{"push_id":715484052,"size":2,"distinct_size":2,"ref":"refs/heads/master","head":"3c7d6e2f1af92d425e8d3efa3ac0bb320bdd9464","before":"4da13ba22003f57a08d0e23ec4d463ad348f3857","commits":[{"sha":"6ec2ddb06496defc4af244a350f14865a85e11d5","author":{"email":"ffb4761cba839470133bee36aeb139f58d7dbaa9@branchnetconsulting.com","name":"branchnetconsultnig"},"message":"Update bro_intel to match new Bro 2.4 schema\n\nBro 2.4 introduces a new field \"seen.node\" just before the \"sources\" field.  This causes the current ELSA parser of bro_intel records to parse \"sources\" in a way that looks like this: \"nsm.local-eth1-1|Mandiant APT1 Report\" instead of \"Mandiant APT1 Report\".  \r\nMy change causes the new \"seen.node\" field to be skipped over.  Later we may want to actually parse \"seen.node\" into a new ELSA field.","distinct":true,"url":"https://api.github.com/repos/Security-Onion-Solutions/securityonion-elsa-extras/commits/6ec2ddb06496defc4af244a350f14865a85e11d5"},{"sha":"3c7d6e2f1af92d425e8d3efa3ac0bb320bdd9464","author":{"email":"dcf73538767521c5bc42cbbe689495550071b850@gmail.com","name":"Doug Burks"},"message":"Merge pull request #2 from branchnetconsultnig/patch-1\n\nUpdate bro_intel to match new Bro 2.4 schema","distinct":true,"url":"https://api.github.com/repos/Security-Onion-Solutions/securityonion-elsa-extras/commits/3c7d6e2f1af92d425e8d3efa3ac0bb320bdd9464"}]}