  weslambertandGitHub
|
3883c8bfe0
|
Merge pull request #784 from Security-Onion-Solutions/feature/filebeat-syslog
Feature/filebeat syslog
|
2020-05-28 08:39:11 -04:00 |
|
|
Wes Lambert
|
d2b93d531e
|
Basic syslog config
|
2020-05-28 12:36:29 +00:00 |
|
|
Wes Lambert
|
5afc05feb2
|
Update FB init for syslog
|
2020-05-28 12:35:22 +00:00 |
|
|
Wes Lambert
|
b9bdca509e
|
update Filebeat config for syslog
|
2020-05-28 12:33:41 +00:00 |
|
|
weslambertandGitHub
|
04800277c2
|
Merge pull request #783 from Security-Onion-Solutions/fix/hive_rename_bug
Hive to TheHive
|
2020-05-27 15:44:22 -04:00 |
|
|
weslambertandGitHub
|
6a935b5452
|
Hive to TheHive
|
2020-05-27 15:43:41 -04:00 |
|
|
weslambertandGitHub
|
9595d63c01
|
Merge pull request #782 from Security-Onion-Solutions/feature/thehive-start-stop-restart
Add Hive/ES/Cortex scripts
|
2020-05-27 13:46:18 -04:00 |
|
|
Wes Lambert
|
b80eb5f73b
|
Add Hive/ES/Cortex scripts
|
2020-05-27 17:43:17 +00:00 |
|
|
weslambertandGitHub
|
f07d6dfb30
|
Merge pull request #780 from Security-Onion-Solutions/fix/thehive_path
Rename Hive to TheHive in several places
|
2020-05-27 13:22:57 -04:00 |
|
|
Wes Lambert
|
b26f6826dd
|
Rename Hive to TheHive in several places
|
2020-05-27 17:17:55 +00:00 |
|
|
weslambertandGitHub
|
58f4cce4f3
|
Merge pull request #779 from Security-Onion-Solutions/fix/suricata_log_path
Fix/suricata log path
|
2020-05-27 13:03:10 -04:00 |
|
|
Wes Lambert
|
d56bc4c167
|
fix path
|
2020-05-27 17:01:05 +00:00 |
|
|
Wes Lambert
|
3684cdf1c6
|
Update FB and LS
|
2020-05-27 17:00:09 +00:00 |
|
|
Wes Lambert
|
e78a3f3278
|
update Suricata config
|
2020-05-27 16:59:26 +00:00 |
|
|
Wes Lambert
|
b7a0f79038
|
Update Suricata init
|
2020-05-27 16:58:31 +00:00 |
|
|
weslambertandGitHub
|
042618cd8f
|
Merge pull request #777 from Security-Onion-Solutions/fix/strelka_init
Wrap with quotes
|
2020-05-27 09:03:06 -04:00 |
|
|
weslambertandGitHub
|
f3809cb93d
|
Wrap with quotes
|
2020-05-27 08:31:14 -04:00 |
|
|
weslambertandGitHub
|
0b200d15fd
|
Merge pull request #768 from Security-Onion-Solutions/fix/es_watermark
Update ES watermark settings
|
2020-05-26 10:19:57 -04:00 |
|
|
Wes Lambert
|
0e51ab41cf
|
Update ES watermark settings
|
2020-05-26 14:18:58 +00:00 |
|
|
weslambertandGitHub
|
8aa2cab680
|
Merge pull request #767 from Security-Onion-Solutions/fix/so_index_transition
Fix/so index transition
|
2020-05-26 10:08:20 -04:00 |
|
|
Wes Lambert
|
97306d3acd
|
rename indices
|
2020-05-26 14:05:33 +00:00 |
|
|
Wes Lambert
|
3eb62287ac
|
update Curator config for index transition
|
2020-05-26 14:00:16 +00:00 |
|
|
weslambertandGitHub
|
956926d870
|
Merge pull request #766 from Security-Onion-Solutions/fix/soctopus_host
update SOCtopus config for hostname/ip
|
2020-05-26 09:20:43 -04:00 |
|
|
Wes Lambert
|
330de46249
|
update SOCtopus config for hostname/ip
|
2020-05-26 13:19:15 +00:00 |
|
|
weslambertandGitHub
|
b5bd6e6144
|
Merge pull request #765 from Security-Onion-Solutions/fix/strelka_cron
