info.json" ] }, { "name": "tags", "type": "text", "title": "Tags", "multi": true, "required": true, "show_user": false, "default": [ "tychon-exposedservice" ] }, { "name": "preserve_original_event", "type": "bool", "title": "Preserve original event", "description": "Preserves a raw copy of the original event, added to the field `event.original`", "multi": false, "required": true, "show_user": true, "default": false }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.", "multi": false, "required": false, "show_user": false } ], "template_path": "filestream.yml.hbs", "title": "Endpoint Exposed Services", "description": "TYCHON will detect open ports and their processes to help determine extrenal exposure for an endpoint.", "enabled": true, "ingestion_method": "File" } ], "package": "tychon", "path": "exposedservice" }, { "type": "logs", "dataset": "tychon.externaldevicecontrol", "title": "Endpoint External Device Control", "release": "beta", "ingest_pipeline": "default", "streams": [ { "input": "filestream", "vars": [ { "name": "disable_cdrom", "type": "bool", "title": "Disable External CD-ROMS", "description": "When switch is enabled TYCHON will enforce policy on the endpoint disabling the ability for users to use CD-ROM drives on endpoints.", "multi": false, "required": true, "show_user": true, "default": false }, { "name": "disable_drive", "type": "bool", "title": "Disable USB Drives", "description": "When swtich is enabled TYCHON will enforce policy on the endpoint disabling the ability for users to add new USB drives to a device that isn't in the hardware whitelist.", "multi": false, "required": true, "show_user": true, "default": false }, { "name": "paths", "type": "text", "title": "TYCHON Device Protection Results Location (Policy changes and events)", "multi": true, "required": true, "show_user": true, "default": [ "C:\\ProgramData\\TYCHONCLOUD\\eventlogs\\tychon_dcm_event_info.json", "C:\\ProgramData\\TYCHONCLOUD\\eventlogs\\tychon_dcm_policy_info.json", "/var/log/tychoncloud/eventlogs/tychon_dcm_event_info.json", "/var/log/tychoncloud/eventlogs/tychon_dcm_policy_info.json" ] }, { "name": "idlist", "type": "text", "title": "USB Drive ID Whitelist", "description": "Put each external USB Drive ID that is allowed to connect to endpoints.", "multi": true, "required": false, "show_user": true }, { "name": "tags", "type": "text", "title": "Tags", "multi": true, "required": true, "show_user": false, "default": [ "tychon-externaldevicecontrol" ] }, { "name": "preserve_original_event", "type": "bool", "title": "Preserve original event", "description": "Preserves a raw copy of the original event, added to the field `event.original`", "multi": false, "required": true, "show_user": true, "default": false }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.", "multi": false, "required": false, "show_user": false } ], "template_path": "filestream.yml.hbs", "title": "Endpoint External Device Control", "description": "TYCHON will ensure external devices like usb hard drives and cdrom drives cannot be used except for the whitelist hardware Identifiers within the policy.", "enabled": true, "ingestion_method": "File" } ], "package": "tychon", "path": "externaldevicecontrol" }, { "type": "logs", "dataset": "tychon.features", "title": "Features Info", "release": "beta", "ingest_pipeline": "default", "streams": [ { "input": "filestream", "vars": [ { "name": "paths", "type": "text", "title": "TYCHON Features", "multi": true, "required": true, "show_user": true, "default": [ "C:\\ProgramData\\TYCHONCLOUD\\eventlogs\\tychon_features_info.json", "/var/log/tychoncloud/eventlogs/tychon_features_info.json" ] }, { "name": "tags", "type": "text", "title": "Tags", "multi": true, "required": true, "show_user": false, "default": [ "tychon-features" ] }, { "name": "preserve_original_event", "type": "bool", "title": "Preserve original event", "description": "Preserves a raw copy of the original event, added to the field `event.original`", "multi": false, "required": true, "show_user": true, "default": false }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.", "multi": false, "required": false, "show_user": false } ], "template_path": "filestream.yml.hbs", "title": "Features Info", "description": "Features Info", "enabled": true, "ingestion_method": "File" } ], "package": "tychon", "path": "features" }, { "type": "logs", "dataset": "tychon.harddrive", "title": "Endpoint Harddrive Info", "release": "beta", "ingest_pipeline": "default", "streams": [ { "input": "filestream", "vars": [ { "name": "paths", "type": "text", "title": "TYCHON Harddrive Output Location", "multi": true, "required": true, "show_user": true, "default": [ "C:\\ProgramData\\TYCHONCLOUD\\eventlogs\\tychon_harddrive_info.json", "/var/log/tychoncloud/eventlogs/tychon_harddrive_info.json" ] }, { "name": "tags", "type": "text", "title": "Tags", "multi": true, "required": true, "show_user": false, "default": [ "tychon-harddrive" ] }, { "name": "preserve_original_event", "type": "bool", "title": "Preserve original event", "description": "Preserves a raw copy of the original event, added to the field `event.original`", "multi": false, "required": true, "show_user": true, "default": false }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.