1296 Commits

Author	SHA1	Message	Date
Josh Patterson	79210a07da	Merge pull request #396 from Security-Onion-Solutions/issue/326 ... fix issue with salt not removing pipeline configs or templates if removed from pillar	2020-03-04 10:14:57 -05:00
m0duspwnens	28c4bb4b22	fix issue with salt not removing pipeline configs or templates if removed from pillar	2020-03-04 10:12:28 -05:00
Wes Lambert	a0522943f7	fix path	2020-03-03 22:40:46 +00:00
Wes Lambert	a8a93260a9	add file extraction	2020-03-03 22:40:06 +00:00
Wes Lambert	b1203cfb9f	add initial Strelka ingest config	2020-03-03 21:20:45 +00:00
Wes Lambert	4939884d93	Update Strelka init	2020-03-02 22:15:55 +00:00
Wes Lambert	bbebc4fc9b	Add src/dst objects and Bro template	2020-03-02 20:02:39 +00:00
Wes Lambert	ec6638a276	src/dst ip/port fields to ECS	2020-03-02 19:10:18 +00:00
Wes Lambert	e4fee51ed6	Change Bro Files source to file_source	2020-03-02 19:09:24 +00:00
Wes Lambert	9eb5a9be3a	Begin switch to ECS for Suricata	2020-03-02 19:07:40 +00:00
m0duspwnens	847e6d2d13	create pipelines directory	2020-02-26 16:38:47 -05:00
m0duspwnens	a3e48f0315	logstash cleanup and conflict resolution - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/326	2020-02-26 10:58:39 -05:00
m0duspwnens	54e4c40c2a	logstash cleanup and conflict resolution - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/326	2020-02-26 10:26:50 -05:00
m0duspwnens	0c4973ad77	pillarize logstash config,parsers,templates and docker port bindings	2020-02-25 17:44:32 -05:00
Wes Lambert	5d81bf3204	remove source	2020-02-25 12:36:35 +00:00
m0duspwnens	e2ccebd2fa	resolve conflicts	2020-02-20 17:00:15 -05:00
m0duspwnens	2b34bdece9	logstash cleanup - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/326	2020-02-20 16:47:40 -05:00
weslambert	fc9786e541	Change template name	2020-02-20 11:46:15 -05:00
weslambert	6945cbb843	Change template name	2020-02-20 11:45:50 -05:00
weslambert	30a1197b44	Rename template to avoid duplication under different name	2020-02-20 11:20:06 -05:00
m0duspwnens	7604853c59	fix logic for logstash pipelines	2020-02-19 16:02:24 -05:00
m0duspwnens	54e94676fe	fix pipelines variable	2020-02-19 14:59:39 -05:00
m0duspwnens	408b3695e0	add back deleted states to logstash state	2020-02-19 14:12:18 -05:00
m0duspwnens	c396342aea	fix syntax error with new ls pipeline config	2020-02-19 13:46:52 -05:00
m0duspwnens	6a7580404d	directory cleanup - logstash pipeline rework	2020-02-19 13:08:14 -05:00
Josh Brower	f9e07709f2	bpf fix	2020-02-18 16:36:20 -05:00
Wes Lambert	de6efffd95	Experimental: Node-RED	2020-02-18 05:04:51 +00:00
Wes Lambert	50fcf8307f	Add initia/basic Strelka config	2020-02-18 02:46:31 +00:00
Wes Lambert	64166f96a1	Ensure correct template is used	2020-02-17 21:15:11 +00:00
Wes Lambert	8d9ff4428b	Update Strelka LS config	2020-02-17 21:12:25 +00:00
Josh Brower	63c8515d87	SOCtopus.conf quick fix RE: playbook API	2020-02-17 07:48:54 -05:00
Josh Brower	6c37fbd020	Merge pull request #355 from Security-Onion-Solutions/feature/playbook-changes ... Playbook - Schema changes & more	2020-02-14 16:40:28 -05:00
Josh Brower	240620caa3	Playbook - create play API	2020-02-14 16:38:02 -05:00
Mike Reeves	4caedca795	Update telegraf.conf	2020-02-13 15:27:45 -05:00
Mike Reeves	6f42c607f7	Update telegraf.conf	2020-02-13 15:08:00 -05:00
Wes Lambert	11319362c4	Fix Wazuh archives path	2020-02-13 18:47:45 +00:00
Mike Reeves	0e74698f3f	Move index.html outside the docker	2020-02-12 10:28:43 -05:00
Mike Reeves	3b5991705a	New Index	2020-02-12 10:09:38 -05:00
William Wernert	e656e5af45	[fix] so-functions and so-restart	2020-02-12 09:26:34 -05:00
Wes Lambert	718dacf29a	update Wazuh order	2020-02-12 03:37:56 +00:00
Wes Lambert	0344ea7878	update Wazuh path	2020-02-12 03:34:12 +00:00
Mike Reeves	f7ab43e428	Update telegraf.conf	2020-02-11 19:30:17 -05:00
Josh Patterson	cb3977a6c2	Merge pull request #335 from Security-Onion-Solutions/feature/helixeps ... changes to helixeps script for telegraf	2020-02-11 17:44:10 -05:00
m0duspwnens	73d5b637ad	changes to helixeps script for telegraf	2020-02-11 17:43:05 -05:00
Wes Lambert	41db668af6	update Wazuh data paths	2020-02-11 22:16:25 +00:00
Josh Patterson	2df79ab909	Merge pull request #333 from Security-Onion-Solutions/feature/helixeps ... fix pipeline name for helix eps telegraf script	2020-02-11 15:57:12 -05:00
m0duspwnens	c6a7543366	fix pipeline name for helix eps telegraf script	2020-02-11 15:53:19 -05:00
Josh Patterson	ae1ad31fc2	Merge pull request #332 from Security-Onion-Solutions/feature/helixeps ... adding helix eps count for telegraf	2020-02-11 14:56:54 -05:00
m0duspwnens	8b835284ef	adding helix eps count for telegraf	2020-02-11 14:55:44 -05:00
Mike Reeves	aa578bffba	Stop wazzuh directory management	2020-02-11 14:53:54 -05:00