CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-04-25 22:17:49 +02:00
Code Issues Packages Projects Releases Wiki Activity
10,718 Commits 40 Branches 125 Tags
1279997ca9fb7abf8ef51639f749cf9058c264de
Commit Graph

6380 Commits

Author SHA1 Message Date
Doug Burks 1279997ca9 update stun, tunnel, and wireguard dashboards in dashboards.queries.json 2022-11-30 10:59:00 -05:00
Wes 8f0547beda Change 'bsap.node.status_byte' to 'bsap.node_status_byte'. 2022-11-30 15:24:53 +00:00
Wes 6cb4c02200 More field updates 2022-11-30 15:22:02 +00:00
Wes 5d72f8d55a Additional field renames and updates 2022-11-30 15:01:41 +00:00
Mike Reeves 571ac4edec Update soup 2022-11-29 18:36:47 -05:00
Wes e00a80feb4 Use native link_id naming scheme for now 2022-11-29 22:05:37 +00:00
Wes e8e39a7105 Various field renames 2022-11-29 21:32:05 +00:00
Wes 13ea44db95 Use native 'is_orig' since we are already using that field name for other logs 2022-11-29 21:21:41 +00:00
Wes 5db3e22363 Add s7comm_upload_download references in various places 2022-11-29 19:58:18 +00:00
Wes 6fe2857ba5 Add Zeek s7comm_upload_download ingest pipeline 2022-11-29 19:45:56 +00:00
weslambert f947e501cb Add space per request 2022-11-29 14:14:37 -05:00
weslambert ff8bbc399f Add space per request 2022-11-29 14:14:08 -05:00
weslambert 80226a27cc Add space per request 2022-11-29 14:13:41 -05:00
weslambert 266207cc18 Add space per request 2022-11-29 14:12:52 -05:00
weslambert 5255c120c5 Add space per request 2022-11-29 14:11:20 -05:00
Wes d44f8e495b Check if connection.state is populated before trying to assess its value 2022-11-29 19:00:47 +00:00
Wes 13a8cbdabb Add convert processor for opcua.encoding_mask 2022-11-29 18:59:30 +00:00
Doug Burks 7ea0aa87e4 add ICS COTP dashboard to dashboards.queries.json 2022-11-29 13:38:19 -05:00
weslambert 1cc5961c07 Change 'write' to 'read' to correct name and avoid pipeline failure 2022-11-29 12:54:55 -05:00
Wes 16cd1080be Add dnp3_control reference in various places 2022-11-29 17:23:37 +00:00
Wes 5db643e53b Add Zeek dnp3_control ingest pipeline 2022-11-29 17:18:24 +00:00
weslambert aa767b8dc1 Add 'ics' tag for 'bsap'-prefixed events/logs 2022-11-29 11:27:41 -05:00
doug 1bb76bb251 update zeek s7comm parsers 2022-11-29 07:50:21 -05:00
doug 4251331bd4 update zeek tds parsers and dashboard 2022-11-29 07:43:20 -05:00
doug 124d56f4b9 update zeek cip parsers 2022-11-29 07:36:30 -05:00
doug 02821b97ad update bacnet parsers 2022-11-29 07:26:11 -05:00
doug 9a50832669 fix more typos 2022-11-29 07:16:30 -05:00
doug cffbe757a6 fix bsap typos 2022-11-29 06:56:51 -05:00
Doug Burks 14ff5670f7 add bsap entries to hunt.eventfields.json 2022-11-29 06:48:20 -05:00
Doug Burks 92e238aa10 Merge pull request #9227 from Security-Onion-Solutions/fix/zeek-ics-parsers 
Fix Zeek ICS parsers and add dashboards
 2022-11-28 15:58:24 -05:00
doug 8462e66873 fix opcua_binary_browse_description 2022-11-28 13:50:24 -05:00
Doug Burks 2763b5846c improve dashboard descriptions 2022-11-28 13:10:23 -05:00
Doug Burks dd4c34397d improve dashboard descriptions 2022-11-28 13:03:54 -05:00
Doug Burks a796fa2ff7 make sure that ICS dashboards with sankey also have separate event.dataset table 2022-11-28 12:09:57 -05:00
Doug Burks 268253ce14 update ENIP dashboard 2022-11-28 12:05:35 -05:00
Doug Burks 6a2f886fcc improve ecat dashboard 2022-11-28 12:01:35 -05:00
Doug Burks 63915b0486 consolidate DNP3 dashboards 2022-11-28 11:58:48 -05:00
Doug Burks ce7b16a230 more ICS dashboards 2022-11-28 10:06:58 -05:00
Doug Burks a4f5e7b2a6 add ECAT dashboard 2022-11-28 10:05:15 -05:00
Doug Burks cfbbc3a1a3 add S7 dashboard 2022-11-28 10:02:33 -05:00
Doug Burks 11a7f051a6 organize dashboards 2022-11-28 09:57:54 -05:00
Doug Burks cb06269b1a update DNP3 and MODBUS dashboards 2022-11-28 09:40:42 -05:00
Mike Reeves e15ca408e7 Remove BG for filecheck 2022-11-28 09:11:41 -05:00
Mike Reeves 0e2753393b Remove BG for filecheck 2022-11-28 09:09:25 -05:00
Doug Burks b06e9e8477 add new zeek opcua logs to so-zeek-logs 2022-11-26 18:44:28 -05:00
doug 6d814d3909 add more zeek opcua parsers 2022-11-26 17:43:58 -05:00
Doug Burks ec0cf71c3f add opcua_binary_opensecure_channel to so-zeek-logs 2022-11-26 17:00:32 -05:00
doug 73adc571de add more zeek ics parsers 2022-11-26 10:36:49 -05:00
Doug Burks 692ec05b2d fix opcua_binary_activate_session in hunt.eventfields.json 2022-11-25 17:51:25 -05:00
Doug Burks 00078fd9e5 add opcua_binary_activate_session_diagnostic_info to hunt.eventfields.json 2022-11-25 17:47:41 -05:00