 Jason Ertel
|
1e888a5d9e
|
more detection improvements
|
2023-05-02 07:56:11 -04:00 |
|
|
Jason Ertel
|
a0ac1d2274
|
simplify cloud detection
|
2023-05-01 11:04:43 -04:00 |
|
|
Jason Ertel
|
f1f79d55dc
|
Detect cloud install on forced imdsv2 instances
|
2023-04-24 16:26:23 -04:00 |
|
 Josh Brower
|
3a22978c2b
|
Fix password gen edge case
|
2023-02-15 15:25:35 -05:00 |
|
|
Josh Brower
|
e07f4bd0ed
|
Workaround for FleetDM PW Req
|
2023-02-08 13:03:33 -05:00 |
|
 m0duspwnens
|
0c4a27d120
|
lock python36-mysql-1.3.12-2.el7 version
|
2023-02-01 12:33:19 -05:00 |
|
 doug
|
a67a254edc
|
update Copyright year
|
2023-01-04 12:44:18 -05:00 |
|
|
Jason Ertel
|
865ba4264b
|
Stop backing up kratos since it now lives in /nsm. Ensure kratos is removed when re-installing.
|
2022-12-14 10:57:24 -05:00 |
|
|
Jason Ertel
|
6985b0ab27
|
Move kratos DB to /nsm
|
2022-12-14 10:50:24 -05:00 |
|
 Doug BurksandGitHub
|
544d716c19
|
disable ecat_arp_info by default
|
2022-12-01 07:17:16 -05:00 |
|
 Wes
|
16cd1080be
|
Add dnp3_control reference in various places
|
2022-11-29 17:23:37 +00:00 |
|
|
Doug BurksandGitHub
|
45892400cb
|
add new zeek opcua logs to so-whiptail
|
2022-11-26 18:42:51 -05:00 |
|
|
Doug BurksandGitHub
|
1f0c984b98
|
add new zeek opcua logs to so-functions
|
2022-11-26 18:41:12 -05:00 |
|
|
Doug BurksandGitHub
|
9ea59355d5
|
fix opcua_binary_opensecure_channel in so-functions
|
2022-11-26 17:03:57 -05:00 |
|
|
Doug BurksandGitHub
|
c1287a61af
|
add opcua_binary_opensecure_channel to so-functions
|
2022-11-26 17:02:04 -05:00 |
|
|
Doug BurksandGitHub
|
e44c94c56b
|
add opcua_binary_opensecure_channel to so-whiptail
|
2022-11-26 17:01:11 -05:00 |
|
|
doug
|
62c1bb2c0c
|
disable ecat_arp_info since it records all arp traffic
|
2022-11-25 18:01:53 -05:00 |
|
|
Doug BurksandGitHub
|
aa2eab5738
|
fix zeek ics logs in so-functions
|
2022-11-25 09:53:11 -05:00 |
|
|
Doug BurksandGitHub
|
fe21b8bc17
|
fix zeek ics logs in so-functions
|
2022-11-25 09:45:18 -05:00 |
|
|
Doug BurksandGitHub
|
62fee1f420
|
fix zeek ics logs in so-whiptail
|
2022-11-25 09:39:58 -05:00 |
|
|
Doug BurksandGitHub
|
6f27c1b21e
|
fix zeek logs in so-whiptail
|
2022-11-25 09:26:54 -05:00 |
|
|
Doug BurksandGitHub
|
0afb20ffa8
|
fix ics entries in so-functions
|
2022-11-25 09:19:11 -05:00 |
|
|
Doug BurksandGitHub
|
40688a6076
|
add Zeek software to so-functions
|
2022-11-25 07:36:41 -05:00 |
|
|
Doug BurksandGitHub
|
9431bf1c2a
|
add Zeek software log to so-whiptail
|
2022-11-25 07:28:48 -05:00 |
|
|
Doug BurksandGitHub
|
96d7429a1c
|
Remove descriptions from so-whiptail
|
2022-11-21 13:32:51 -05:00 |
|
|
Doug BurksandGitHub
|
d4abbd89ca
|
Merge pull request #9185 from Security-Onion-Solutions/dougburks-patch-1
Update so-functions to enable ICS/SCADA for EVAL and IMPORT
|
2022-11-21 12:33:06 -05:00 |
|
 lock-wire
|
f80c8b89e4
|
Shorten Log Descriptions
|
2022-11-21 09:49:31 -07:00 |
