  weslambertandGitHub
|
3368789b43
|
Update VERSION
|
2023-08-03 08:49:45 -04:00 |
|
|
weslambertandGitHub
|
72e1cbbfb6
|
Merge pull request #10920 from Security-Onion-Solutions/fix/pfsense
Pfsense fix
|
2023-08-02 13:27:33 -04:00 |
|
|
weslambertandGitHub
|
f102351052
|
Add event
|
2023-08-02 13:25:44 -04:00 |
|
|
weslambertandGitHub
|
ac28f90af3
|
Remove override
|
2023-08-02 13:15:11 -04:00 |
|
|
weslambertandGitHub
|
25b11c35fb
|
Merge pull request #10915 from Security-Onion-Solutions/fix/ea_elastic_defend
Set version for Elastic Defend and enable updates
|
2023-08-02 10:32:30 -04:00 |
|
|
weslambertandGitHub
|
ef0301d364
|
Merge pull request #10914 from Security-Onion-Solutions/feature/package_list
Add package list
|
2023-08-02 10:03:38 -04:00 |
|
|
Wes
|
e694019027
|
Add package list
|
2023-08-02 13:50:14 +00:00 |
|
|
weslambertandGitHub
|
22ebb2faf6
|
Merge pull request #10907 from Security-Onion-Solutions/fix/ea_container_logs
EA Container Logs
|
2023-08-02 09:26:53 -04:00 |
|
|
Wes
|
0d5ed2e835
|
Set version for Elastic Defend and enable updates
|
2023-08-02 13:21:03 +00:00 |
|
|
Wes
|
0e047cffad
|
Add to logrotate
|
2023-08-01 20:14:53 +00:00 |
|
|
Wes
|
44b086a028
|
Change path
|
2023-08-01 20:13:50 +00:00 |
|
|
Wes
|
4e2eb86b36
|
Move LOGS_PATH to environment vars
|
2023-08-01 20:11:51 +00:00 |
|
|
weslambertandGitHub
|
1cbf60825d
|
Add log dir
|
2023-08-01 14:40:52 -04:00 |
|
|
weslambertandGitHub
|
2d13bf1a61
|
Present logs to the host
|
2023-08-01 14:40:12 -04:00 |
|
|
weslambertandGitHub
|
e7bef745eb
|
Merge pull request #10904 from Security-Onion-Solutions/fix/syslog
Move syslog to the INPUT chain where needed
|
2023-08-01 12:14:48 -04:00 |
|
|
weslambertandGitHub
|
4adaddf13f
|
Move syslog to the INPUT chain where needed
|
2023-08-01 10:14:59 -04:00 |
|
|
weslambertandGitHub
|
ba3660d0da
|
Merge pull request #10894 from Security-Onion-Solutions/fix/soc_auth
SOC Auth msg fix
|
2023-08-01 08:35:41 -04:00 |
|
|
weslambertandGitHub
|
83265d9d6c
|
Merge pull request #10893 from Security-Onion-Solutions/foxtrot
Elastic 8.2.2
|
2023-08-01 08:20:07 -04:00 |
|
|
weslambertandGitHub
|
527a6ba454
|
Use asterisk when searching 'msg' since it is now a keyword
|
2023-07-31 23:52:38 -04:00 |
|
|
weslambertandGitHub
|
f84b0a3219
|
Update VERSION
|
2023-07-31 23:16:46 -04:00 |
|
|
weslambertandGitHub
|
ae6997a6b7
|
Merge pull request #10892 from Security-Onion-Solutions/feature/elastic_8.8.2
Elastic 8.8.2
|
2023-07-31 22:24:21 -04:00 |
|
|
weslambertandGitHub
|
9d59e4250f
|
Update VERSION
|
2023-07-31 22:23:54 -04:00 |
|
|
Wes
|
48d9c14563
|
Enable log package by default
|
2023-08-01 02:20:43 +00:00 |
|
|
Wes
|
