CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-07-19 07:13:39 +02:00
Code Issues Packages Projects Releases Wiki Activity
3,070 Commits 45 Branches 127 Tags
56f5fbdf6b095445094de6a379b80fb2d690b085
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Josh Brower 56f5fbdf6b Ingest pipeline commid fix for conn logs 2020-05-22 17:11:08 -04:00
Josh Brower bff86ea802 zeek.common ingest parser fix 2020-05-21 14:35:25 -04:00
Josh Brower c74ace89ba Initial support - Ingest community_id 2020-05-21 14:34:00 -04:00
Josh BrowerandGitHub 10691036e0 Update hive_init 2020-05-19 10:27:46 -04:00
Josh BrowerandGitHub b951094ea2 Change alert pivot links for MASTER 2020-05-18 14:13:32 -04:00
Josh BrowerandGitHub b01209457d Merge pull request #718 from Security-Onion-Solutions/bugfix/kibana-fleet 
Update Fleet IP placeholder
 2020-05-17 12:51:57 -04:00
Josh BrowerandGitHub 8a8970d9ee Update Fleet IP placeholder 2020-05-17 12:51:20 -04:00
Josh Brower e02bf2ebb5 Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion-saltstack into dev 2020-05-15 15:05:47 -04:00
Josh Brower 9d4536dcbe osquery ingest parsing update 2020-05-15 15:05:21 -04:00
Josh BrowerandGitHub 4737c0da3f Merge pull request #702 from Security-Onion-Solutions/bugfix/fleet-deployment 
Fleet Setup - Restart nginx
 2020-05-15 14:48:18 -04:00
Josh Brower 6b4822d98d Fleet Setup - Restart nginx 2020-05-15 14:47:19 -04:00
Josh BrowerandGitHub daf2936635 Merge pull request #680 from Security-Onion-Solutions/bugfix/navigator-top 
Navigator top.sls fix
 2020-05-14 11:20:00 -04:00
Josh Brower 554612d25f Navigator top.sls fix 2020-05-14 11:19:07 -04:00
Josh BrowerandGitHub 9186a553ca Merge pull request #678 from Security-Onion-Solutions/bugfix/nids-and-osquerypackages 
osquery packages fix
 2020-05-13 20:40:41 -04:00
Josh Brower 3db67de27a osquery packages fix 2020-05-13 20:39:56 -04:00
Josh BrowerandGitHub a37ce376a7 Merge pull request #676 from Security-Onion-Solutions/bugfix/elastalert-nidsalert 
Playbook hivealert fixes
 2020-05-13 19:28:19 -04:00
Josh Brower 8a68e6adb3 Playbook hivealert fixes 2020-05-13 19:27:14 -04:00
Josh BrowerandGitHub e9deb99d2f Merge pull request #673 from Security-Onion-Solutions/bugfix/elastalert-nidsalert 
Elastalert - NIDS fix
 2020-05-13 17:04:00 -04:00
Josh Brower c3627c38e3 Elastalert - NIDS fix 2020-05-13 17:03:14 -04:00
Josh BrowerandGitHub 48ee1fe016 Merge pull request #671 from Security-Onion-Solutions/bugfix/elastalert 
Elastalert --> TheHive fixes
 2020-05-13 16:35:22 -04:00
Josh Brower 6e4ee26a58 Elastalert --> TheHive fixes 2020-05-13 16:34:35 -04:00
Josh BrowerandGitHub bb0a89f12b Merge pull request #666 from Security-Onion-Solutions/bugfix/playbook-updateplays 
Playbook - update plays
 2020-05-13 12:20:30 -04:00
Josh Brower 23b4870ee6 Playbook - update plays 2020-05-13 12:19:37 -04:00
Josh BrowerandGitHub bc4b4385bf Merge pull request #662 from Security-Onion-Solutions/bugfix/soctopus-config 
soctopus config fix
 2020-05-12 17:04:22 -04:00
Josh Brower d270c8f32d soctopus config fix 2020-05-12 16:59:35 -04:00
Josh BrowerandGitHub 6956f14c0d Merge pull request #660 from Security-Onion-Solutions/bugfix/playbook-mysql-final 
salt bug workarounds
 2020-05-12 16:25:13 -04:00
