  Wes LambertandWilliam Wernert
|
7ea861650f
|
updated placeholder in saved objects
|
2020-04-18 19:11:20 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
8622dab0d2
|
update load script
|
2020-04-18 19:11:19 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
66b4f15a7b
|
replace static value for comm id
|
2020-04-18 19:03:11 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
b67229783b
|
update parsing for Zeek files
|
2020-04-18 18:59:21 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
358d2f74b2
|
update key name
|
2020-04-18 18:58:27 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
0a564a438b
|
update Kibana config
|
2020-04-18 18:58:27 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
5f2fa0fdc5
|
migrate Zeek clean script from Bro
|
2020-04-18 18:56:34 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
159799c91d
|
move PL
|
2020-04-18 18:10:34 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
0c658d01ef
|
remark config load section for now
|
2020-04-18 18:10:33 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
19678aa977
|
fix order
|
2020-04-18 18:09:38 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
40e683d7a6
|
replace URL template with Label template
|
2020-04-18 18:09:38 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
0e3978b87c
|
Revert "update Kibana config"
This reverts commit 82bd14252c.
|
2020-04-18 18:09:37 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
f2b3ca8763
|
add Kibana config export command
|
2020-04-18 18:08:41 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
a7bb014fba
|
update Kibana config
|
2020-04-18 18:08:40 -04:00 |
|
 weslambertandGitHub
|
60702687d2
|
Merge pull request #576 from Security-Onion-Solutions/fix/kibana_config
Fix/kibana config
|
2020-04-16 15:00:27 -04:00 |
|
|
Wes Lambert
|
1020428e49
|
updated placeholder in saved objects
|
2020-04-16 18:58:42 +00:00 |
|
|
Wes Lambert
|
15ba411d0a
|
update load script
|
2020-04-16 18:58:14 +00:00 |
|
|
weslambertandGitHub
|
133450d2de
|
Merge pull request #567 from Security-Onion-Solutions/fix/comm_id_pivot
replace static value for comm id
|
2020-04-15 14:16:36 -04:00 |
|
|
Wes Lambert
|
9a02550c69
|
replace static value for comm id
|
2020-04-15 18:15:01 +00:00 |
|
|
weslambertandGitHub
|
3321e975bd
|
Merge pull request #562 from Security-Onion-Solutions/fix/zeek_files
update parsing for Zeek files
|
2020-04-14 09:09:40 -04:00 |
|
|
Wes Lambert
|
59787a6532
|
update parsing for Zeek files
|
2020-04-14 13:08:31 +00:00 |
|
|
weslambertandGitHub
|
84e37856f0
|
Merge pull request #560 from Security-Onion-Solutions/fix/static_rename
Update key name for Wazuh and Strelka for Filebeat
|
2020-04-13 12:10:27 -04:00 |
|
|
Wes Lambert
|
e086db3de6
|
update key name
|
2020-04-13 16:09:06 +00:00 |
|
|
weslambertandGitHub
|
29437b9082
|
Merge pull request #557 from Security-Onion-Solutions/fix/kibana_config
update Kibana config
|
2020-04-13 08:18:47 -04:00 |
|
|
Wes Lambert
|
4df91ed008
|
update Kibana config
|
2020-04-13 12:17:07 +00:00 |
|
|
weslambertandGitHub
|
6aafc4ef01
|
Merge pull request #550 from Security-Onion-Solutions/fix/zeek_clean
Zeek: migrate Zeek clean script from Bro
|
2020-04-10 08:51:54 -04:00 |
|
|
Wes Lambert
|
8d8bde36e8
|
migrate Zeek clean script from Bro
|
2020-04-10 12:46:28 +00:00 |
|
|
weslambertandGitHub
|
5ecbac9abd
|
Merge pull request #538 from Security-Onion-Solutions/fix/kibana_config_load
remark config load section for now
|
2020-04-08 14:49:24 -04:00 |
|
|
Wes Lambert
|
f4c01eb313
|
move PL
|
2020-04-08 18:48:22 +00:00 |
|
|
Wes Lambert
|
ead03f5147
|
remark config load section for now
|
2020-04-08 18:47:04 +00:00 |
|
|
weslambertandGitHub
|
b293c3dd2c
|
Merge pull request #536 from Security-Onion-Solutions/fix/kibana_config
Fix/kibana config
|
2020-04-08 14:26:40 -04:00 |
|
|
Wes Lambert
|
a6c7765dd1
|
fix order
|
2020-04-08 18:25:47 +00:00 |
|
|
Wes Lambert
|
ce3807a605
|
replace URL template with Label template
|
2020-04-08 18:16:09 +00:00 |
|
|
weslambertandGitHub
|
3fab895435
|
Merge pull request #535 from Security-Onion-Solutions/fix/revert_kibana_config
Revert "update Kibana config"
|
2020-04-08 14:00:35 -04:00 |
|
|
Wes Lambert
|
433e571369
|
Revert "update Kibana config"
This reverts commit 82bd14252c.