29b64eadd4
|
Change log.log to log.logs
|
2023-08-01 02:20:22 +00:00 |
|
|
weslambertandGitHub
|
5dd5f9fc1c
|
Elastic 8.8.2
|
2023-07-31 22:18:43 -04:00 |
|
|
weslambertandGitHub
|
44c926ba8d
|
Elastic 8.8.2
|
2023-07-31 22:18:07 -04:00 |
|
|
weslambertandGitHub
|
6a55a8e5c0
|
Elastic 8.2.2
|
2023-07-31 22:17:22 -04:00 |
|
|
Wes
|
5553be02ac
|
Change how tags are added
|
2023-07-24 21:31:28 +00:00 |
|
|
Wes
|
4efc951eaf
|
Add tags
|
2023-07-24 20:57:39 +00:00 |
|
|
Wes
|
d84dbf9535
|
Add fleet
|
2023-07-24 18:53:52 +00:00 |
|
|
Wes
|
de7b7ff989
|
Add endpoint
|
2023-07-24 18:35:02 +00:00 |
|
|
weslambertandGitHub
|
be254b15f2
|
Merge pull request #10804 from Security-Onion-Solutions/fix/fleet_logging
Fleet logging
|
2023-07-20 15:51:56 -04:00 |
|
|
weslambertandGitHub
|
83e1e3efdc
|
Merge pull request #10788 from Security-Onion-Solutions/fix/elastic_mappings
Fix user name mapping and remove security subfield
|
2023-07-20 15:51:42 -04:00 |
|
|
Wes
|
d07c46f27e
|
Change playbook and sysmon
|
2023-07-20 16:08:50 +00:00 |
|
|
Wes
|
c68cd6cf33
|
Fix typo
|
2023-07-20 14:39:35 +00:00 |
|
|
Wes
|
4b7e7978ef
|
Add final pipeline
|
2023-07-19 19:56:54 +00:00 |
|
|
Wes
|
0b19179630
|
Add logrotate
|
2023-07-19 15:17:42 +00:00 |
|
|
Wes
|
30a14f8aaf
|
Add logging
|
2023-07-19 15:00:20 +00:00 |
|
|
Wes
|
877fc36013
|
Add log dir
|
2023-07-19 14:57:24 +00:00 |
|
|
Wes
|
b738325880
|
Remove keyword
|
2023-07-19 13:55:12 +00:00 |
|
|
Wes
|
1848a835f5
|
Remove keyword
|
2023-07-19 13:52:15 +00:00 |
|
|
weslambertandGitHub
|
17fcf12608
|
Merge pull request #10791 from Security-Onion-Solutions/fix/elastic_clear
Set delete for interactive
|
2023-07-19 08:27:00 -04:00 |
|
|
Wes
|
6a8737e9a2
|
Set delete for interactive
|
2023-07-19 12:21:47 +00:00 |
|
|
weslambertandGitHub
|
41ebb403ca
|
Merge pull request #10787 from Security-Onion-Solutions/fix/elastic_clear
Use new agent scripts for Elastic clear command
|
2023-07-18 16:15:27 -04:00 |
|
|
Wes
|
a59eda319e
|
Remove security subfield
|
2023-07-18 19:00:50 +00:00 |
|
|
Wes
|
8a76975d8c
|
Use new agent scripts
|
2023-07-18 18:43:57 +00:00 |
|
|
Wes
|
1d3e39b6bd
|
Map user name to keyword and remove security subfield generation
|
2023-07-18 14:46:47 +00:00 |
|
|
weslambertandGitHub
|
6816d06710
|
Merge pull request #10766 from Security-Onion-Solutions/fix/elastic-agent-scripts
Add agent scripts
|
2023-07-17 10:46:54 -04:00 |
|
|
Wes
|
d19615f743
|
Fix typo
|
2023-07-17 14:42:27 +00:00 |
|
|
Wes
|
1a4515fc8a
|
Split restart into stop and start
|
2023-07-17 14:30:51 +00:00 |
|
|
Wes
|
31696803e1
|
Use correct name
|
2023-07-17 14:28:12 +00:00 |
|
|
Wes
|
e715dfa354
|
Remove sbin
|
