AWS CloudTrail Log Normalizer

AWS CloudTrail Log Normalizer

Normalizes and enriches AWS CloudTrail JSON logs into OCSF (Open Cybersecurity Schema Framework) format. Maps eventSource/eventName pairs to MITRE ATT&CK technique IDs using the MITRE ATT&CK STIX API.

Installation

Use the upstream install or setup path that matches your environment:

• Let’s walk through setting up a project that depends on DynamoDB from the SDK and makes a simple service call. The following steps use yarn as an example. These steps assume you have Node.js and yarn already installed.
• git clone https://github.com/aws/aws-sdk-js-v3.git
• yarn && yarn test:all
• yarn pack .

Requirements and caveats from upstream:

• To test your universal JavaScript code in Node.js, browser and react-native environments,
• Node.js and ECMAScript Version Support Policy
• Create a new Node.js project.

Basic usage or getting-started notes:

• Getting Started

• Inside of the project, run: yarn add @aws-sdk/client-dynamodb. Adding packages results in update in lock file, yarn.lock or [p...

• Create a new file called index.js, create a DynamoDB service client and send a request.

• Source: https://github.com/aws/aws-sdk-js-v3

• Extracted from upstream docs: https://raw.githubusercontent.com/aws/aws-sdk-js-v3/HEAD/README.md

Source

• Agent Skill Exchange