CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-07-14 04:43:09 +02:00
Code Issues Packages Projects Releases Wiki Activity
2,156 Commits 40 Branches 127 Tags
3fbb81f6d1fb71742d11bc3a3e4e44ca1fe1b2bf
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Wes Lambert 3fbb81f6d1 cleanup default config files 2020-03-03 18:03:45 +00:00
weslambertandGitHub 12ada0c127 Merge pull request #391 from Security-Onion-Solutions/fix/strelka_init 
Update Strelka init
 2020-03-02 17:16:59 -05:00
Wes Lambert 4939884d93 Update Strelka init 2020-03-02 22:15:55 +00:00
weslambertandGitHub 00adb06d7c Merge pull request #390 from Security-Onion-Solutions/ls_config_cleanup 
Ls config cleanup
 2020-03-02 15:04:08 -05:00
Wes Lambert bbebc4fc9b Add src/dst objects and Bro template 2020-03-02 20:02:39 +00:00
Wes Lambert 880c5abe6b prune default loaded configs for Eval Mode 2020-03-02 19:58:46 +00:00
weslambertandGitHub 80a23f99fa Merge pull request #389 from Security-Onion-Solutions/ecs_prep 
ecs prep
 2020-03-02 14:13:37 -05:00
Wes Lambert ec6638a276 src/dst ip/port fields to ECS 2020-03-02 19:10:18 +00:00
Wes Lambert e4fee51ed6 Change Bro Files source to file_source 2020-03-02 19:09:24 +00:00
Wes Lambert 9eb5a9be3a Begin switch to ECS for Suricata 2020-03-02 19:07:40 +00:00
weslambertandGitHub cc76699a2e Merge pull request #375 from Security-Onion-Solutions/strelka_config 
remove source
 2020-02-25 13:47:56 -05:00
Wes Lambert 5d81bf3204 remove source 2020-02-25 12:36:35 +00:00
weslambertandGitHub 38b856b2b0 Merge pull request #368 from Security-Onion-Solutions/fix/more_template_fixes 
More template fixes
 2020-02-20 11:46:41 -05:00
weslambertandGitHub fc9786e541 Change template name 2020-02-20 11:46:15 -05:00
weslambertandGitHub 6945cbb843 Change template name 2020-02-20 11:45:50 -05:00
weslambertandGitHub 3303992685 Merge pull request #367 from Security-Onion-Solutions/fix/template_fix 
Fix template name
 2020-02-20 11:20:48 -05:00
weslambertandGitHub 30a1197b44 Rename template to avoid duplication under different name 2020-02-20 11:20:06 -05:00
weslambertandGitHub 82dac03199 Merge pull request #360 from Security-Onion-Solutions/feature/nodered 
Experimental: Node-RED
 2020-02-18 00:12:01 -05:00
Wes Lambert de6efffd95 Experimental: Node-RED 2020-02-18 05:04:51 +00:00
weslambertandGitHub 3eb34d9926 Merge pull request #359 from Security-Onion-Solutions/feature/strelka_ls 
Add initial/basic Strelka config
 2020-02-17 21:47:32 -05:00
Wes Lambert 50fcf8307f Add initia/basic Strelka config 2020-02-18 02:46:31 +00:00
weslambertandGitHub 4d98670fac Merge pull request #358 from Security-Onion-Solutions/fix/strelka_config 
Fix/strelka config
 2020-02-17 16:16:16 -05:00
Wes Lambert 64166f96a1 Ensure correct template is used 2020-02-17 21:15:11 +00:00
Wes Lambert 8d9ff4428b Update Strelka LS config 2020-02-17 21:12:25 +00:00
weslambertandGitHub f8d162ac5f Merge pull request #349 from Security-Onion-Solutions/hotfix/wazuh_archive_path 
Fix Wazuh archives path
 2020-02-13 13:48:45 -05:00
Wes Lambert 11319362c4 Fix Wazuh archives path 2020-02-13 18:47:45 +00:00
weslambertandGitHub 15533b7fac Merge pull request #336 from Security-Onion-Solutions/hotfix/wazuh 
Hotfix/wazuh
 2020-02-11 22:45:43 -05:00
Wes Lambert e76dc73ea6 change Wazuh install order 2020-02-12 03:44:20 +00:00
Wes Lambert 718dacf29a update Wazuh order 2020-02-12 03:37:56 +00:00
Wes Lambert 0344ea7878 update Wazuh path 2020-02-12 03:34:12 +00:00
weslambertandGitHub bb4a428dda Merge pull request #334 from Security-Onion-Solutions/hotfix/wazuh_data_path 
update Wazuh data paths
 2020-02-11 17:18:06 -05:00
