Skip to content

Commit

Permalink
Fixed image sizing (#32)
Browse files Browse the repository at this point in the history
  • Loading branch information
scudette authored May 23, 2024
1 parent 037891e commit f8fba29
Show file tree
Hide file tree
Showing 5 changed files with 33 additions and 29 deletions.
2 changes: 1 addition & 1 deletion docs/index.html
Original file line number Diff line number Diff line change
Expand Up @@ -6516,7 +6516,7 @@ <h1 class="display-5 fw-bold text-body-emphasis">
<a class="text-reset fw-bold" href="https://rapid7.com/">Rapid7 Inc</a>
</div>
<div class="me-4 text-reset">
Built on 2024-05-20T04:21:25Z
Built on 2024-05-21T20:30:35Z
</div>
</section>
</footer>
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -14,11 +14,9 @@ sources:
## Advances in Detection Engineering
### Mike Cohen, Digital Paleontologist
### Mike Cohen, Digital Paleontologist, Rapid7
</div>
<img src="https://github.com/Velocidex/presentations/blob/master//resources/velo_bike.gif?raw=true" class="fixed" style=" right: 0px; bottom: 0px; height: 300px; z-index: -10;"/>
- type: markdown
template: |
<!-- .slide: class="content" -->
Expand All @@ -41,7 +39,8 @@ sources:
## Traditional SIEM based detection
![](https://github.com/Velocidex/presentations/blob/master/edr_env.png?raw=true)
<img src="https://github.com/Velocidex/presentations/blob/master/edr_env.png?raw=true" style=" height: 90hv;"/>
- type: markdown
template: |
<!-- .slide: class="content small-font" -->
Expand Down Expand Up @@ -76,7 +75,7 @@ sources:
## New interchange format - Sigma
![](https://github.com/Velocidex/presentations/blob/master/sigma_architecture.png?raw=true)
<img src="https://github.com/Velocidex/presentations/blob/master/sigma_architecture.png?raw=true" style=" height: 60vh;"/>
- type: markdown
template: |
<!-- .slide: class="content small-font" -->
Expand Down Expand Up @@ -353,7 +352,8 @@ sources:
* Endpoint tools can directly evaluate Sigma rules on the event logs
![](https://github.com/Velocidex/presentations/blob/master/velociraptor_sigma_flow.png?raw=true)
<img src="https://github.com/Velocidex/presentations/blob/master/velociraptor_sigma_flow.png?raw=true" style=" height: 40vh;"/>
- type: markdown
template: |
<!-- .slide: class="content small-font" -->
Expand Down Expand Up @@ -465,7 +465,7 @@ sources:
* VQL is fully asynchronous - real time queries.
![](https://github.com/Velocidex/presentations/blob/master/client_events_arch.png?raw=true)
<img src="https://github.com/Velocidex/presentations/blob/master/client_events_arch.png?raw=true" style=" height: 50vh;"/>
- type: markdown
template: |
<!-- .slide: class="content" -->
Expand Down Expand Up @@ -533,3 +533,4 @@ sources:
* [Velociraptor Sigma Compiler](https://sigma.velocidex.com/)
* [Velociraptor Sigma Rules Github](https://github.com/Velocidex/velociraptor-sigma-rules)
* [Sigma in Velociraptor](https://docs.velociraptor.app/blog/2023/2023-11-15-sigma_in_velociraptor/)
* Graphics by Justin Welgemoed @predictiple
15 changes: 8 additions & 7 deletions docs/presentations/2024-auscert-detection_engineering/index.html
Original file line number Diff line number Diff line change
Expand Up @@ -30,12 +30,10 @@ <h1 style="font-size: 4ex">Detection Engineering</h1>

## Advances in Detection Engineering

### Mike Cohen, Digital Paleontologist
### Mike Cohen, Digital Paleontologist, Rapid7

</div>

<img src="/resources/velo_bike.gif" class="fixed" style=" right: 0px; bottom: 0px; height: 300px; z-index: -10;"/>

---

<!-- .slide: class="content" -->
Expand All @@ -59,7 +57,8 @@ <h1 style="font-size: 4ex">Detection Engineering</h1>

## Traditional SIEM based detection

![](edr_env.png)

<img src="edr_env.png" style=" height: 90hv;"/>

---

Expand Down Expand Up @@ -97,7 +96,7 @@ <h1 style="font-size: 4ex">Detection Engineering</h1>

## New interchange format - Sigma

![](sigma_architecture.png)
<img src="sigma_architecture.png" style=" height: 60vh;"/>

---

Expand Down Expand Up @@ -388,7 +387,8 @@ <h1 style="font-size: 4ex">Detection Engineering</h1>

* Endpoint tools can directly evaluate Sigma rules on the event logs

![](velociraptor_sigma_flow.png)

<img src="velociraptor_sigma_flow.png" style=" height: 40vh;"/>


---
Expand Down Expand Up @@ -511,7 +511,7 @@ <h1 style="font-size: 4ex">Detection Engineering</h1>

* VQL is fully asynchronous - real time queries.