update Strelka cron
|
2020-05-26 09:01:24 -04:00 |
|
|
Wes Lambert
|
e09027e795
|
update Strelka cron
|
2020-05-26 13:00:03 +00:00 |
|
|
weslambertandGitHub
|
43a8ec6f50
|
Merge pull request #719 from Security-Onion-Solutions/fix/so-kibana-config
Fix/so kibana config
|
2020-05-18 09:23:17 -04:00 |
|
|
Wes Lambert
|
ee5937d038
|
update Kibana config
|
2020-05-18 13:21:18 +00:00 |
|
|
Wes Lambert
|
228bbbea5f
|
update config export
|
2020-05-18 13:16:42 +00:00 |
|
|
weslambertandGitHub
|
f7de391518
|
Merge pull request #713 from Security-Onion-Solutions/fix/kibana_config_load
change KRATOS to MASTER
|
2020-05-16 13:07:24 -04:00 |
|
|
Wes Lambert
|
23eb73a943
|
change KRATOS to MASTER
|
2020-05-16 16:31:06 +00:00 |
|
|
weslambertandGitHub
|
907702441f
|
Merge pull request #712 from Security-Onion-Solutions/fix/kibana_config_load_order
Fix load order for PLACEHOLDER
|
2020-05-16 11:49:58 -04:00 |
|
|
Wes Lambert
|
047f4e31ad
|
Fix load order for PLACEHOLDER
|
2020-05-16 15:48:55 +00:00 |
|
|
weslambertandGitHub
|
6e9784f68c
|
Merge pull request #711 from Security-Onion-Solutions/fix/kibana_config_placeholder
fix placeholder
|
2020-05-16 11:46:46 -04:00 |
|
|
Wes Lambert
|
3363a5a20a
|
fix placeholder
|
2020-05-16 15:45:52 +00:00 |
|
|
weslambertandGitHub
|
9d4397806b
|
Merge pull request #710 from Security-Onion-Solutions/fix/kibana_config_export
Fix/kibana config export
|
2020-05-16 11:35:43 -04:00 |
|
|
Wes Lambert
|
9b8cf3845a
|
update Kibana config export
|
2020-05-16 15:34:33 +00:00 |
|
|
Wes Lambert
|
89527c533a
|
update Kibana config export
|
2020-05-16 15:33:20 +00:00 |
|
|
weslambertandGitHub
|
5d7c020223
|
Merge pull request #709 from Security-Onion-Solutions/fix/kibana_config
update Kibana config
|
2020-05-16 11:09:45 -04:00 |
|
|
Wes Lambert
|
bd5cc35fc0
|
update Kibana config
|
2020-05-16 15:07:33 +00:00 |
|
|
weslambertandGitHub
|
95141574d4
|
Merge pull request #707 from Security-Onion-Solutions/fix/dhcp_parsing
Fix/dhcp parsing
|
2020-05-16 11:04:13 -04:00 |
|
|
Wes Lambert
|
4b91ade2e8
|
fix message_types one more time :)
|
2020-05-16 15:03:27 +00:00 |
|
|
Wes Lambert
|
9845ee189c
|
fix message_types for real
|
2020-05-16 15:02:41 +00:00 |
|
|
Wes Lambert
|
f0662eed48
|
remark Beat tag for now
|
2020-05-16 14:59:41 +00:00 |
|
|
Wes Lambert
|
6a2ddd4ef6
|
move to DNS
|
2020-05-16 14:58:51 +00:00 |
|
|
Wes Lambert
|
66c89abbc6
|
Fix DHCP message types
|
2020-05-16 14:58:06 +00:00 |
|
|
weslambertandGitHub
|
baf1de4b34
|
Merge pull request #700 from Security-Onion-Solutions/fix/common_type_removal
remove type field
|
2020-05-15 14:37:44 -04:00 |
|
|
Wes Lambert
|
03805bd6e2
|
remove type field
|
2020-05-15 18:29:49 +00:00 |
|
|
weslambertandGitHub
|
59ece8fd29
|
Merge pull request #699 from Security-Onion-Solutions/fix/dce_rpc_parsing
update DCE/RPC parsing
|
2020-05-15 14:20:37 -04:00 |
|
|
Wes Lambert
|
5d5f5cf105
|
update DCE/RPC parsing
|
2020-05-15 18:19:05 +00:00 |
|
 Wes LambertandWilliam Wernert
|
7ea861650f
|
