
<!-- Static HTML page of log source categorization -->
<template>

  <h2>Kategorie</h2>

  V aplikaci se zdroje logů dělí na následující čtyři kategorie:

  <table border="1" cellpadding="0" cellspacing="0" id="sheet0" class="sheet0 gridlines">
    <col class="col0">
    <col class="col1">
    <tbody>
    <tr class="row0">
      <td class="column0 style2 s"><b>Kategorie zdroje logů</b></td>
      <td class="column1 style2 s"><b>Zkratka</b></td>
    </tr>
    <tr class="row1">
      <td class="column0 style1 s">Bezpečnostní aplikace <i>(Security Application)</i></td>
      <td class="column1 style1 s">sa</td>
    </tr>
    <tr class="row2">
      <td class="column0 style1 s">Operační systém <i>(Operating System)</i></td>
      <td class="column1 style1 s">os</td>
    </tr>
    <tr class="row3">
      <td class="column0 style1 s">Síťové zařízení <i>(Network Device)</i></td>
      <td class="column1 style1 s">nd</td>
    </tr>
    <tr class="row4">
      <td class="column0 style1 s">Ostatní aplikace <i>(Other Application)</i></td>
      <td class="column1 style1 s">oa</td>
    </tr>
    </tbody>
  </table>

  <h2>Zdroje logů</h2>

  V aplikaci jsou podle jednotlivých kategorií zařazeny následující zdroje logů, které je možné zvolit pro návrh korelačních pravidel:
  <table border="1" cellpadding="0" cellspacing="0" id="sheet0" class="sheet0 gridlines">
    <col class="col0">
    <col class="col1">
    <col class="col2">
    <col class="col3">
    <col class="col4">
    <col class="col5">
    <col class="col6">
    <col class="col7">
    <tbody>
    <tr class="row0">
      <td class="column0 style3 s style3" colspan="2"><b>Bezpečnostní aplikace</b></td>
      <td class="column2 style3 s style5" colspan="2"><b>Operační systémy</b></td>
      <td class="column4 style3 s style5" colspan="2"><b>Síťová zařízení</b></td>
      <td class="column6 style3 s style4" colspan="2"><b>Ostatní aplikace</b></td>
    </tr>
    <tr class="row1">
      <td class="column0 style1 s">Antivirus</td>
      <td class="column1 style1 s">av</td>
      <td class="column2 style1 s">Windows</td>
      <td class="column3 style6 s">win</td>
      <td class="column4 style1 s">Apache</td>
      <td class="column5 style6 s">apa</td>
      <td class="column6 style1 s">Amazon Web Service</td>
      <td class="column7 style1 s">aws</td>
    </tr>
    <tr class="row2">
      <td class="column0 style1 s">Identity Access Manager</td>
      <td class="column1 style1 s">iam</td>
      <td class="column2 style1 s">Linux</td>
      <td class="column3 style6 s">lin</td>
      <td class="column4 style1 s">Síťový prvek</td>
      <td class="column5 style6 s">nhw</td>
      <td class="column6 style1 s">Microsoft Azure</td>
      <td class="column7 style1 s">azure</td>
    </tr>
    <tr class="row3">
      <td class="column0 style1 s">Single Sign-On</td>
      <td class="column1 style1 s">sso</td>
      <td class="column2 style1 s">MacOS</td>
      <td class="column3 style6 s">mac</td>
      <td class="column4 style1 s">Databázový server</td>
      <td class="column5 style6 s">dbs</td>
      <td class="column6 style1 s">Python aplikace</td>
      <td class="column7 style1 s">py</td>
    </tr>
    <tr class="row4">
      <td class="column0 style1 s">Zeek</td>
      <td class="column1 style1 s">zeek</td>
      <td class="column2">ESXi</td>
      <td class="column3">esxi</td>
      <td class="column4 style1 s">DNS server</td>
      <td class="column5 style6 s">dnss</td>
      <td class="column6 style1 s">Google Cloud</td>
      <td class="column7 style1 s">gc</td>
    </tr>
    <tr class="row5">
      <td class="column0 style1 s">IDS/IPS</td>
      <td class="column1 style1 s">ids</td>
      <td class="column2">&nbsp;</td>
      <td class="column3">&nbsp;</td>
      <td class="column4 style1 s">Proxy server</td>
      <td class="column5 style6 s">proxy</td>
      <td class="column6 style1 s">GitHub</td>
      <td class="column7 style1 s">gh</td>
    </tr>
    <tr class="row6">
      <td class="column0 style1 s">Firewall</td>
      <td class="column1 style1 s">fw</td>
      <td class="column2">&nbsp;</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">TACACS</td>
      <td class="column5">tac</td>
      <td class="column6 style1 s">Google Workspace</td>
      <td class="column7 style1 s">gwsp</td>
    </tr>
    <tr class="row7">
      <td class="column0 style1 s">RPC Firewall</td>
      <td class="column1 style1 s">rpcfw</td>
      <td class="column2">&nbsp;</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">DHCP server</td>
      <td class="column5">dhcps</td>
      <td class="column6 style1 s">Java Virtual Machine</td>
      <td class="column7 style1 s">jvm</td>
    </tr>
    <tr class="row8">
      <td class="column0">Endpoint Detection and Response</td>
      <td class="column1">edr</td>
      <td class="column2">&nbsp;</td>
      <td class="column3">&nbsp;</td>
      <td class="column4"> </td>
      <td class="column5"> </td>
      <td class="column6 style1 s">Microsoft 365</td>
      <td class="column7 style1 s">m365</td>
    </tr>
    <tr class="row9">
      <td class="column0">Web Application Firewall</td>
      <td class="column1">waf</td>
      <td class="column2">&nbsp;</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
      <td class="column6 style1 s">Spring aplikace</td>
      <td class="column7 style1 s">spr</td>
    </tr>
    <tr class="row10">
      <td class="column0">&nbsp;</td>
      <td class="column1">&nbsp;</td>
      <td class="column2">&nbsp;</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
      <td class="column6 style1 s">Webový server</td>
      <td class="column7 style1 s">webs</td>
    </tr>
    </tbody>
  </table>

  Kromě zdroje logů a kategorie je možné taktéž vložit další informace jako IP adresa, hostname apod., nicméně tyto informace nejsou pro mapování ani pojmenování pravidel zásadní.

</template>

<script>
export default {
  name: "LogSources"
}
</script>

<style scoped>

</style>