CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-07-14 04:43:09 +02:00
Code Issues Packages Projects Releases Wiki Activity
6,682 Commits 40 Branches 127 Tags
1b6f681ae1b45cda2e0da170e95372d705dd8820
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Josh BrowerandGitHub b56434aea1 Merge pull request #3470 from Security-Onion-Solutions/feature/disable-features-ui 
Feature/disable certain features in Kibana UI
 2021-03-16 14:00:21 -04:00
Josh Brower abd4f92088 Cleanup curl output 2021-03-16 13:53:28 -04:00
Josh Brower c855e0a55a Disable certain Features within the default space 2021-03-16 13:48:13 -04:00
Josh BrowerandGitHub 7b748128ea Merge pull request #3462 from Security-Onion-Solutions/delta 
Fixes IP & Port mappings
 2021-03-16 12:05:23 -04:00
Josh Brower 4d6cac4a2a Merge remote-tracking branch 'remotes/origin/dev' into delta 2021-03-16 11:57:17 -04:00
Josh Brower 71ae5b60ea Update Sigmac mappings and config for IPs and ports 2021-03-16 09:32:40 -04:00
Josh Brower 44c75122ed Update Sigmac mappings and config for IPs and ports 2021-03-16 09:05:35 -04:00
Josh Brower 5fe025318b Update Sigmac mappings and config for IPs and ports 2021-03-15 15:53:00 -04:00
Josh BrowerandGitHub 00da549430 Merge pull request #3358 from Security-Onion-Solutions/delta 
FEATURE: Initial support for viewing Osquery Live Query results in Hunt
 2021-03-09 09:18:57 -05:00
Josh Brower fe8788c09a Merge remote-tracking branch 'remotes/origin/dev' into delta 2021-03-08 12:56:47 -05:00
Josh BrowerandGitHub 19b3c7bb07 Merge pull request #3339 from Security-Onion-Solutions/feature/live_query-hunt 
Feature/live query hunt
 2021-03-08 08:31:25 -05:00
Josh Brower 548f67ca6f Initial support for Live Queries in Hunt 2021-03-04 18:21:13 -05:00
Josh BrowerandGitHub 45f626887d Merge pull request #3153 from Security-Onion-Solutions/bugfix/so-playbook-sigmarefresh 
Fix so-playbook-sigma-refresh
 2021-02-26 08:36:36 -05:00
Josh Brower 5678e66b39 Fix so-playbook-sigma-refresh 2021-02-26 08:33:24 -05:00
Josh Brower b8137214e4 Initial Support - Live Query to Hunt 2021-02-26 08:08:09 -05:00
Josh BrowerandGitHub a7eb3cd38d Add so-playbook-sigma-refresh 2021-02-23 15:43:09 -05:00
Josh Brower 122e34b69c Configure fleet result.log to rotate 2021-02-23 10:06:24 -05:00
Josh BrowerandGitHub 5ca3dc492c Merge pull request #3061 from Security-Onion-Solutions/foxtrot 
Fix Playbook Fields & Mappings
 2021-02-21 09:40:59 -05:00
Josh BrowerandGitHub 046cc0fbb0 Merge pull request #3052 from Security-Onion-Solutions/feature/sigma-tweaks 
Feature/sigma tweaks
 2021-02-19 15:16:34 -05:00
Josh Brower 8c69e19419 Add sigma refresh script 2021-02-19 15:14:37 -05:00
Josh Brower 2a324eac32 Add sigma refresh script 2021-02-19 15:12:55 -05:00
Josh BrowerandGitHub b5087b815a Merge pull request #3002 from Security-Onion-Solutions/feature/sigma-tweaks 
Update .security analyzer
 2021-02-17 16:38:22 -05:00
Josh Brower d2a74c80e2 Update .security analyzer 2021-02-17 16:37:31 -05:00
Josh BrowerandGitHub 741f674a4c Merge pull request #3001 from Security-Onion-Solutions/dev 
Dev
 2021-02-17 16:36:49 -05:00
Josh BrowerandGitHub d277bf6d05 Merge pull request #2749 from Security-Onion-Solutions/bugfix/osquery-wel-parsing 
Update Osquery Windows Eventlog Parsing
 2021-01-27 09:17:17 -05:00
Josh Brower 13ab4c66eb Update Osquery Windows Eventlog Parsing 2021-01-27 09:15:54 -05:00
Josh BrowerandGitHub 5719b12968 Merge pull request #2373 from Security-Onion-Solutions/bugfix/so-suricata-testrule 
Fix so-suricata-testrule
 2020-12-17 11:08:26 -05:00
Josh Brower 73ad89f4ba Fix so-suricata-testrule 2020-12-17 11:05:57 -05:00
Josh BrowerandGitHub efe44323cb Merge pull request #2346 from Security-Onion-Solutions/bugfix/fleet-patch 
Swap localhost for 127.0.0.1
 2020-12-14 15:49:58 -05:00
Josh Brower 73d23e6d17 Revert "Initial support - Playbook Overrides" 
This reverts commit 8915e49288.