|
2020-04-08 17:59:24 +00:00 |
|
|
weslambertandGitHub
|
313f332ac8
|
Merge pull request #533 from Security-Onion-Solutions/elastic_updates
Elastic updates
|
2020-04-08 12:28:14 -04:00 |
|
|
Wes Lambert
|
051167a692
|
add Kibana config export command
|
2020-04-08 16:26:13 +00:00 |
|
|
Wes Lambert
|
82bd14252c
|
update Kibana config
|
2020-04-08 16:25:24 +00:00 |
|
|
weslambertandGitHub
|
fea345326b
|
Merge pull request #525 from Security-Onion-Solutions/fix/strelka_filebeat
update variables
|
2020-04-06 09:11:04 -04:00 |
|
|
Wes Lambert
|
ad5626f407
|
update variables
|
2020-04-06 13:09:52 +00:00 |
|
|
weslambertandGitHub
|
673c64d2a4
|
Merge pull request #523 from Security-Onion-Solutions/fix/elastic_improvements
Fix/elastic improvements
|
2020-04-05 16:53:19 -04:00 |
|
|
Wes Lambert
|
c476b28ac8
|
update script
|
2020-04-05 20:52:00 +00:00 |
|
|
Wes Lambert
|
cc9a91bfdb
|
update Kibana config
|
2020-04-05 20:50:29 +00:00 |
|
|
Wes Lambert
|
7765d9a038
|
update common template
|
2020-04-05 20:40:30 +00:00 |
|
|
Wes Lambert
|
9e50387eec
|
update ingest files
|
2020-04-05 20:40:00 +00:00 |
|
|
weslambertandGitHub
|
69c90fcdc1
|
Merge pull request #516 from Security-Onion-Solutions/fix/kibana_placeholders
fix placeholders
|
2020-04-03 08:31:54 -04:00 |
|
|
Wes Lambert
|
52edbd23d6
|
fix placeholders
|
2020-04-03 12:21:32 +00:00 |
|
|
weslambertandGitHub
|
0e568103d1
|
Merge pull request #515 from Security-Onion-Solutions/fix/add_more_dashes
update dashboards
|
2020-04-03 00:25:58 -04:00 |
|
|
Wes Lambert
|
638ed36a79
|
update dashboards
|
2020-04-03 04:23:50 +00:00 |
|
|
weslambertandGitHub
|
61aa723c1d
|
Merge pull request #514 from Security-Onion-Solutions/fix/strelka_setup
install Strelka for sensor
|
2020-04-02 21:37:07 -04:00 |
|
|
Wes Lambert
|
b22a3a6534
|
install Strelka for sensor
|
2020-04-03 01:36:00 +00:00 |
|
|
weslambertandGitHub
|
86ccca3c2e
|
Merge pull request #513 from Security-Onion-Solutions/fix/strelka_backend_restart
change restart policy for now
|
2020-04-02 21:09:56 -04:00 |
|
|
Wes Lambert
|
17fd32f12d
|
change restart policy for now
|
2020-04-03 01:07:45 +00:00 |
|
|
weslambertandGitHub
|
395503165c
|
Merge pull request #512 from Security-Onion-Solutions/fix/strelka_cron
change user
|
2020-04-02 21:03:32 -04:00 |
|
|
Wes Lambert
|
d477d73baa
|
change user
|
2020-04-03 01:02:46 +00:00 |
|
|
weslambertandGitHub
|
8d84ee9c81
|
Merge pull request #511 from Security-Onion-Solutions/fix/kibana_load
update Kibana config
|
2020-04-02 21:00:45 -04:00 |
|
|
Wes Lambert
|
f0848906e7
|