Wes Lambert 41db668af6 update Wazuh data paths 2020-02-11 22:16:25 +00:00
weslambertandGitHub 6a70511cc9 Merge pull request #330 from Security-Onion-Solutions/hotfix/wazuh_paths 
update Wazuh paths
 2020-02-11 08:54:12 -05:00
Wes Lambert 0994f598c7 update Wazuh paths 2020-02-11 13:45:28 +00:00
weslambertandGitHub 776d5c3fcc Merge pull request #328 from Security-Onion-Solutions/hotfix/wazuh_config 
dont manage config
 2020-02-10 16:23:18 -05:00
Wes Lambert 76305d42fc dont manage config 2020-02-10 21:21:22 +00:00
weslambertandGitHub 419493e52e Merge pull request #327 from Security-Onion-Solutions/hotfix/wazuh_dir 
change wazuh dir
 2020-02-10 15:58:04 -05:00
Wes Lambert fbeba98af8 change wazuh dir 2020-02-10 20:56:03 +00:00
weslambertandGitHub aeec5563eb Merge pull request #309 from Security-Onion-Solutions/fix/redis_conf 
Remove Redis config from eval PL
 2020-02-05 15:36:04 -05:00
Wes Lambert ec11b9ea25 Remove Redis config from eval PL 2020-02-05 20:34:32 +00:00
Wes Lambert 3277ca185e Update Zeek config 2020-01-29 22:09:32 +00:00
weslambertandGitHub eba02ef3b4 Merge pull request #279 from Security-Onion-Solutions/features/heavynode 
Features/heavynode
 2020-01-29 17:07:00 -05:00
Wes Lambert aa3fc72565 Change bro to zeek 2020-01-29 18:56:21 +00:00
Wes Lambert f187180509 change bro user to zeek 2020-01-29 18:50:09 +00:00
Wes Lambert ef83d812d2 Set IP 2020-01-29 17:41:56 +00:00
weslambertandGitHub 2a5d62e3f2 Merge pull request #272 from Security-Onion-Solutions/TOoSmOotH-patch-1 
Update filebeat.yml
 2020-01-28 22:20:58 -05:00
weslambertandGitHub 101c2a93d1 Merge pull request #269 from Security-Onion-Solutions/feature/so-status 
feature/so-status
 2020-01-28 22:13:47 -05:00
weslambertandGitHub 8ba3b07c5e Merge pull request #271 from Security-Onion-Solutions/feature/bpf-suricata-fix 
Suricata  - bpf hotfix
 2020-01-28 22:13:20 -05:00
Wes Lambert 48ebc5e2e3 Fix data checks 2020-01-29 01:13:40 +00:00
Wes Lambert 5e0299e7bb Add PCAP stop|start|restart scripts 2020-01-29 01:11:22 +00:00
Wes Lambert 41e5c6ae90 Add data deletion scripts 2020-01-29 00:57:58 +00:00
Wes Lambert 8b415b9db4 Update config.yaml for Elastalert shard/replica changes 2020-01-28 23:55:06 +00:00
Wes Lambert b92cceb986 Fix order of static add 2020-01-28 19:44:56 +00:00
Wes Lambert c22753a8fb Don't restart when running whitelist script 2020-01-28 19:42:59 +00:00
Wes Lambert 38f42eafa5 Add Features enable script 2020-01-28 15:02:50 +00:00
Wes Lambert b995b09d52 Update version in all state files 2020-01-28 14:59:53 +00:00
Wes Lambert fbb9f099f9 Update Elastic state files 2020-01-28 14:49:58 +00:00
Wes Lambert 1de8902eef Add default to setup 2020-01-28 14:45:29 +00:00
Wes Lambert a9ccd17d89 Update Wazuh scripts 2020-01-28 14:34:19 +00:00
Wes Lambert b754c88ab1 Add script for CVE-2020-0601 2020-01-28 13:08:10 +00:00
Wes Lambert c38569d8a6 Add script for CVE-2020-0601 2020-01-28 13:07:37 +00:00
weslambertandGitHub 190adad69f Merge pull request #247 from Security-Onion-Solutions/feature/bpf-steno 
Initial support for Steno bpf
 2020-01-24 07:49:55 -05:00
Wes Lambert e687def4dc remove Cyberchef 2020-01-23 18:44:34 +00:00
Wes Lambert d2c9689b44 update TheHive init 2020-01-23 18:35:04 +00:00
weslambertandGitHub dc0c92fb92 Merge pull request #243 from Security-Onion-Solutions/feature/isoregistry 
Feature/isoregistry
 2020-01-23 13:25:26 -05:00
weslambertandGitHub 005aa35918 Merge pull request #242 from Security-Onion-Solutions/issues/241 
fix master state
 2020-01-22 14:35:32 -05:00
weslambertandGitHub 774f138c33 Merge pull request #240 from Security-Onion-Solutions/feature/issue124 
changes for multipipelines / mastersearch node