 2020-12-12 10:07:30 -05:00
Josh Brower 8faf80a03b Revert "Playbook db updates" 
This reverts commit 35be785f7a.
 2020-12-12 10:07:23 -05:00
Josh BrowerandGitHub 66495e6bae Swap localhost for 127.0.0.1 2020-12-11 17:38:42 -05:00
Josh BrowerandGitHub f34a10a986 Merge pull request #2259 from Security-Onion-Solutions/feature/playbook-updates2 
Playbook db updates
 2020-12-08 10:36:42 -05:00
Josh Brower 35be785f7a Playbook db updates 2020-12-08 10:35:50 -05:00
Josh BrowerandGitHub 5f756549b1 Merge pull request #2254 from Security-Onion-Solutions/feature/playbook-updates2 
Initial support - Playbook Overrides
 2020-12-07 22:30:50 -05:00
Josh Brower 8915e49288 Initial support - Playbook Overrides 2020-12-07 22:28:58 -05:00
Josh BrowerandGitHub 35ea6c36d2 Merge pull request #2247 from Security-Onion-Solutions/feature/so-suricata-ruletest 
so-suricata-testrule initial commit
 2020-12-07 15:12:20 -05:00
Josh Brower 134d9bc89a so-suricata-testrule initial commit 2020-12-06 17:08:11 -05:00
Josh BrowerandGitHub c303cdff09 Merge pull request #2150 from Security-Onion-Solutions/bugfix/fleet-standalone 
Fleet Fixes - mysql race condition
 2020-11-30 18:06:30 -05:00
Josh Brower e7a927188b Fleet Fixes - mysql race condition 2020-11-30 17:28:11 -05:00
Josh BrowerandGitHub 8e9458ca84 Merge pull request #2149 from Security-Onion-Solutions/bugfix/fleet-standalone 
Fix Fleet setup errors
 2020-11-30 12:06:36 -05:00
Josh Brower 5d2acf4011 Fix Fleet setup errors 2020-11-30 12:06:02 -05:00
Josh BrowerandGitHub 704f024441 Merge pull request #2146 from Security-Onion-Solutions/bugfix/fleet-standalone 
Fleet standalone - fix event
 2020-11-30 10:33:05 -05:00
Josh Brower 65d8005629 Fleet standalone - fix event 2020-11-30 10:32:39 -05:00
Josh BrowerandGitHub 7fddf99648 Merge pull request #2128 from Security-Onion-Solutions/bugfix/fleet-standalone 
Fix Fleet setup errors
 2020-11-27 13:59:19 -05:00
Josh Brower f52c30bff5 Fix Fleet setup errors 2020-11-27 13:58:41 -05:00
Josh BrowerandGitHub 19a33c5c2a Merge pull request #2126 from Security-Onion-Solutions/bugfix/fleet-standalone 
Bugfix/fleet standalone
 2020-11-27 11:45:25 -05:00
Josh Brower 19b36f0468 Fleet standalone redirect fix 2020-11-27 11:43:51 -05:00
Josh BrowerandGitHub 95a664e12a Merge pull request #2103 from Security-Onion-Solutions/bugfix/fleet-standalone 
Fleet standalone fix
 2020-11-25 14:09:27 -05:00
Josh Brower 38afd67108 Fleet standalone fix 2020-11-25 14:08:30 -05:00
Josh BrowerandGitHub b79e1c3225 Merge pull request #1987 from Security-Onion-Solutions/bugfix/playbookdb-user 
playbook mysqluser
 2020-11-18 20:48:49 -05:00
Josh Brower d3065005ca playbook mysqluser 2020-11-18 20:48:02 -05:00
Josh BrowerandGitHub 3d0003555a Merge pull request #1980 from Security-Onion-Solutions/bugfix/soup-regen-osquery 
