Skip to content
This repository has been archived by the owner on Oct 20, 2023. It is now read-only.

Consider adding log ingestion for common C2 frameworks #11

Closed
xtheorycrafter opened this issue Oct 16, 2022 · 6 comments
Closed

Consider adding log ingestion for common C2 frameworks #11

xtheorycrafter opened this issue Oct 16, 2022 · 6 comments

Comments

@xtheorycrafter
Copy link

Please consider adding log ingestion for common C2 frameworks documented on thec2matrix

@jus0xA
Copy link

jus0xA commented Oct 16, 2022

+1 @xtheorycrafter suggestion, and/or perhaps document the process for using a parser other than the cs-parser to accommodate any C2 framework's logs.

@MarkisK
Copy link

MarkisK commented Oct 17, 2022

+1 @xtheorycrafter I would also as if the can provide sample data from cobalt strike to test with until they implement this feature

@GoldingAustin
Copy link
Collaborator

Thanks for your feedback! You’ll be happy to know we’ve been planning additional C2 framework parsers for a couple of months now. We are still prioritizing which frameworks we’ll tackle first, and we’re looking at community feedback to help inform those decisions! We will also be releasing a guide for creating a custom parser that works with RedEye.

A roadmap will be posted in the next couple weeks here on GitHub so you can track what we're working on and what we have planned!

@GoldingAustin
Copy link
Collaborator

Closing this issue to centralize feedback on other C2 frameworks to #33. Please comment there with other tools you'd like to see parsers for!

@jus0xA
Copy link

jus0xA commented Dec 1, 2022

We will also be releasing a guide for creating a custom parser that works with RedEye.

@GoldingAustin Is there any timeline for this documentation? Thanks!

@GoldingAustin
Copy link
Collaborator

@jus0xA We have yet to set a definite date. We're focusing on creating new parsers that will inform the guide and prevent breaking changes to custom parsers. We're currently targeting mid-2023; please follow #34 for updates!

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants