CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-07-14 21:03:10 +02:00
Code Issues Packages Projects Releases Wiki Activity
1,909 Commits 40 Branches 127 Tags
3262854f4e37b28fa80aa562cfa22ceeb0504930
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Wes Lambert e687def4dc remove Cyberchef 2020-01-23 18:44:34 +00:00
Wes Lambert d2c9689b44 update TheHive init 2020-01-23 18:35:04 +00:00
weslambertandGitHub dc0c92fb92 Merge pull request #243 from Security-Onion-Solutions/feature/isoregistry 
Feature/isoregistry
 2020-01-23 13:25:26 -05:00
weslambertandGitHub 005aa35918 Merge pull request #242 from Security-Onion-Solutions/issues/241 
fix master state
 2020-01-22 14:35:32 -05:00
weslambertandGitHub 774f138c33 Merge pull request #240 from Security-Onion-Solutions/feature/issue124 
changes for multipipelines / mastersearch node
 2020-01-21 16:50:10 -05:00
Wes Lambert 0b45d6f638 increase free disk percentage 2020-01-20 14:08:02 +00:00
weslambertandGitHub 533d54793d Merge pull request #228 from Security-Onion-Solutions/bugfix/localhost 
Bugfix/localhost
 2020-01-16 11:43:37 -05:00
Wes Lambert 348dbb752a source so-common 2020-01-14 13:48:57 +00:00
Wes Lambert 4917a7284d add initial replay wrappers 2020-01-13 22:19:15 +00:00
Wes Lambert a960083d6e add Wazuh manager whitelist script 2020-01-13 21:13:28 +00:00
Wes Lambert 1338f7125f update Wazuh init for whitelist 2020-01-13 21:12:33 +00:00
Wes Lambert 8e7b2bc888 remove double bash declaration 2020-01-13 20:57:03 +00:00
Wes Lambert 8c36b3b695 add quotes 2020-01-13 20:17:38 +00:00
Wes Lambert c4626020a4 update so-allow to allow arguments 2020-01-13 20:07:54 +00:00
Wes Lambert 7e1870e9d0 update image versions 2020-01-13 13:52:30 +00:00
weslambertandGitHub 6ea941dfba Merge pull request #205 from Security-Onion-Solutions/feature/soscripts 
soscripts - so-elastic-diagnose
 2020-01-09 15:07:32 -05:00
Wes Lambert 79ef0b6e1f remove cyberchef from proxy conf 2020-01-08 14:27:50 +00:00
weslambertandGitHub 7b081b10ad Merge pull request #203 from Security-Onion-Solutions/feature/soscripts-elastalert 
so scripts - elastalert dev
 2020-01-07 17:08:35 -05:00
weslambertandGitHub c91acd654a Merge pull request #202 from Security-Onion-Solutions/feature/playbook-bulkimport 
Playbook - redmine.db schema changes
 2020-01-06 16:23:02 -05:00
Wes Lambert a646c1123f fix typo 2020-01-03 21:31:40 +00:00
weslambertandGitHub fbf6e5590d Merge pull request #199 from Security-Onion-Solutions/feature/issue127 
manage threshold.conf with Salt - #127
 2020-01-03 14:57:43 -05:00
weslambertandGitHub cc4b536042 Merge pull request #198 from Security-Onion-Solutions/feature/so-scripts 
SO Scripts - start|stop|restart
 2020-01-02 16:03:41 -05:00
weslambertandGitHub 5358220121 Merge pull request #197 from Security-Onion-Solutions/feature/so-scripts-stop 
so-stop scripts - initial commit
 2020-01-02 13:38:19 -05:00
Wes Lambert 82abdedb02 add license 2020-01-02 15:55:52 +00:00
Wes Lambert 82f1d5718a add exclusion for Zeek clean log and extracted file mgmt 2020-01-02 15:39:38 +00:00
Wes Lambert 566d3ed280 revise message text 2020-01-02 15:20:34 +00:00
Wes Lambert c4f57f09ee add Zeek clean script 2020-01-02 15:13:46 +00:00
Wes Lambert bc533bef24 update TheHiveAlerter module 2019-12-30 21:10:56 +00:00
Wes Lambert f597b9f4e5 add AR whitelist for Wazuh 2019-12-30 19:04:54 +00:00
Wes Lambert df722c173f fix typo and prevent agent from getting re-added 2019-12-30 17:47:00 +00:00
Wes Lambert ffc116085e add auth log path for Centos 2019-12-30 17:32:54 +00:00
weslambertandGitHub 8829b5132e Merge pull request #179 from Security-Onion-Solutions/feature/cyberchef_cleanup 
Remove Cyberchef from top file since it is now in so-core
 2019-12-20 12:40:44 -05:00
Wes Lambert 124c552fca remove Cyberchef from top file since it is now in so-core 2019-12-20 15:49:22 +00:00
Wes Lambert eea08f3515 add back helix 2019-12-20 01:24:20 +00:00
weslambertandGitHub 574ee6b97a Merge pull request #174 from Security-Onion-Solutions/quickfix/cyberchef-version 
[BUG] Updated missed text in cyberchef init.sls
 2019-12-19 18:12:11 -05:00
weslambertandGitHub 1876bc2b57 Merge pull request #173 from Security-Onion-Solutions/quickfix/cyberchef-version 
Revert cyberchef version update
 2019-12-19 17:08:13 -05:00
weslambertandGitHub 839f710f61 Merge pull request #166 from Security-Onion-Solutions/feature/fix_hive 
fix ssl verify hive_init.sh
 2019-12-18 14:20:43 -05:00
Wes Lambert c597dd2fb4 Strelka - Filebeat config 2019-12-18 03:22:30 +00:00
Wes Lambert 88f142664f Strelka - intial config 2019-12-18 03:13:14 +00:00
Wes Lambert 4a34ac7c05 wait for TheHive before attempting to configure 2019-12-17 13:34:01 +00:00
Wes Lambert 56d354b256 update Cyberchef to serve static files vs self-hosted 2019-12-16 21:22:00 +00:00
Wes Lambert d66eca1db4 add Bro extracted directory 2019-12-16 20:45:14 +00:00
Wes Lambert c47d163a32 add initial tcpreplay state 2019-12-11 19:39:03 +00:00
Wes Lambert 65a5a2e64a pre-load custom reputation field 2019-12-05 17:41:19 +00:00
Wes Lambert b58b3afa35 add auto_analyze_alerts option 2019-12-05 03:22:10 +00:00
Wes Lambert 79e1ac5336 add webhook 2019-12-04 18:39:58 +00:00
Wes Lambert 5eb0a4f19c update SOCtopus conf 2019-12-04 03:12:02 +00:00
Wes Lambert 76cdc02305 user Cortex org user instead 2019-11-19 16:28:42 +00:00
Wes Lambert b7ad65a837 add Cortex org user 2019-11-19 16:28:05 +00:00
Wes Lambert 34460a6b07 add Cortex org user to setup 2019-11-19 16:25:10 +00:00
Wes Lambert 55db27c898 fix require 2019-11-13 02:21:36 +00:00
Wes Lambert 1feddb7922 add Cyberchef dir 2019-11-12 22:50:46 +00:00
Wes Lambert e364638a62 add Cyberchef 2019-11-12 22:50:00 +00:00
Wes Lambert 2e82d06f27 only configure Telegraf if Grafana enabled 2019-11-12 21:10:31 +00:00
Wes Lambert e323a44827 change intial user role to superadmin 2019-11-07 14:37:18 +00:00
Wes Lambert 74428f33eb pin Wazuh agent version 2019-10-31 14:55:14 +00:00
weslambertandGitHub ca8c4a6b93 Update README.md 2019-09-27 14:56:35 -04:00
weslambertandGitHub 4dd414fb16 Merge pull request #104 from weslambert/master 
update log path
 2019-09-24 16:38:52 -04:00
Wes Lambert 5bd77a5177 update log path 2019-09-24 20:37:07 +00:00
Wes Lambert 497edcbe45 update Filebeat log config 2019-09-24 19:38:06 +00:00
Wes Lambert 2784542cdb update Elastalert config 2019-09-23 22:39:43 +00:00
Wes Lambert 965ee6f922 remove duplicate alerter 2019-09-23 14:43:54 +00:00
Wes Lambert 5419bd6f08 update config for Elastalert 2019-09-23 14:43:14 +00:00