SOUP - Regen Osquery Packages
 2020-11-18 14:56:23 -05:00
Josh Brower 0830f63c4e SOUP - Regen Osquery Packages 2020-11-18 14:55:14 -05:00
Josh BrowerandGitHub cc4357d567 Merge pull request #1954 from Security-Onion-Solutions/bugfix/ingest-mappings 
Cleanup & fix sysmon pid ingest
 2020-11-17 09:05:31 -05:00
Josh Brower 1908a68330 Cleanup & fix sysmon pid ingest 2020-11-14 16:19:23 -05:00
Josh BrowerandGitHub adec9ad48b Merge pull request #1916 from Security-Onion-Solutions/feature/so-playbook-reset 
Feature/so playbook reset
 2020-11-13 11:21:50 -05:00
Josh Brower 8b3262ce1b Add so-playbook-reset 2020-11-13 11:20:39 -05:00
Josh Brower 844ffe8fdf nest case_template 2020-10-21 09:58:31 -04:00
Josh Brower 1e14d66f54 Add case_template field to Playbook alerts 2020-10-21 08:59:26 -04:00
Josh BrowerandGitHub 2e012432b4 Merge pull request #1455 from Security-Onion-Solutions/feature/training-req 
Write out nested json
 2020-10-05 15:34:43 -04:00
Josh Brower de9ace62d4 Write out nested json 2020-10-05 15:34:02 -04:00
Josh BrowerandGitHub 7b05cf4266 Merge pull request #1443 from Security-Onion-Solutions/feature/training-req 
Feature/training req
 2020-10-04 21:37:03 -04:00
Josh Brower 8a78485906 Config Playbook SOC Alerts 2020-10-04 21:35:42 -04:00
Josh Brower c80b6ce104 Add so-allow-view and playbook event.sev.label 2020-10-04 20:39:21 -04:00
Josh BrowerandGitHub 18a881ccab Merge pull request #1377 from Security-Onion-Solutions/bugfix/docker_cleanup 
fix docker_clean syntax
 2020-09-21 19:42:11 -04:00
Josh BrowerandGitHub 8bb527b4f1 fix docker_clean syntax 2020-09-21 19:41:39 -04:00
Josh BrowerandGitHub ffdf7e1db4 Merge pull request #1374 from Security-Onion-Solutions/feature/so-user-list 
Add so-user-list
 2020-09-21 10:03:02 -04:00
Josh Brower 3cd11807cd Add so-user-list 2020-09-21 10:02:10 -04:00
Josh BrowerandGitHub d5fd15962c Merge pull request #1351 from Security-Onion-Solutions/bugfix/tcpreplay 
Fix so-test
 2020-09-16 09:52:08 -04:00
Josh Brower dd2d736bc1 Fix so-test 2020-09-16 09:51:38 -04:00
Josh BrowerandGitHub 46a1369e81 Merge pull request #1347 from Security-Onion-Solutions/bugfix/tcpreplay 
Add so-test
 2020-09-15 13:20:56 -04:00
Josh Brower 2516429834 Add so-test 2020-09-15 13:14:00 -04:00
Josh BrowerandGitHub 56587f0df5 Merge pull request #1308 from Security-Onion-Solutions/feature/wel-ingest 
Add event.category to WEL
 2020-09-10 06:16:56 -04:00
Josh Brower c3b2d98ffb Add event.category to WEL 2020-09-10 06:15:30 -04:00
Josh BrowerandGitHub 351e7761ef Merge pull request #1292 from Security-Onion-Solutions/bugfix/playbook-rulesets 
Update SOCtopus.conf
 2020-09-04 14:15:18 -04:00
Josh BrowerandGitHub 39cc7151a5 Update SOCtopus.conf 2020-09-04 14:14:53 -04:00
