CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 09:12:45 +01:00
Code Issues Packages Projects Releases Wiki Activity
11,059 Commits 24 Branches 119 Tags
master
Commit Graph

49 Commits

Author SHA1 Message Date
Josh Brower
591ef540a6 esalerter ES creds fix 2021-06-21 10:50:09 -04:00
Jason Ertel
62187807f0 Specify elastic creds for playbook alert templates 2021-06-14 14:08:14 -04:00
Josh Brower
ef98445560 Fix Playbook Alert timestamps 2021-03-31 15:44:41 -04:00
Josh Brower
2425355680 Fix https Playbook Alerter 2021-03-19 16:38:33 -04:00
m0duspwnens
618b94b9b6 add newline 2021-01-29 15:31:05 -05:00
m0duspwnens
f50a89a0cf watch elastalert config and restart docker if chagnes 2021-01-29 15:28:59 -05:00
m0duspwnens
8df9e020ac pillarize elastalert https://github.com/Security-Onion-Solutions/securityonion/issues/1191 2021-01-27 15:35:29 -05:00
Josh Brower
844ffe8fdf nest case_template 2020-10-21 09:58:31 -04:00
Josh Brower
1e14d66f54 Add case_template field to Playbook alerts 2020-10-21 08:59:26 -04:00
Josh Brower
de9ace62d4 Write out nested json 2020-10-05 15:34:02 -04:00
Josh Brower
8a78485906 Config Playbook SOC Alerts 2020-10-04 21:35:42 -04:00
Josh Brower
c80b6ce104 Add so-allow-view and playbook event.sev.label 2020-10-04 20:39:21 -04:00
Jason Ertel
ff04bb507a Remove default Elastalert rules to stop automated alerts from being sent to thehive 2020-09-30 15:06:54 -04:00
Doug Burks
57e45308af Fix pivot from TheHive to Kibana #1362 2020-09-17 08:05:55 -04:00
m0duspwnens
e6da423dc3 change reference from manager:url_base to global:url_base - https://github.com/Security-Onion-Solutions/securityonion/issues/1039 2020-08-14 17:55:30 -04:00
Josh Brower
7400bbd6c1 Elastalert Stability Fixes 2020-08-13 17:14:53 -04:00
Josh Brower
b724d40376 Playbook Stability Fixes 2020-08-11 15:07:16 -04:00
Josh Brower
a8b980b6a7 More Playbook Fixes - Issue #1064 2020-08-07 13:35:43 -04:00
Josh Brower
ddd099233a Playbook Fixes - Issue #1064 2020-08-06 15:43:45 -04:00
Josh Brower
4f9ef89098 Simplify elastalert rules 2020-08-06 14:30:44 -04:00
Mike Reeves
24ed92c9dc minio and change to global 2020-08-04 15:54:03 -04:00
Wes Lambert
3ac9f1800b Make sure we are searching all clusters when running rules 2020-07-24 22:04:30 +00:00
m0duspwnens
1f48dc765e merge with dev and resolv conflicts 2020-07-10 10:36:48 -04:00
Jason Ertel
6bfd777d25 Enabled elastalert log 2020-07-09 21:34:35 -04:00
Josh Brower
52f7111e1d Feature - low level alerts 2020-07-09 13:53:55 -04:00
m0duspwnens
3cf31e2460 https://github.com/Security-Onion-Solutions/securityonion/issues/404 2020-07-09 11:27:06 -04:00
Josh Brower
69ace6fbfa Initial commit - Low Level Alerts 2020-07-02 12:16:56 -04:00
Josh Brower
2cb7464086 Add TheHive communityid link 2020-05-26 12:01:58 -04:00
Josh Brower
b951094ea2 Change alert pivot links for MASTER 2020-05-18 14:13:32 -04:00
Mike Reeves
a10617c182 Update nids2hive.yaml 2020-05-18 13:43:25 -04:00
Josh Brower
3db67de27a osquery packages fix 2020-05-13 20:39:56 -04:00
Josh Brower
c3627c38e3 Elastalert - NIDS fix 2020-05-13 17:03:14 -04:00
Josh Brower
6e4ee26a58 Elastalert --> TheHive fixes 2020-05-13 16:34:35 -04:00
Jason Ertel
db51ab9d45 Adjust elastalert salt setup to match new so-elastalert image 2020-05-13 12:14:18 -04:00
Josh Brower
995b255017 NIDS2TheHive Update for ECS 2020-04-11 11:47:34 -04:00
Josh Brower
240620caa3 Playbook - create play API 2020-02-14 16:38:02 -05:00
Wes Lambert
8b415b9db4 Update config.yaml for Elastalert shard/replica changes 2020-01-28 23:55:06 +00:00
Wes Lambert
bc533bef24 update TheHiveAlerter module 2019-12-30 21:10:56 +00:00
Josh Brower
d99b865527 Do not disable a rule when an uncaught exception is thrown 2019-11-07 13:27:38 -05:00
Josh Brower
7d29787512 Update nids2hive.yaml 2019-11-07 11:44:08 -05:00
Josh Brower
0b0d8e21ed Adds NIDS SID to Hive Alert as a Tag 2019-10-31 11:08:52 -04:00
Josh Brower
4352b1ebf6 Updated Kibana NIDS SID Drilldown dashboard 2019-09-26 11:11:18 -04:00
Josh Brower
eb10914969 Update nids2hive.yaml 2019-09-24 12:32:59 -04:00
Wes Lambert
2784542cdb update Elastalert config 2019-09-23 22:39:43 +00:00
Wes Lambert
965ee6f922 remove duplicate alerter 2019-09-23 14:43:54 +00:00
Wes Lambert
5419bd6f08 update config for Elastalert 2019-09-23 14:43:14 +00:00
Wes Lambert
1f8fd7ddd1 fix typo 2019-09-18 19:42:02 +00:00
Wes Lambert
30d732e18f sync default Elastalert rules 2019-09-18 19:37:47 +00:00
Wes Lambert
3f07d7de91 add files 2019-09-09 20:28:31 +00:00