2023-07-17 14:27:39 +00:00 |
|
|
Wes
|
c723a09107
|
Remove agent installer generation script
|
2023-07-14 21:45:25 +00:00 |
|
|
Wes
|
8cf3ceeb71
|
Update agent scripts
|
2023-07-14 21:43:03 +00:00 |
|
|
weslambertandGitHub
|
922a77ac55
|
Merge pull request #10762 from Security-Onion-Solutions/fix/integration_elasticsearch
Allow Elasticsearch integration policy
|
2023-07-13 14:42:23 -04:00 |
|
|
weslambertandGitHub
|
a62f96595c
|
Merge pull request #10763 from Security-Onion-Solutions/fix/strelka_pe
Strelka entropy and pe fixes
|
2023-07-13 14:42:12 -04:00 |
|
|
weslambertandGitHub
|
0c177ec923
|
Allow Elasticsearch integration policy
|
2023-07-13 10:46:59 -04:00 |
|
|
Wes
|
41f00c0aa1
|
Add agent scripts
|
2023-07-13 14:32:22 +00:00 |
|
|
Wes
|
e3249c8e4c
|
Wrap values in quotes for proper conversion
|
2023-07-13 14:18:57 +00:00 |
|
|
weslambertandGitHub
|
85bb5a327c
|
Fix long vs float for pe version
|
2023-07-13 09:38:09 -04:00 |
|
|
weslambertandGitHub
|
8acc37a7d1
|
Merge pull request #10749 from Security-Onion-Solutions/fix/yara_update
Fix syntax for conditional
|
2023-07-11 13:41:38 -04:00 |
|
|
weslambertandGitHub
|
5f1b467e64
|
Fix syntax for conditional
|
2023-07-11 13:37:50 -04:00 |
|
|
weslambertandGitHub
|
fe7fb7f54d
|
Merge pull request #10748 from Security-Onion-Solutions/fix/elasticsearch_strelka
Update logic for YARA matches
|
2023-07-11 13:02:24 -04:00 |
|
|
Wes
|
577bfac886
|
Update logic for YARA matches
|
2023-07-11 17:00:13 +00:00 |
|
|
weslambertandGitHub
|
7cdd1f89d7
|
Merge pull request #10736 from Security-Onion-Solutions/fix/strelka_path
Change path to old one
|
2023-07-11 09:13:36 -04:00 |
|
|
weslambertandGitHub
|
b7cab1d118
|
Change path to old one
|
2023-07-11 09:10:20 -04:00 |
|
|
weslambertandGitHub
|
f03a472ee5
|
Merge pull request #10731 from Security-Onion-Solutions/fix/kibana_file_search
Kibana dashboard changes
|
2023-07-11 08:50:03 -04:00 |
|
|
Wes
|
6b8893ded5
|
Update saved objects
|
2023-07-10 18:13:34 +00:00 |
|
|
Wes
|
6da96a733f
|
Use tags instead of dataset
|
2023-07-10 13:06:38 +00:00 |
|
|
weslambertandGitHub
|
8178338971
|
Merge pull request #10717 from Security-Onion-Solutions/fix/strelka_rules
Change path
|
2023-07-07 13:45:02 -04:00 |
|
|
weslambertandGitHub
|
79ed17b506
|
Change path
|
2023-07-07 13:31:43 -04:00 |
|
|
weslambertandGitHub
|
9f95306458
|
Merge pull request #10708 from Security-Onion-Solutions/fix/elasticsearch_templates_hn
Fix heavy node Elasticsearch template load
|
2023-07-07 09:52:54 -04:00 |
|
|
Wes
|
0b5ee49873
|
Fix inverted logic for component template
|
2023-07-06 20:46:35 +00:00 |
|
|
Wes
|
910125f13a
|
Restructure logic
|
2023-07-06 17:49:06 +00:00 |