Josh BrowerandGitHub 6cd0d16b91 Merge pull request #1276 from Security-Onion-Solutions/feature/import-wel 
Initial support for evtx import
 2020-09-01 13:48:12 -04:00
Josh Brower a79d0319cd Initial support for evtx import 2020-09-01 13:47:27 -04:00
Josh BrowerandGitHub 764ba4a0e9 Merge pull request #1266 from Security-Onion-Solutions/bugfix/event.code-parsing 
Set event.code to string for WEL
 2020-08-28 13:49:01 -04:00
Josh Brower b7dd14b8f0 Set event.code to string for WEL 2020-08-28 13:40:04 -04:00
Josh BrowerandGitHub c38f4ad4ae Merge pull request #1251 from Security-Onion-Solutions/feature/fleet3.1 
Upgraded to Fleet 3.1
 2020-08-26 06:14:34 -04:00
Josh Brower 67e0a219e6 Upgraded to Fleet 3.1 2020-08-26 06:13:45 -04:00
Josh BrowerandGitHub b6ebcf6551 Merge pull request #1250 from Security-Onion-Solutions/feature/es-security-field 
Adds new .security analyzed subfield
 2020-08-26 05:12:23 -04:00
Josh Brower 1cf7301db4 Adds new .security analyzed subfield 2020-08-26 05:11:42 -04:00
Josh BrowerandGitHub ad0f54fc40 Merge pull request #1209 from Security-Onion-Solutions/bugfix/osquery-parsing 
Osquery Parsing fix
 2020-08-18 15:54:47 -04:00
Josh Brower d4f7a07f85 Osquery Parsing fix 2020-08-18 15:54:11 -04:00
Josh BrowerandGitHub 9c1c4b1a98 Merge pull request #1198 from Security-Onion-Solutions/feature/playbook-tweaks 
Playbook schema update - RC2
 2020-08-17 14:10:26 -04:00
Josh Brower a8aa97edd2 Playbook schema update - RC2 2020-08-17 14:09:17 -04:00
Josh BrowerandGitHub 34d8261669 Merge pull request #1176 from Security-Onion-Solutions/feature/playbook 
Elastalert/Playbook Stability updates
 2020-08-13 17:19:01 -04:00
Josh Brower 7400bbd6c1 Elastalert Stability Fixes 2020-08-13 17:14:53 -04:00
Josh Brower b724d40376 Playbook Stability Fixes 2020-08-11 15:07:16 -04:00
Josh BrowerandGitHub 4b99f55e0a Merge pull request #1155 from Security-Onion-Solutions/feature/playbook-fixes2 
Playbook/Nav Fixes - Issue #1064
 2020-08-07 17:03:32 -04:00
Josh Brower 928e5ed832 Playbook/Nav Fixes - Issue #1064 2020-08-07 17:02:48 -04:00
Josh BrowerandGitHub ff209cfd65 Merge pull request #1149 from Security-Onion-Solutions/feature/wlb-parsing 
Ingest Parsing Update for Sysmon/WEL
 2020-08-07 13:37:22 -04:00
Josh BrowerandGitHub 3ec1b1db71 Merge pull request #1154 from Security-Onion-Solutions/feature/playbook-fixes 
More Playbook Fixes - Issue #1064
 2020-08-07 13:36:38 -04:00
Josh Brower a8b980b6a7 More Playbook Fixes - Issue #1064 2020-08-07 13:35:43 -04:00
Josh BrowerandGitHub c3da302353 Merge pull request #1150 from Security-Onion-Solutions/feature/playbook-fixes 
Simplify elastalert rules
 2020-08-06 15:45:06 -04:00
Josh Brower ddd099233a Playbook Fixes - Issue #1064 2020-08-06 15:43:45 -04:00
Josh Brower 4f9ef89098 Simplify elastalert rules 2020-08-06 14:30:44 -04:00