Wes Lambert 9a53cfd5ff update path 2019-09-18 19:47:39 +00:00
Wes Lambert 1f8fd7ddd1 fix typo 2019-09-18 19:42:02 +00:00
Wes Lambert 30d732e18f sync default Elastalert rules 2019-09-18 19:37:47 +00:00
Wes Lambert 3f07d7de91 add files 2019-09-09 20:28:31 +00:00
Wes Lambert a1998a8aa2 update to allow use of custom modules and local config 2019-09-09 20:23:37 +00:00
Wes Lambert 707e0e378a ensure setup log is consistent 2019-05-16 13:25:02 +00:00
Wes Lambert 4f15e14cc2 TheHive: Add initial user 2019-03-28 14:24:17 +00:00
Wes Lambert 8b8556213b SOCtopus: more config updates 2019-03-25 21:26:53 +00:00
Wes Lambert 1d01192b9e SOCtopus: update config 2019-03-25 21:21:21 +00:00
Wes Lambert 03e42a009a SOCtopus: update config 2019-03-25 16:12:24 +00:00
Wes Lambert 28c0cda16b SOCtopus: Initial Commit 2019-03-15 02:40:02 +00:00
Wes Lambert cdfc3a15ad osquery: fix host field conflict 2019-01-16 19:25:06 +00:00
Wes Lambert 04cdd2d976 Redis - Re-enable for Fleet live queries 2018-12-18 15:45:25 +00:00
Wes Lambert 9930aac556 Wazuh - Add conditional for config profile 2018-12-14 21:28:46 +00:00
Wes Lambert 172c9e0593 Logstash - Wazuh parsing updates 2018-12-14 18:00:19 +00:00
Wes Lambert 2f12c36c87 Setup - Clean up old Wazuh stuff and move Curator config to SN Adv Mode 2018-12-14 14:07:20 +00:00
Wes Lambert 09f5c24251 SSL - Ensure storage node gets FB cert 2018-12-14 14:05:35 +00:00
Wes Lambert 55a426c347 Cleanup - Lowercase SENSOR 2018-12-14 03:27:13 +00:00
Wes Lambert 9ce41f81b9 Setup - Make sensor minion config consistent 2018-12-14 00:12:37 +00:00
Wes Lambert c7dcbb8dcb Merge remote-tracking branch 'upstream/master' 2018-12-13 23:57:24 +00:00
Wes Lambert a662badc5b Firewall - Fix stuff for sensor 2018-12-13 23:52:15 +00:00
Wes Lambert 1d9fae304c Setup - Get Curator disk size when /nsm not present 2018-12-13 22:01:21 +00:00
Wes Lambert bd04dc45a3 Wazuh - Fix Jinja 2018-12-13 18:30:04 +00:00
Wes Lambert 75ed258d19 Firewall - Fix Wazuh IP logic for sensors 2018-12-13 17:57:22 +00:00
Wes Lambert 4db52ec865 Wazuh - Add logic for sensors 2018-12-13 17:56:51 +00:00
Wes Lambert 5e23859557 Salt - Add Wazuh to other roles 2018-12-13 17:34:19 +00:00
Wes Lambert 62067f37cf Wazuh - Fix agent ip for storage nodes 2018-12-13 17:33:12 +00:00
Wes Lambert d13e7559fe Filebeat - Enabled for master and only enable Bro/Suri inputs when needed 2018-12-13 17:32:03 +00:00
Wes Lambert 41e9c4c7e0 Logstash - Alter input for Wazuh logs 2018-12-12 20:52:18 +00:00
Wes Lambert 54c35cdc0d Filebeat - Add Wazuh archive logs 2018-12-12 20:51:41 +00:00
Wes Lambert 8496834f8b Wazuh - Re-order top.sls so Filebeat does not overrite Wazuh logs 2018-12-12 15:48:59 +00:00
Wes Lambert 9d86744e07 Filebeat - Fix Wazuh alerts path 2018-12-12 15:19:51 +00:00
Wes Lambert e20ab3b407 Filebeat - Config for Wazuh alerts 2018-12-12 14:48:17 +00:00
Wes Lambert 5822842d2e Wazuh - Add sleep to wait for API 2018-12-12 13:36:13 +00:00
Wes Lambert a99ec40506 Setup - Remark Wazuh agent config 2018-12-12 13:10:27 +00:00
Wes Lambert 8404897fe3 Wazuh - Move agent config to init.sls 2018-12-12 06:05:13 +00:00
Wes Lambert 823a589fae Wazuh - Set mode for agent registration script 2018-12-12 04:01:13 +00:00