Josh Brower 4d3d7dc60e salt bug workarounds 2020-05-12 16:24:24 -04:00
Josh BrowerandGitHub abd907fee1 Merge pull request #659 from Security-Onion-Solutions/bugfix/nids-parsing-alerting 
suricata parsing
 2020-05-12 14:07:51 -04:00
Josh Brower 62bec93190 suricata parsing 2020-05-12 14:04:02 -04:00
Josh BrowerandGitHub d1eac195d8 Enable Navigator 2020-05-11 22:41:54 -04:00
Josh BrowerandGitHub 4bd8e136be Enabled playbook 2020-05-11 22:41:02 -04:00
Josh BrowerandGitHub d3992cb6e1 Merge pull request #657 from Security-Onion-Solutions/bugfix/playbook-mysql 
playbook mysql fixes
 2020-05-11 22:39:58 -04:00
Josh Brower 09ce3e088a playbook mysql fixes 2020-05-11 22:39:13 -04:00
Josh BrowerandGitHub b658f7133b Update top.sls 2020-05-11 09:48:24 -04:00
Josh BrowerandGitHub 945d50cc13 Merge pull request #649 from Security-Onion-Solutions/bugfix/playbook-mysql 
navigator fixes
 2020-05-10 11:58:39 -04:00
Josh Brower 20e7331bb9 navigator fixes 2020-05-10 11:57:20 -04:00
Josh BrowerandGitHub 4977a8b17c Merge pull request #648 from Security-Onion-Solutions/bugfix/playbook-mysql 
Fix playbook mysql errors
 2020-05-10 07:58:39 -04:00
Josh Brower 02160b12ee Fix playbook mysql errors 2020-05-10 07:57:45 -04:00
Josh BrowerandGitHub 170d799470 Merge pull request #647 from Security-Onion-Solutions/bugfix/playbook-mysql 
feature/playbook mysql
 2020-05-09 16:30:50 -04:00
Josh Brower e3a3a01ee1 Merge remote-tracking branch 'remotes/origin/dev' into bugfix/playbook-mysql 2020-05-08 16:49:38 -04:00
Josh Brower 9b54a432fc mysql playbook 2020-05-08 16:36:59 -04:00
Josh Brower bc34c67f47 Merge remote-tracking branch 'remotes/origin/dev' into bugfix/playbook-mysql 2020-05-06 08:30:45 -04:00
Josh Brower 2e3bcf600f Playbook mysql 2020-05-06 08:29:14 -04:00
Josh BrowerandWilliam Wernert e660de236a osquery pipeline fix 2020-04-18 19:11:18 -04:00
Josh BrowerandWilliam Wernert a9fba05b03 rename kratos config field 2020-04-18 19:04:23 -04:00
Josh BrowerandWilliam Wernert 8cb94872e6 osquery package versioning bugfix 2020-04-18 19:03:06 -04:00
Josh BrowerandWilliam Wernert 8fdc2a59c2 Playbook - automatically set SOCtopus IP 2020-04-18 19:03:05 -04:00
Josh BrowerandWilliam Wernert 4475ebfaa8 Fleet package fixes 2020-04-18 18:59:20 -04:00
Josh BrowerandWilliam Wernert 9216d92488 osquery ingest ecs 2020-04-18 18:58:27 -04:00
Josh BrowerandWilliam Wernert 066f1251a7 NIDS2TheHive Update for ECS 2020-04-18 18:58:26 -04:00
Josh BrowerandWilliam Wernert 12af856d00 fleet osquery fixes 2020-04-18 18:58:25 -04:00
Josh BrowerandWilliam Wernert 294fb67007 so-status Fleet node 2020-04-18 18:54:42 -04:00
Josh BrowerandGitHub aa266418ac Merge pull request #573 from Security-Onion-Solutions/bugfix/osquery-pipeline 
osquery pipeline fix
 2020-04-15 20:23:40 -04:00
Josh Brower 6332509a33 osquery pipeline fix 2020-04-15 20:22:54 -04:00
Josh BrowerandGitHub e8a32e439f Merge pull request #569 from Security-Onion-Solutions/bugfix/kratos-config 
rename kratos config field
 2020-04-15 14:39:12 -04:00
Josh Brower c47abf7c56 rename kratos config field 2020-04-15 14:37:59 -04:00
Josh BrowerandGitHub 615eb661c4 Merge pull request #564 from Security-Onion-Solutions/bugfix/fleet-package-versioning 
osquery package versioning bugfix
 2020-04-14 16:43:15 -04:00