update Kibana config
|
2020-04-03 00:59:23 +00:00 |
|
|
weslambertandGitHub
|
7cefc218c4
|
Merge pull request #505 from Security-Onion-Solutions/strelka-sensor
Strelka sensor
|
2020-04-02 16:04:35 -04:00 |
|
|
Wes Lambert
|
9a082725d1
|
add Strelka for sensor if enabled
|
2020-04-02 20:03:29 +00:00 |
|
|
Wes Lambert
|
eb0c23387b
|
specify ES vs LS in FB config
|
2020-04-02 20:01:49 +00:00 |
|
|
weslambertandGitHub
|
fd2b35dd21
|
Merge pull request #498 from Security-Onion-Solutions/fix/observer
use agent name for observer name
|
2020-04-01 17:28:52 -04:00 |
|
|
Wes Lambert
|
e023aeb9be
|
use agent name for observer name
|
2020-04-01 21:27:25 +00:00 |
|
|
weslambertandGitHub
|
b14f9067ab
|
Merge pull request #495 from Security-Onion-Solutions/fix/zeek_output_config
Bro to Zeek
|
2020-04-01 15:19:02 -04:00 |
|
|
weslambertandGitHub
|
edbe512d82
|
Bro to Zeek
|
2020-04-01 15:18:30 -04:00 |
|
|
weslambertandGitHub
|
5f8d1c29b4
|
Merge pull request #494 from Security-Onion-Solutions/search_ls_pillar
Search ls pillar
|
2020-04-01 15:13:17 -04:00 |
|
|
Wes Lambert
|
22e7777d67
|
update search sls
|
2020-04-01 19:12:07 +00:00 |
|
|
Wes Lambert
|
09022ad752
|
Update Zeek and Strelka
|
2020-04-01 19:11:10 +00:00 |
|
|
Wes Lambert
|
1df2302287
|
Update Zeek and Strelka
|
2020-04-01 19:09:38 +00:00 |
|
|
weslambertandGitHub
|
82c99edbfc
|
Update Suricata output
|
2020-04-01 15:02:52 -04:00 |
|
|
weslambertandGitHub
|
e1008269ce
|
Update OSSEC output
|
2020-04-01 15:00:52 -04:00 |
|
|
weslambertandGitHub
|
9f58081ce8
|
Typo
|
2020-04-01 14:57:47 -04:00 |
|
|
weslambertandGitHub
|
d0ad7e7ef9
|
Update config for search pipeline
|
2020-04-01 14:57:32 -04:00 |
|
|
weslambertandGitHub
|
5c433c39e5
|
Merge pull request #492 from Security-Onion-Solutions/fix/strelka-zeek-extracted-sync
Add Zeek extracted file sync
|
2020-04-01 14:20:36 -04:00 |
|
|
weslambertandGitHub
|
cc4b1bf936
|
Add Zeek extracted file sync
|
2020-04-01 14:19:36 -04:00 |
|
|
weslambertandGitHub
|
df00405265
|
Merge pull request #491 from Security-Onion-Solutions/fix/strelka_init
Remove restart policy
|
2020-04-01 13:19:57 -04:00 |
|
|
weslambertandGitHub
|
5173da5a33
|
Remove restart policy
|
2020-04-01 13:19:31 -04:00 |
|
|
weslambertandGitHub
|
44ae4604b5
|
Merge pull request #489 from Security-Onion-Solutions/fix/strelka-curly
Fix curly brace
|
2020-04-01 12:33:02 -04:00 |
|
|
weslambertandGitHub
|
7390063026
|
Fix curly brace
|
2020-04-01 12:32:29 -04:00 |
|
|
weslambertandGitHub
|
92c714ea4c
|
Merge pull request #488 from Security-Onion-Solutions/fix/strelka_top