updated placeholder in saved objects
|
2020-04-18 19:11:20 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
8622dab0d2
|
update load script
|
2020-04-18 19:11:19 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
66b4f15a7b
|
replace static value for comm id
|
2020-04-18 19:03:11 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
b67229783b
|
update parsing for Zeek files
|
2020-04-18 18:59:21 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
358d2f74b2
|
update key name
|
2020-04-18 18:58:27 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
0a564a438b
|
update Kibana config
|
2020-04-18 18:58:27 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
5f2fa0fdc5
|
migrate Zeek clean script from Bro
|
2020-04-18 18:56:34 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
159799c91d
|
move PL
|
2020-04-18 18:10:34 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
0c658d01ef
|
remark config load section for now
|
2020-04-18 18:10:33 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
19678aa977
|
fix order
|
2020-04-18 18:09:38 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
40e683d7a6
|
replace URL template with Label template
|
2020-04-18 18:09:38 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
0e3978b87c
|
Revert "update Kibana config"
This reverts commit 82bd14252c.
|
2020-04-18 18:09:37 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
f2b3ca8763
|
add Kibana config export command
|
2020-04-18 18:08:41 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
a7bb014fba
|
update Kibana config
|
2020-04-18 18:08:40 -04:00 |
|
|
weslambertandGitHub
|
60702687d2
|
Merge pull request #576 from Security-Onion-Solutions/fix/kibana_config
Fix/kibana config
|
2020-04-16 15:00:27 -04:00 |
|
|
Wes Lambert
|
1020428e49
|
updated placeholder in saved objects
|
2020-04-16 18:58:42 +00:00 |
|
|
Wes Lambert
|
15ba411d0a
|
update load script
|
2020-04-16 18:58:14 +00:00 |
|
|
weslambertandGitHub
|
133450d2de
|
Merge pull request #567 from Security-Onion-Solutions/fix/comm_id_pivot
replace static value for comm id
|
2020-04-15 14:16:36 -04:00 |
|
|
Wes Lambert
|
9a02550c69
|
replace static value for comm id
|
2020-04-15 18:15:01 +00:00 |
|
|
weslambertandGitHub
|
3321e975bd
|
Merge pull request #562 from Security-Onion-Solutions/fix/zeek_files
update parsing for Zeek files
|
2020-04-14 09:09:40 -04:00 |
|
|
Wes Lambert
|
59787a6532
|
update parsing for Zeek files
|
2020-04-14 13:08:31 +00:00 |
|
|
weslambertandGitHub
|
84e37856f0
|
Merge pull request #560 from Security-Onion-Solutions/fix/static_rename
Update key name for Wazuh and Strelka for Filebeat
|
2020-04-13 12:10:27 -04:00 |
|
|
Wes Lambert
|
e086db3de6
|
update key name
|
2020-04-13 16:09:06 +00:00 |
|
|
weslambertandGitHub
|
29437b9082
|
Merge pull request #557 from Security-Onion-Solutions/fix/kibana_config
update Kibana config
|
2020-04-13 08:18:47 -04:00 |
|
|
Wes Lambert
|
4df91ed008
|
update Kibana config
|
2020-04-13 12:17:07 +00:00 |
|
|