|
|
Wes
|
d551faeb16
|
Heavy node template considerations
|
2023-07-06 17:19:28 +00:00 |
|
|
weslambertandGitHub
|
d31ea4097d
|
Merge pull request #10683 from Security-Onion-Solutions/fix/kibana_http_search
Kibana dashboard changes
|
2023-06-30 17:17:37 -04:00 |
|
|
Wes
|
c277b7acfa
|
Change Zeek file from evet dataset to tags
|
2023-06-30 20:24:10 +00:00 |
|
|
Wes
|
6bdccec6b1
|
Add asterisk back to Modbus search
|
2023-06-30 19:01:53 +00:00 |
|
|
Wes
|
8b38cbe8cf
|
Fix Modbus since the previous fix was reverted
|
2023-06-30 17:38:05 +00:00 |
|
|
Wes
|
35ea084466
|
Update from exported saved objects again
|
2023-06-30 16:55:00 +00:00 |
|
|
Wes
|
e2acf027a9
|
Update from exported saved objects
|
2023-06-30 16:01:50 +00:00 |
|
|
Wes
|
273e78da94
|
Modbus dashboard - use asterisk
|
2023-06-30 15:03:20 +00:00 |
|
|
Wes
|
446376395e
|
Modbus dashboard - use tags
|
2023-06-30 13:56:08 +00:00 |
|
|
Wes
|
a13001dce0
|
PE dashboard - use tags
|
2023-06-30 13:40:36 +00:00 |
|
|
Wes
|
8819e1d4d6
|
HTTP search - use tags
|
2023-06-30 13:02:00 +00:00 |
|
|
weslambertandGitHub
|
add72d7a5c
|
Merge pull request #10670 from Security-Onion-Solutions/fix/kibana_dashboards
Kibana Dashboards - Remove Wazuh reference and use tags
|
2023-06-28 09:41:19 -04:00 |
|
|
Wes
|
8436b647dd
|
Remove Wazuh and use tags
|
2023-06-27 18:05:04 +00:00 |
|
|
weslambertandGitHub
|
c2efd7ef64
|
Merge pull request #10655 from Security-Onion-Solutions/feature/supported_integrations
Restructure Elasticsearch templates for supported integrations
|
2023-06-26 09:43:10 -04:00 |
|
|
weslambertandGitHub
|
05b84327b8
|
Fix typo
|
2023-06-23 16:32:57 -04:00 |
|
|
weslambertandGitHub
|
e02bdffe34
|
Fix typos
|
2023-06-23 16:10:22 -04:00 |
|
|
weslambertandGitHub
|
e2ff48164b
|
Only load if so-elastic-fleet-common exists
|
2023-06-23 16:03:58 -04:00 |
|
|
weslambertandGitHub
|
aa91c1fef2
|
Add empty object for index_settings
|
2023-06-23 15:57:30 -04:00 |
|
|
weslambertandGitHub
|
ff7db0be63
|
Remove old index settings
|
2023-06-23 15:31:11 -04:00 |
|
|
Wes
|
b96d3473f2
|
Fix indentation
|
2023-06-23 18:38:04 +00:00 |
|
|
Wes
|
62fa15c63e
|
Add more templates
|
2023-06-23 14:43:15 +00:00 |
|
|
weslambertandGitHub
|
e995576b1d
|
Remove extra templates
|
2023-06-23 09:41:49 -04:00 |
|
|
Wes
|
5e8748c436
|
Load Elasticsearch templates
|
2023-06-23 13:28:01 +00:00 |
|
|
Wes
|
e2cca917c1
|
Add package load command to Fleet setup
|
2023-06-23 13:26:06 +00:00 |
|
|
Wes
|
d8700137d2
|
Add updated so-elasticsearch-templates-load
|
2023-06-23 13:23:29 +00:00 |
|
|
Wes
|
2c42d4b19e
|
Add package check to so-elasticsearch-templates-load
|
2023-06-23 13:22:51 +00:00 |
|