\n", "multi": false, "required": false, "show_user": false } ], "template_path": "filestream.yml.hbs", "title": "Endpoint Harddrive Info", "description": "TYCHON reports all the physical Hard Drive(s) on an endpoint", "enabled": true, "ingestion_method": "File" } ], "package": "tychon", "path": "harddrive" }, { "type": "logs", "dataset": "tychon.hardware", "title": "Hardware Info", "release": "beta", "ingest_pipeline": "default", "streams": [ { "input": "filestream", "vars": [ { "name": "paths", "type": "text", "title": "TYCHON Hardware Output Location", "multi": true, "required": true, "show_user": true, "default": [ "C:\\ProgramData\\TYCHONCLOUD\\eventlogs\\tychon_hardware_info.json", "/var/log/tychoncloud/eventlogs/tychon_hardware_info.json" ] }, { "name": "tags", "type": "text", "title": "Tags", "multi": true, "required": true, "show_user": false, "default": [ "tychon-hardware" ] }, { "name": "preserve_original_event", "type": "bool", "title": "Preserve original event", "description": "Preserves a raw copy of the original event, added to the field `event.original`", "multi": false, "required": true, "show_user": true, "default": false }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.\n", "multi": false, "required": false, "show_user": false } ], "template_path": "filestream.yml.hbs", "title": "Hardware Info", "description": "The physical hardware attached to a computer system.", "enabled": true, "ingestion_method": "File" } ], "package": "tychon", "path": "hardware" }, { "type": "logs", "dataset": "tychon.host", "title": "Host Operating System Info", "release": "beta", "ingest_pipeline": "default", "streams": [ { "input": "filestream", "vars": [ { "name": "paths", "type": "text", "title": "TYCHON Host Operating System Location", "multi": true, "required": true, "show_user": true, "default": [ "C:\\ProgramData\\TYCHONCLOUD\\eventlogs\\tychon_host_info.json", "/var/log/tychoncloud/eventlogs/tychon_host_info.json" ] }, { "name": "tags", "type": "text", "title": "Tags", "multi": true, "required": true, "show_user": false, "default": [ "tychon-host" ] }, { "name": "preserve_original_event", "type": "bool", "title": "Preserve original event", "description": "Preserves a raw copy of the original event, added to the field `event.original`", "multi": false, "required": true, "show_user": true, "default": false }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.", "multi": false, "required": false, "show_user": false } ], "template_path": "filestream.yml.hbs", "title": "Host Operating System Info", "description": "TYCHON collects 1-1 information about an endpoint in this dataset", "enabled": true, "ingestion_method": "File" } ], "package": "tychon", "path": "host" }, { "type": "logs", "dataset": "tychon.networkadapter", "title": "Network Adapters", "release": "beta", "ingest_pipeline": "default", "streams": [ { "input": "filestream", "vars": [ { "name": "paths", "type": "text", "title": "Host Network Adapters Location", "multi": true, "required": true, "show_user": true, "default": [ "C:\\ProgramData\\TYCHONCLOUD\\eventlogs\\tychon_networkadapter_info.json", "/var/log/tychoncloud/eventlogs/tychon_networkadapter_info.json" ] }, { "name": "tags", "type": "text", "title": "Tags", "multi": true, "required": true, "show_user": false, "default": [ "tychon-networkadapter" ] }, { "name": "preserve_original_event", "type": "bool", "title": "Preserve original event", "description": "Preserves a raw copy of the original event, added to the field `event.original`", "multi": false, "required": true, "show_user": true, "default": false }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.", "multi": false, "required": false, "show_user": false } ], "template_path": "filestream.yml.hbs", "title": "Network Adapters", "description": "TYCHON reports on a host endpoints Network Adapters/NICs.", "enabled": true, "ingestion_method": "File" } ], "package": "tychon", "path": "networkadapter" }, { "type": "logs", "dataset": "tychon.softwareinventory", "title": "Endpoint Software Inventory Info", "release": "beta", "ingest_pipeline": "default", "streams": [ { "input": "filestream", "vars": [ { "name": "paths", "type": "text", "title": "TYCHON Software Inventory