Update Eval for Strelka
|
2020-04-01 11:42:18 -04:00 |
|
|
weslambertandGitHub
|
2fcfb06ba5
|
Update Eval for Strelka
|
2020-04-01 11:41:56 -04:00 |
|
|
weslambertandGitHub
|
3001abc3ea
|
Merge pull request #487 from Security-Onion-Solutions/fix/elastic_fixes
Fix/elastic fixes
|
2020-04-01 11:32:22 -04:00 |
|
|
weslambertandGitHub
|
f13093dc51
|
Add message rename
|
2020-04-01 11:31:57 -04:00 |
|
|
weslambertandGitHub
|
26efad1c45
|
Update Strelka log path
|
2020-04-01 11:30:02 -04:00 |
|
|
weslambertandGitHub
|
9f44a86ae4
|
Merge pull request #485 from Security-Onion-Solutions/strelka_enable
Enable Strelka via Setup
|
2020-04-01 10:08:09 -04:00 |
|
|
Wes Lambert
|
2164de97b5
|
Enable Strelka via Setup
|
2020-04-01 14:06:19 +00:00 |
|
|
weslambertandGitHub
|
fd6832bf51
|
Merge pull request #483 from Security-Onion-Solutions/elastic_config
template and kibana config updates
|
2020-04-01 09:15:10 -04:00 |
|
|
Wes Lambert
|
33512eca2a
|
template and kibana config updates
|
2020-04-01 13:14:13 +00:00 |
|
|
weslambertandGitHub
|
a6b3e0e4a8
|
Merge pull request #482 from Security-Onion-Solutions/fix/strelka_config
add strelka index
|
2020-04-01 09:04:35 -04:00 |
|
|
Wes Lambert
|
6cc757e1de
|
add strelka index
|
2020-04-01 13:02:36 +00:00 |
|
|
weslambertandGitHub
|
d8f30a0240
|
Merge pull request #481 from Security-Onion-Solutions/fix/strelka_stuff
Fix/strelka stuff
|
2020-04-01 09:00:07 -04:00 |
|
|
Wes Lambert
|
70422809ec
|
add category
|
2020-04-01 12:59:10 +00:00 |
|
|
Wes Lambert
|
9bbcc185aa
|
change Strelka log location
|
2020-04-01 12:57:51 +00:00 |
|
|
weslambertandGitHub
|
fd00cdf8f3
|
Merge pull request #473 from Security-Onion-Solutions/more_elastic_stuff
More elastic stuff
|
2020-03-30 20:41:56 -04:00 |
|
|
Wes Lambert
|
68138e009a
|
update FB config
|
2020-03-31 00:37:58 +00:00 |
|
|
Wes Lambert
|
5226ec1560
|
update Kibana config/dashboards/etc
|
2020-03-31 00:37:17 +00:00 |
|
|
Wes Lambert
|
eacd3c9bfd
|
update zeek.common
|
2020-03-31 00:36:42 +00:00 |
|
|
weslambertandGitHub
|
9758563967
|
Merge pull request #470 from Security-Onion-Solutions/ecs_community_id
add community_id parsing for ingest
|
2020-03-30 11:51:05 -04:00 |
|
|
Wes Lambert
|
ad50093315
|
add community_id parsing for ingest
|
2020-03-30 15:49:36 +00:00 |
|
|
weslambertandGitHub
|
ee4e3c0659
|
Merge pull request #469 from Security-Onion-Solutions/fix/ingest_stuff
update wazuh fields and category
|
2020-03-30 10:24:43 -04:00 |
|
|
Wes Lambert
|
93c3c86e2f
|
update wazuh fields and category
|
2020-03-30 14:24:01 +00:00 |
|