|
|
Doug BurksandGitHub
|
aebedf9ac6
|
Update so-functions to enable ICS/SCADA for EVAL and IMPORT
|
2022-11-21 10:05:18 -05:00 |
|
 Peter Di GiorgioandGitHub
|
a28e5de5f4
|
Correct trailing \
|
2022-11-18 06:29:57 -06:00 |
|
|
Peter Di GiorgioandGitHub
|
33bf0c6902
|
Merge pull request #9163 from Security-Onion-Solutions/dev
Update Foxtrot from Dev
|
2022-11-17 10:44:24 -06:00 |
|
|
lock-wire
|
1b8e546045
|
Add s7comm,tds,stun,profinet,wireguard
|
2022-11-16 21:41:02 -06:00 |
|
|
Jason Ertel
|
02b00d2c87
|
Increase retry count and pause to allow more time for Ubuntu updates
|
2022-11-16 07:50:08 -05:00 |
|
|
Doug BurksandGitHub
|
4400c77f7e
|
Add trailing backslash to bacnet_property in so-functions
|
2022-11-12 09:13:20 -05:00 |
|
|
lock-wire
|
73b1e5949b
|
Add ecat, enip, cip, and opcua
|
2022-11-11 12:15:54 -08:00 |
|
|
Peter Di GiorgioandGitHub
|
5532577fdd
|
Merge pull request #9071 from Security-Onion-Solutions/dev
Merge Dev into Foxtrot
|
2022-11-04 08:01:29 -07:00 |
|
 Jason ErtelandGitHub
|
c23e8e5a7b
|
Update README.txt
|
2022-11-02 10:23:19 -04:00 |
|
|
Doug BurksandGitHub
|
aa4a9a093f
|
Create README.txt
|
2022-11-02 10:20:57 -04:00 |
|
|
Peter Di GiorgioandGitHub
|
326ba710ce
|
Add logs for bacnet
bacnet
bacnet_discovery
bacnet_property
|
2022-10-27 15:38:32 -07:00 |
|
|
Peter Di GiorgioandGitHub
|
2d343110cc
|
Add DNP3 and Modbus extensions to zeeklogs.sls
|
2022-10-25 07:09:11 -07:00 |
|
|
Peter Di GiorgioandGitHub
|
4502e2c260
|
Remove logs for OT parsers
|
2022-10-24 23:16:18 -07:00 |
|
|
Peter Di GiorgioandGitHub
|
9cdc29c482
|
Fix Syntax for zeeklogs pillar
|
2022-10-24 14:30:15 -07:00 |
|
|
Peter Di GiorgioandGitHub
|
cd4e0c1f8e
|
Add DNP3 and Modbus extensions to zeeklogs.sls
Add DNP3 and Modbus extenstions to zeeklogs to ensure filebeat.yml is configured properly to ship lots. Need to move these behind the OT flag.
|
2022-10-21 14:19:21 -07:00 |
|
|
m0duspwnens
|
0ebd957308
|
point to salt3004.2
|
2022-06-30 11:26:03 -04:00 |
|
 Mike ReevesandGitHub
|
f36c8da1fe
|
Update so-functions
|
2022-06-27 12:04:33 -04:00 |
|
|
Mike ReevesandGitHub
|
080daee1d8
|
Update so-functions
|
2022-06-27 11:43:01 -04:00 |
|
|
Jason Ertel
|
ba6f716e4a
|
Avoid failing setup due to retrying while waiting for lock file
|
2022-06-23 06:09:04 -04:00 |
|
|
Jason Ertel
|
210bc556db
|
Add logscan and suricata variants for cloud tests to move from PM into the cloud and help alleviate disk contention
|
2022-05-28 10:29:04 -04:00 |
|
|
Jason Ertel
|
e87e672b9e
|
Add logscan and suricata variants for cloud tests to move from PM into the cloud and help alleviate disk contention
|
2022-05-28 10:28:20 -04:00 |
|
|
Jason Ertel
|
8bb02763dc
|
Exclude pkg upgrade retry error logs from failing setup
|
2022-05-28 08:28:10 -04:00 |
|
|
weslambertandGitHub
|
c81988ab00
|
Update shard count for Zeek in setup
|
2022-04-21 17:26:30 -04:00 |
|