 2020-01-21 16:50:10 -05:00
Wes Lambert 0b45d6f638 increase free disk percentage 2020-01-20 14:08:02 +00:00
weslambertandGitHub 533d54793d Merge pull request #228 from Security-Onion-Solutions/bugfix/localhost 
Bugfix/localhost
 2020-01-16 11:43:37 -05:00
Wes Lambert 348dbb752a source so-common 2020-01-14 13:48:57 +00:00
Wes Lambert 4917a7284d add initial replay wrappers 2020-01-13 22:19:15 +00:00
Wes Lambert a960083d6e add Wazuh manager whitelist script 2020-01-13 21:13:28 +00:00
Wes Lambert 1338f7125f update Wazuh init for whitelist 2020-01-13 21:12:33 +00:00
Wes Lambert 8e7b2bc888 remove double bash declaration 2020-01-13 20:57:03 +00:00
Wes Lambert 8c36b3b695 add quotes 2020-01-13 20:17:38 +00:00
Wes Lambert c4626020a4 update so-allow to allow arguments 2020-01-13 20:07:54 +00:00
Wes Lambert 7e1870e9d0 update image versions 2020-01-13 13:52:30 +00:00
weslambertandGitHub 6ea941dfba Merge pull request #205 from Security-Onion-Solutions/feature/soscripts 
soscripts - so-elastic-diagnose
 2020-01-09 15:07:32 -05:00
Wes Lambert 79ef0b6e1f remove cyberchef from proxy conf 2020-01-08 14:27:50 +00:00
weslambertandGitHub 7b081b10ad Merge pull request #203 from Security-Onion-Solutions/feature/soscripts-elastalert 
so scripts - elastalert dev
 2020-01-07 17:08:35 -05:00
weslambertandGitHub c91acd654a Merge pull request #202 from Security-Onion-Solutions/feature/playbook-bulkimport 
Playbook - redmine.db schema changes
 2020-01-06 16:23:02 -05:00
Wes Lambert a646c1123f fix typo 2020-01-03 21:31:40 +00:00
weslambertandGitHub fbf6e5590d Merge pull request #199 from Security-Onion-Solutions/feature/issue127 
manage threshold.conf with Salt - #127
 2020-01-03 14:57:43 -05:00
weslambertandGitHub cc4b536042 Merge pull request #198 from Security-Onion-Solutions/feature/so-scripts 
SO Scripts - start|stop|restart
 2020-01-02 16:03:41 -05:00
weslambertandGitHub 5358220121 Merge pull request #197 from Security-Onion-Solutions/feature/so-scripts-stop 
so-stop scripts - initial commit
 2020-01-02 13:38:19 -05:00
Wes Lambert 82abdedb02 add license 2020-01-02 15:55:52 +00:00
Wes Lambert 82f1d5718a add exclusion for Zeek clean log and extracted file mgmt 2020-01-02 15:39:38 +00:00
Wes Lambert 566d3ed280 revise message text 2020-01-02 15:20:34 +00:00
Wes Lambert c4f57f09ee add Zeek clean script 2020-01-02 15:13:46 +00:00
Wes Lambert bc533bef24 update TheHiveAlerter module 2019-12-30 21:10:56 +00:00
Wes Lambert f597b9f4e5 add AR whitelist for Wazuh 2019-12-30 19:04:54 +00:00
Wes Lambert df722c173f fix typo and prevent agent from getting re-added 2019-12-30 17:47:00 +00:00
Wes Lambert ffc116085e add auth log path for Centos 2019-12-30 17:32:54 +00:00
weslambertandGitHub 8829b5132e Merge pull request #179 from Security-Onion-Solutions/feature/cyberchef_cleanup 
Remove Cyberchef from top file since it is now in so-core
 2019-12-20 12:40:44 -05:00
Wes Lambert 124c552fca remove Cyberchef from top file since it is now in so-core 2019-12-20 15:49:22 +00:00
Wes Lambert eea08f3515 add back helix 2019-12-20 01:24:20 +00:00
weslambertandGitHub 574ee6b97a Merge pull request #174 from Security-Onion-Solutions/quickfix/cyberchef-version 
[BUG] Updated missed text in cyberchef init.sls
 2019-12-19 18:12:11 -05:00
weslambertandGitHub 1876bc2b57 Merge pull request #173 from Security-Onion-Solutions/quickfix/cyberchef-version 
Revert cyberchef version update
 2019-12-19 17:08:13 -05:00
weslambertandGitHub 839f710f61 Merge pull request #166 from Security-Onion-Solutions/feature/fix_hive 
fix ssl verify hive_init.sh
 2019-12-18 14:20:43 -05:00
Wes Lambert c597dd2fb4 Strelka - Filebeat config 2019-12-18 03:22:30 +00:00