48 Commits

Author SHA1 Message Date
m0duspwnens
53d6e1d30d simplfy 2022-05-26 11:51:17 -04:00
m0duspwnens
1bfde852f5 manage suricata classifications.config https://github.com/Security-Onion-Solutions/securityonion/issues/7918 2022-05-26 11:43:31 -04:00
m0duspwnens
53883e4ade manage suricata classifications.config https://github.com/Security-Onion-Solutions/securityonion/issues/7918 2022-05-26 11:40:33 -04:00
Masaya-A
249651edc7 Delete suri-rotate.conf 2021-01-22 10:08:23 +09:00
Mike Reeves
2b88f22eb2 Make HUP for rotate more reliable 2020-08-20 17:57:36 -04:00
Mike Reeves
b7da768dc7 add logrotate 2020-08-20 16:46:32 -04:00
m0duspwnens
052c65c05e add the things to pillarize suricata - https://github.com/Security-Onion-Solutions/securityonion/issues/584 2020-06-26 13:07:41 -04:00
m0duspwnens
36a329214a merge eve-log in outputs for suricata meta data generation or zeek/default - https://github.com/Security-Onion-Solutions/securityonion/issues/584 2020-06-22 16:56:03 -04:00
m0duspwnens
57fa2c5abe Merge remote-tracking branch 'remotes/origin/dev' into feature/suripillar 2020-06-18 13:49:07 -04:00
Mike Reeves
79adf2012a Fix log rotate on Suricata 2020-06-04 10:43:24 -04:00
TOoSmOotH
9b6822f325 DNS Suricata parser 2020-06-03 20:40:57 -04:00
TOoSmOotH
702a14e90c DNS Suricata parser 2020-06-03 20:40:10 -04:00
Mike Reeves
45d17c5148 Pillarize Suricata Round 1 2020-06-01 14:53:04 -04:00
Mike Reeves
03f34404b1 Suricata 5 Meta Data 2020-06-01 11:03:43 -04:00
weslambert
12f426d4f4 Move eve.json to /nsm 2020-05-28 12:59:41 -04:00
Mike Reeves
8304d91b0b Merge branch 'dev' into feature/suri5 2020-05-28 09:41:28 -04:00
Wes Lambert
e78a3f3278 update Suricata config 2020-05-27 16:59:26 +00:00
Mike Reeves
68dd333fbe Remove stats from eve.json 2020-05-26 17:49:11 -04:00
Mike Reeves
1259338e6c Remvoe old Suricata.yml 2020-05-26 17:44:19 -04:00
Mike Reeves
8e95115a7c Update Suricata.yml 2020-05-26 17:43:32 -04:00
Mike Reeves
b748a86694 Suricata 5 initial commit 2020-05-26 15:12:00 -04:00
Josh Brower
51b9af7ac4 Suricata - enable community id 2020-03-25 09:24:45 -04:00
Josh Brower
5213c19e44 Suricata - logfile fix 2020-01-29 09:30:03 -05:00
m0duspwnens
4dc667d805 change threshold.conf template - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/127 2020-01-03 14:50:32 -05:00
m0duspwnens
7415ed8dd0 manage threshold.conf with Salt - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/127 2020-01-03 13:31:19 -05:00
Mike Reeves
c46c539277 Helix - fix suricata.yml 2019-12-10 11:24:56 -05:00
Mike Reeves
ae7f170df3 Suricata Module - Fix Worker designation for performance 2019-03-08 11:26:00 -05:00
Mike Reeves
ad42121064 Suricata Module - Fix MTU for EVAL 2018-11-30 11:12:12 -05:00
Mike Reeves
6da00a2626 Suricata Module - Fix MTU for EVAL 2018-11-30 10:57:15 -05:00
Mike Reeves
f03f97b774 MTU - Now gets dropped into the pillar. 2018-11-29 13:56:36 -05:00
Mike Reeves
bb1ee0ead5 Telegraf - Fix Suri script so it requires 2 drops in a row 2018-11-29 11:35:14 -05:00
Mike Reeves
15682bb26c Suricata Module - Change Priority 2018-11-28 10:54:21 -05:00
Mike Reeves
85bc764ad6 Suricata Module - Turn off stats in eve.log 2018-11-14 08:21:04 -05:00
Mike Reeves
0a3c20fccf Suricata Module - Fix Jinja 2018-11-13 14:10:21 -05:00
Mike Reeves
a70b7ed3de Suricata Meta Data Option 2018-11-13 11:25:30 -05:00
Wes Lambert
61802f7d62 adjust logging options 2018-11-03 15:17:38 +00:00
Mike Reeves
26272561d2 Bro Module - Fix default interface 2018-10-31 11:41:48 -04:00
Mike Reeves
a753a3704c Suricata Module - Make thread count automagic 2018-10-03 10:14:59 -04:00
Mike Reeves
51db158b2d Suricata Module - Modify default meta data collection 2018-09-27 12:35:59 -04:00
Mike Reeves
3f378f0787 Suricata Module - Add proper homent and interface support 2018-09-26 13:06:37 -04:00
Mike Reeves
014439f986 Suricata Module - Add proper homent and interface support 2018-09-26 12:53:08 -04:00
Mike Reeves
61c923c063 Suricata Module - Modify some stuff that was tripping up the jinja 2018-04-19 19:56:07 -04:00
Mike Reeves
5ce4d0e408 Suricata Module - Fix yaml for rules location 2018-04-19 19:49:36 -04:00
Mike Reeves
a2701ab2e8 Setup Script - Suricata yaml 2018-04-11 15:57:55 -04:00
Mike Reeves
4c5f3525d5 Suricata Module - Add raw rule to the alert 2018-03-20 09:26:29 -04:00
Mike Reeves
69ba60d710 Suricata Salt Module - disable flow records in suricata 2018-02-26 16:47:50 -05:00
Mike Reeves
e3e78e551b Suricata Salt Module - fix format issue in suricata.yaml 2018-02-26 12:26:39 -05:00
Mike Reeves
caf40b7271 Suricata Salt Module - Add suricata.yaml 2018-02-23 16:20:51 -05:00