Output", "multi": true, "required": true, "show_user": true, "default": [ "C:\\ProgramData\\TYCHONCLOUD\\eventlogs\\tychon_softwareinventory_info.json", "/var/log/tychoncloud/eventlogs/tychon_softwareinventory_info.json" ] }, { "name": "tags", "type": "text", "title": "Tags", "multi": true, "required": true, "show_user": false, "default": [ "tychon-softwareinventory" ] }, { "name": "preserve_original_event", "type": "bool", "title": "Preserve original event", "description": "Preserves a raw copy of the original event, added to the field `event.original`", "multi": false, "required": true, "show_user": true, "default": false }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.", "multi": false, "required": false, "show_user": false } ], "template_path": "filestream.yml.hbs", "title": "Endpoint Software Inventory Info", "description": "TYCHON will collect all installed software from the operating system.", "enabled": true, "ingestion_method": "File" } ], "package": "tychon", "path": "softwareinventory" }, { "type": "logs", "dataset": "tychon.stig", "title": "Endpoint STIG Results", "release": "beta", "ingest_pipeline": "default", "streams": [ { "input": "filestream", "vars": [ { "name": "paths", "type": "text", "title": "TYCHON STIG Results Output", "multi": true, "required": true, "show_user": true, "default": [ "C:\\ProgramData\\TYCHONCLOUD\\eventlogs\\tychon_stig_info.json", "/var/log/tychoncloud/eventlogs/tychon_stig_info.json" ] }, { "name": "tags", "type": "text", "title": "Tags", "multi": true, "required": true, "show_user": false, "default": [ "tychon-stig" ] }, { "name": "preserve_original_event", "type": "bool", "title": "Preserve original event", "description": "Preserves a raw copy of the original event, added to the field `event.original`", "multi": false, "required": true, "show_user": true, "default": false }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.", "multi": false, "required": false, "show_user": false } ], "template_path": "filestream.yml.hbs", "title": "Endpoint STIG Results", "description": "Endpoint Benchmark SCAP/XCCDF Scan Results", "enabled": true, "ingestion_method": "File" } ], "package": "tychon", "path": "stig" }, { "type": "logs", "dataset": "tychon.systemcerts", "title": "System Certificates", "release": "beta", "ingest_pipeline": "default", "streams": [ { "input": "filestream", "vars": [ { "name": "paths", "type": "text", "title": "File and Listening Certificate Log Location", "multi": true, "required": true, "show_user": true, "default": [ "C:\\ProgramData\\TYCHONCLOUD\\eventlogs\\tychon_listeningcerts_info.json", "C:\\ProgramData\\TYCHONCLOUD\\eventlogs\\tychon_hostcerts_info.json", "/var/log/tychoncloud/eventlogs/tychon_hostcerts_info.json", "/var/log/tychoncloud/eventlogs/tychon_listeningcerts_info.json" ] }, { "name": "tags", "type": "text", "title": "Tags", "multi": true, "required": true, "show_user": false, "default": [ "tychon-systemcerts" ] }, { "name": "preserve_original_event", "type": "bool", "title": "Preserve original event", "description": "Preserves a raw copy of the original event, added to the field `event.original`", "multi": false, "required": true, "show_user": true, "default": false }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.", "multi": false, "required": false, "show_user": false } ], "template_path": "filestream.yml.hbs", "title": "System Certificates", "description": "Certificates that have been gathered from local endpoints from either the file system, local certificate key stores or listening services.", "enabled": true, "ingestion_method": "File" } ], "package": "tychon", "path": "systemcerts" }, { "type": "logs", "dataset": "tychon.volume", "title": "Endpoint Volumes Info", "release": "beta", "ingest_pipeline": "default", "streams": [ { "input": "filestream", "vars": [ { "name": "paths", "type": "text", "title": "TYCHON Volumes Output", "multi": true, "required": true, "show_user": true, "default": [ "C:\\ProgramData\\TYCHONCLOUD\\eventlogs\\tychon_volume_info.json", "/var/log/tychoncloud/eventlogs/tychon_volume_info.json" ] }, { "name": "tags", "type": "text", "title": "Tags", "multi": true, "required": true, "show_user": false, "default": [ "tychon-volume" ] }, { "name": "preserve_original_event", "type": "bool", "title": "Preserve original event", "description": "Preserves a raw copy of the original event, added to the field `event.original`", "multi": false, "required": true, "show_user": true, "default": false }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.", "multi": false, "required": false, "show_user": false } ], "template_path": "filestream.yml.hbs", "title": "Endpoint Volumes Info", "description": "Endpoint Volumes Info", "enabled": true, "ingestion_method": "File" } ], "package": "tychon", "path": "volume" } ] }