![](client_events_arch.png)
<img src="client_events_arch.png" style=" height: 50vh;"/>

---

Expand Down Expand Up @@ -586,6 +586,7 @@ <h1 style="font-size: 4ex">Detection Engineering</h1>
* [Velociraptor Sigma Compiler](https://sigma.velocidex.com/)
* [Velociraptor Sigma Rules Github](https://github.com/Velocidex/velociraptor-sigma-rules)
* [Sigma in Velociraptor](https://docs.velociraptor.app/blog/2023/2023-11-15-sigma_in_velociraptor/)
* Graphics by Justin Welgemoed @predictiple

</textarea>
</section>
Expand Down
15 changes: 8 additions & 7 deletions docs/presentations/2024-auscert-detection_engineering/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,12 +7,10 @@

## Advances in Detection Engineering

### Mike Cohen, Digital Paleontologist
### Mike Cohen, Digital Paleontologist, Rapid7

</div>

<img src="/resources/velo_bike.gif" class="fixed" style=" right: 0px; bottom: 0px; height: 300px; z-index: -10;"/>

---

<!-- .slide: class="content" -->
Expand All @@ -36,7 +34,8 @@

## Traditional SIEM based detection

![](edr_env.png)

<img src="edr_env.png" style=" height: 90hv;"/>

---

Expand Down Expand Up @@ -74,7 +73,7 @@ Let's just define a new "Standard":

## New interchange format - Sigma

![](sigma_architecture.png)
<img src="sigma_architecture.png" style=" height: 60vh;"/>

---

Expand Down Expand Up @@ -365,7 +364,8 @@ detection:

* Endpoint tools can directly evaluate Sigma rules on the event logs

![](velociraptor_sigma_flow.png)

<img src="velociraptor_sigma_flow.png" style=" height: 40vh;"/>


---
Expand Down Expand Up @@ -488,7 +488,7 @@ vql_args:

* VQL is fully asynchronous - real time queries.

![](client_events_arch.png)
<img src="client_events_arch.png" style=" height: 50vh;"/>

---

Expand Down Expand Up @@ -563,3 +563,4 @@ vql_args:
* [Velociraptor Sigma Compiler](https://sigma.velocidex.com/)
* [Velociraptor Sigma Rules Github](https://github.com/Velocidex/velociraptor-sigma-rules)
* [Sigma in Velociraptor](https://docs.velociraptor.app/blog/2023/2023-11-15-sigma_in_velociraptor/)
* Graphics by Justin Welgemoed @predictiple
15 changes: 8 additions & 7 deletions presentations/2024-auscert-detection_engineering/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,12 +7,10 @@

## Advances in Detection Engineering

### Mike Cohen, Digital Paleontologist
### Mike Cohen, Digital Paleontologist, Rapid7

</div>

<img src="/resources/velo_bike.gif" class="fixed" style=" right: 0px; bottom: 0px; height: 300px; z-index: -10;"/>

---

<!-- .slide: class="content" -->
Expand All @@ -36,7 +34,8 @@

## Traditional SIEM based detection

![](edr_env.png)

<img src="edr_env.png" style=" height: 90hv;"/>

---

Expand Down Expand Up @@ -74,7 +73,7 @@ Let's just define a new "Standard":

## New interchange format - Sigma

![](sigma_architecture.png)
<img src="sigma_architecture.png" style=" height: 60vh;"/>

---

Expand Down Expand Up @@ -365,7 +364,8 @@ detection:

* Endpoint tools can directly evaluate Sigma rules on the event logs

![](velociraptor_sigma_flow.png)

<img src="velociraptor_sigma_flow.png" style=" height: 40vh;"/>


---
Expand Down Expand Up @@ -488,7 +488,7 @@ vql_args:

* VQL is fully asynchronous - real time queries.

![](client_events_arch.png)
<img src="client_events_arch.png" style=" height: 50vh;"/>

---

Expand Down Expand Up @@ -563,3 +563,4 @@ vql_args:
* [Velociraptor Sigma Compiler](https://sigma.velocidex.com/)
* [Velociraptor Sigma Rules Github](https://github.com/Velocidex/velociraptor-sigma-rules)
* [Sigma in Velociraptor](https://docs.velociraptor.app/blog/2023/2023-11-15-sigma_in_velociraptor/)
* Graphics by Justin Welgemoed @predictiple

0 comments on commit f8fba29

Please sign in to comment.