Commit Graph

2488 Commits

Author SHA1 Message Date
weslambert
5f8d1c29b4 Merge pull request #494 from Security-Onion-Solutions/search_ls_pillar
Search ls pillar
2020-04-01 15:13:17 -04:00
Wes Lambert
22e7777d67 update search sls 2020-04-01 19:12:07 +00:00
Wes Lambert
09022ad752 Update Zeek and Strelka 2020-04-01 19:11:10 +00:00
Wes Lambert
1df2302287 Update Zeek and Strelka 2020-04-01 19:09:38 +00:00
Josh Patterson
38b5cffd16 Merge pull request #493 from Security-Onion-Solutions/issue/90
adding auth state back
2020-04-01 15:05:43 -04:00
m0duspwnens
832128ac96 adding auth state back 2020-04-01 15:04:32 -04:00
weslambert
82c99edbfc Update Suricata output 2020-04-01 15:02:52 -04:00
weslambert
e1008269ce Update OSSEC output 2020-04-01 15:00:52 -04:00
weslambert
9f58081ce8 Typo 2020-04-01 14:57:47 -04:00
weslambert
d0ad7e7ef9 Update config for search pipeline 2020-04-01 14:57:32 -04:00
weslambert
5c433c39e5 Merge pull request #492 from Security-Onion-Solutions/fix/strelka-zeek-extracted-sync
Add Zeek extracted file sync
2020-04-01 14:20:36 -04:00
weslambert
cc4b1bf936 Add Zeek extracted file sync 2020-04-01 14:19:36 -04:00
William Wernert
0a50c47525 Merge branch 'dev' into feature/soctopus-conf 2020-04-01 13:35:44 -04:00
William Wernert
13035a6c32 [fix] Update soctopus default es-index-patter 2020-04-01 13:35:11 -04:00
weslambert
df00405265 Merge pull request #491 from Security-Onion-Solutions/fix/strelka_init
Remove restart policy
2020-04-01 13:19:57 -04:00
weslambert
5173da5a33 Remove restart policy 2020-04-01 13:19:31 -04:00
Josh Patterson
c8e881b8c5 Merge pull request #490 from Security-Onion-Solutions/issue/90
Issue/90
2020-04-01 13:13:40 -04:00
m0duspwnens
62e8aa1063 fix conflict in salt/top.sls 2020-04-01 13:09:23 -04:00
m0duspwnens
9acaa514cf monitoring zeek - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/90 2020-04-01 13:06:37 -04:00
weslambert
44ae4604b5 Merge pull request #489 from Security-Onion-Solutions/fix/strelka-curly
Fix curly brace
2020-04-01 12:33:02 -04:00
weslambert
7390063026 Fix curly brace 2020-04-01 12:32:29 -04:00
Mike Reeves
7db4dafea1 Reserve Kratos Group ID 2020-04-01 11:56:36 -04:00
weslambert
92c714ea4c Merge pull request #488 from Security-Onion-Solutions/fix/strelka_top
Update Eval for Strelka
2020-04-01 11:42:18 -04:00
weslambert
2fcfb06ba5 Update Eval for Strelka 2020-04-01 11:41:56 -04:00
weslambert
3001abc3ea Merge pull request #487 from Security-Onion-Solutions/fix/elastic_fixes
Fix/elastic fixes
2020-04-01 11:32:22 -04:00
weslambert
f13093dc51 Add message rename 2020-04-01 11:31:57 -04:00
weslambert
26efad1c45 Update Strelka log path 2020-04-01 11:30:02 -04:00
Josh Brower
572c1b5582 Merge pull request #486 from Security-Onion-Solutions/feature/osquery-ingest
osquery ingest - initial support
2020-04-01 10:19:42 -04:00
Josh Brower
5ca9a643a8 Merge branch 'dev' into feature/osquery-ingest 2020-04-01 10:19:35 -04:00
Josh Brower
0e76447d11 osquery ingest - initial support 2020-04-01 10:17:36 -04:00
weslambert
9f44a86ae4 Merge pull request #485 from Security-Onion-Solutions/strelka_enable
Enable Strelka via Setup
2020-04-01 10:08:09 -04:00
Wes Lambert
2164de97b5 Enable Strelka via Setup 2020-04-01 14:06:19 +00:00
weslambert
fd6832bf51 Merge pull request #483 from Security-Onion-Solutions/elastic_config
template and kibana config updates
2020-04-01 09:15:10 -04:00
Wes Lambert
33512eca2a template and kibana config updates 2020-04-01 13:14:13 +00:00
weslambert
a6b3e0e4a8 Merge pull request #482 from Security-Onion-Solutions/fix/strelka_config
add strelka index
2020-04-01 09:04:35 -04:00
Wes Lambert
6cc757e1de add strelka index 2020-04-01 13:02:36 +00:00
weslambert
d8f30a0240 Merge pull request #481 from Security-Onion-Solutions/fix/strelka_stuff
Fix/strelka stuff
2020-04-01 09:00:07 -04:00
Wes Lambert
70422809ec add category 2020-04-01 12:59:10 +00:00
Wes Lambert
9bbcc185aa change Strelka log location 2020-04-01 12:57:51 +00:00
William Wernert
df7851c2ed Merge branch 'dev' into feature/soctopus-conf 2020-03-31 18:59:07 -04:00
Jason Ertel
8767f17325 Removed obsolete osquery-packages.html since it's now in soc 2020-03-31 17:43:03 -04:00
William Wernert
2a0ed7a466 Merge branch 'dev' into feature/soctopus-conf 2020-03-31 15:08:07 -04:00
William Wernert
a8cdda84d1 [fix] Put soctopus.conf in the right folder 2020-03-31 11:12:01 -04:00
Josh Brower
2bfacecb4b Merge pull request #478 from Security-Onion-Solutions/bugfix/osquery
fleet init fix
2020-03-31 09:54:45 -04:00
Josh Brower
131fd1f322 fleet init fix 2020-03-31 09:53:59 -04:00
Jason Ertel
14c44e0f6e Merge pull request #476 from Security-Onion-Solutions/feature/auth
Integrate new auth system and SOC interface
2020-03-31 08:57:19 -04:00
Jason Ertel
f7e9e99eae Added new soc-related saltstack files. 2020-03-30 22:15:49 -04:00
weslambert
fd00cdf8f3 Merge pull request #473 from Security-Onion-Solutions/more_elastic_stuff
More elastic stuff
2020-03-30 20:41:56 -04:00
Wes Lambert
68138e009a update FB config 2020-03-31 00:37:58 +00:00
Wes Lambert
5226ec1560 update Kibana config/dashboards/etc 2020-03-31 00:37:17 +00:00