weslambertandGitHub
|
6aafc4ef01
|
Merge pull request #550 from Security-Onion-Solutions/fix/zeek_clean
Zeek: migrate Zeek clean script from Bro
|
2020-04-10 08:51:54 -04:00 |
|
|
Wes Lambert
|
8d8bde36e8
|
migrate Zeek clean script from Bro
|
2020-04-10 12:46:28 +00:00 |
|
|
weslambertandGitHub
|
5ecbac9abd
|
Merge pull request #538 from Security-Onion-Solutions/fix/kibana_config_load
remark config load section for now
|
2020-04-08 14:49:24 -04:00 |
|
|
Wes Lambert
|
f4c01eb313
|
move PL
|
2020-04-08 18:48:22 +00:00 |
|
|
Wes Lambert
|
ead03f5147
|
remark config load section for now
|
2020-04-08 18:47:04 +00:00 |
|
|
weslambertandGitHub
|
b293c3dd2c
|
Merge pull request #536 from Security-Onion-Solutions/fix/kibana_config
Fix/kibana config
|
2020-04-08 14:26:40 -04:00 |
|
|
Wes Lambert
|
a6c7765dd1
|
fix order
|
2020-04-08 18:25:47 +00:00 |
|
|
Wes Lambert
|
ce3807a605
|
replace URL template with Label template
|
2020-04-08 18:16:09 +00:00 |
|
|
weslambertandGitHub
|
3fab895435
|
Merge pull request #535 from Security-Onion-Solutions/fix/revert_kibana_config
Revert "update Kibana config"
|
2020-04-08 14:00:35 -04:00 |
|
|
Wes Lambert
|
433e571369
|
Revert "update Kibana config"
This reverts commit 82bd14252c.
|
2020-04-08 17:59:24 +00:00 |
|
|
weslambertandGitHub
|
313f332ac8
|
Merge pull request #533 from Security-Onion-Solutions/elastic_updates
Elastic updates
|
2020-04-08 12:28:14 -04:00 |
|
|
Wes Lambert
|
051167a692
|
add Kibana config export command
|
2020-04-08 16:26:13 +00:00 |
|
|
Wes Lambert
|
82bd14252c
|
update Kibana config
|
2020-04-08 16:25:24 +00:00 |
|
|
weslambertandGitHub
|
fea345326b
|
Merge pull request #525 from Security-Onion-Solutions/fix/strelka_filebeat
update variables
|
2020-04-06 09:11:04 -04:00 |
|
|
Wes Lambert
|
ad5626f407
|
update variables
|
2020-04-06 13:09:52 +00:00 |
|
|
weslambertandGitHub
|
673c64d2a4
|
Merge pull request #523 from Security-Onion-Solutions/fix/elastic_improvements
Fix/elastic improvements
|
2020-04-05 16:53:19 -04:00 |
|
|
Wes Lambert
|
c476b28ac8
|
update script
|
2020-04-05 20:52:00 +00:00 |
|
|
Wes Lambert
|
cc9a91bfdb
|
update Kibana config
|
2020-04-05 20:50:29 +00:00 |
|
|
Wes Lambert
|
7765d9a038
|
update common template
|
2020-04-05 20:40:30 +00:00 |
|
|
Wes Lambert
|
9e50387eec
|
update ingest files
|
2020-04-05 20:40:00 +00:00 |
|
|
weslambertandGitHub
|
69c90fcdc1
|
Merge pull request #516 from Security-Onion-Solutions/fix/kibana_placeholders
fix placeholders
|
2020-04-03 08:31:54 -04:00 |
|
|
Wes Lambert
|
52edbd23d6
|
fix placeholders
|
2020-04-03 12:21:32 +00:00 |
|
|
weslambertandGitHub
|
0e568103d1
|
Merge pull request #515 from Security-Onion-Solutions/fix/add_more_dashes
update dashboards
|
2020-04-03 00:25:58 -04:00 |
|
|
Wes Lambert
|
638ed36a79
|
update dashboards
|
2020-04-03 04:23:50 +00:00 |
|
|
weslambertandGitHub
|
61aa723c1d
|
Merge pull request #514 from Security-Onion-Solutions/fix/strelka_setup
install Strelka for sensor
|
2020-04-02 21:37:07 -04:00 |
|