diff --git a/content/en/security/cloud_siem/ingest_and_enrich/open_cybersecurity_schema_framework.md b/content/en/security/cloud_siem/ingest_and_enrich/open_cybersecurity_schema_framework.md index ec522ac82f9ae..e9ada080a95ed 100644 --- a/content/en/security/cloud_siem/ingest_and_enrich/open_cybersecurity_schema_framework.md +++ b/content/en/security/cloud_siem/ingest_and_enrich/open_cybersecurity_schema_framework.md @@ -63,27 +63,7 @@ You can optionally add extensions, such as new attributes, objects, categories, The following Log Management integrations support out-of-the-box OCSF pipelines: -- 1Password -- Auth0 -- AWS CloudTrail -- Cisco Duo -- Cisco Meraki -- Cloudflare -- CrowdStrike -- GitHub Telemetry -- Google BigQuery -- Google Cloud -- Google GKE cluster audit logs -- Google Pub Sub -- Google GSuite -- JumpCloud -- Kubernetes audit logs -- LastPass -- Microsoft 365 -- Okta -- Salesforce -- Slack -- Snowflake Web Logs +{{% cloud-siem-supported-ocsf %}} ## View Security Pipelines \- OCSF diff --git a/layouts/shortcodes/cloud-siem-supported-ocsf.html b/layouts/shortcodes/cloud-siem-supported-ocsf.html new file mode 100644 index 0000000000000..e1f431ca7303b --- /dev/null +++ b/layouts/shortcodes/cloud-siem-supported-ocsf.html @@ -0,0 +1,24 @@ + {{/* + Displays the integrations that include support for OCSF pipelines ootb. + */}} + +{{ $data := $.Site.Data.cloud_siem_content_packs }} + +{{ $s := newScratch }} +{{ $s.Set "sorted_data" slice }} + +{{- if ne $data nil -}} + {{- range $category, $content_packs := $data -}} + {{- range $content_packs -}} + {{- if .ocsf_pipelines -}} + {{ $s.Add "sorted_data" .name }} + {{- end -}} + {{- end -}} + {{- end -}} + + +{{- end -}} \ No newline at end of file