Kibana Dashboards about malcolm HOT 5 CLOSED

Hey, Doug. Malcolm's Kibana dashboards were modeled after Security Onion's but they were totally redone since the zeek log attribute names used by Moloch (which is what I'm normalizing all of our zeek logs to match) are named differently than the names used by Security Onion. But they are definitely inspired by and modeled after Security Onion, for sure, so I absolutely agree we should have an attribution in there. Would a mention in the README.md documentation suffice?

from malcolm.

What about, like:

Many of Malcolm's prebuilt visualizations for Zeek logs are heavily inspired by the excellent Kibana Dashboards that are part of Security Onion.

Or is there some other wording you would prefer?

from malcolm.

By the way, I'm a big fan of your work. Security Onion is outstanding.

from malcolm.

Hey @mmguero ,

That wording sounds fine, thanks!

Perhaps there are other ways we can collaborate in the future.

Thanks!

from malcolm.

No problem, and I apologize for not having that in there originally. I totally agree! I've submitted a minor pull request or two to S.O. in the past (under a different GitHub handle) as I have used it in some analyst training I've done in another project. If I ever come up with any ways our projects can benefit each other I'll reach out. Cheers!

from malcolm.