Josh Brower fabec23b37 osquery package versioning bugfix 2020-04-14 16:42:25 -04:00
Josh BrowerandGitHub 983e9476e6 Merge pull request #563 from Security-Onion-Solutions/bugfix/playbook-set-api 
Playbook - automatically set SOCtopus IP
 2020-04-14 12:49:06 -04:00
Josh Brower 10b7f55372 Playbook - automatically set SOCtopus IP 2020-04-14 12:47:59 -04:00
Josh BrowerandGitHub a1bea7217b Merge pull request #561 from Security-Onion-Solutions/bugfix/fleet-launcher-versioning 
Fleet package fixes
 2020-04-13 16:19:44 -04:00
Josh Brower 29ebed3005 Fleet package fixes 2020-04-13 16:18:58 -04:00
Josh BrowerandGitHub febf18174d Merge pull request #559 from Security-Onion-Solutions/bugfix/playbook1 
osquery ingest ecs
 2020-04-13 10:58:54 -04:00
Josh Brower 634100318e osquery ingest ecs 2020-04-13 10:58:13 -04:00
Josh BrowerandGitHub 277ee4d5ea Merge pull request #556 from Security-Onion-Solutions/bugfix/playbook1 
NIDS2TheHive Update for ECS
 2020-04-11 11:48:13 -04:00
Josh Brower 995b255017 NIDS2TheHive Update for ECS 2020-04-11 11:47:34 -04:00
Josh BrowerandGitHub 7d92db23b4 Merge pull request #553 from Security-Onion-Solutions/bugfix/fleetv2 
fleet osquery fixes
 2020-04-10 16:57:12 -04:00
Josh Brower edae63097c fleet osquery fixes 2020-04-10 16:56:37 -04:00
Josh BrowerandGitHub 422f4c928c Merge pull request #544 from Security-Onion-Solutions/bugfix/fleet-so-status 
so-status Fleet node
 2020-04-09 10:05:01 -04:00
Josh Brower 55ae5fa9f3 so-status Fleet node 2020-04-09 10:04:18 -04:00
Josh BrowerandGitHub cf8c33ccea Merge pull request #532 from Security-Onion-Solutions/bugfix/fleet-link 
Redirect SOC Fleet link to current Fleet instance
 2020-04-07 11:59:25 -04:00
Josh Brower 22ae8ac96a Redirect SOC Fleet link to current Fleet instance 2020-04-07 11:58:35 -04:00
Josh BrowerandGitHub 6b53770d5e Merge pull request #524 from Security-Onion-Solutions/bugfix/fleet-ingest 
Gen filebeat certs for Fleet node
 2020-04-06 08:53:22 -04:00
Josh Brower 9937ccaee7 Gen filebeat certs for Fleet node 2020-04-06 08:52:37 -04:00
Josh BrowerandGitHub 35fc87e5f6 Merge pull request #522 from Security-Onion-Solutions/bugfix/fleet-ingest 
Fleet pipeline fixes
 2020-04-03 16:14:28 -04:00
Josh Brower 051f6d2310 Fleet pipeline fixes 2020-04-03 16:10:38 -04:00
Josh BrowerandGitHub a38299d4ea Merge pull request #508 from Security-Onion-Solutions/feature/fleet-ingest 
template + nginx config
 2020-04-02 20:17:54 -04:00
Josh Brower 513419ce2f template + nginx config 2020-04-02 20:16:21 -04:00
Josh BrowerandGitHub 551af39446 Merge pull request #499 from Security-Onion-Solutions/feature/osquery-ingest-fixes 
osquery updates and fixes
 2020-04-02 08:29:20 -04:00
Josh Brower 1ca290c766 osquery updates and fixes 2020-04-02 08:28:22 -04:00
Josh BrowerandGitHub 572c1b5582 Merge pull request #486 from Security-Onion-Solutions/feature/osquery-ingest 
osquery ingest - initial support
 2020-04-01 10:19:42 -04:00
Josh BrowerandGitHub 5ca9a643a8 Merge branch 'dev' into feature/osquery-ingest 2020-04-01 10:19:35 -04:00
Josh Brower 0e76447d11 osquery ingest - initial support 2020-04-01 10:17:36 -04:00
Josh BrowerandGitHub 2bfacecb4b Merge pull request #478 from Security-Onion-Solutions/bugfix/osquery 
fleet init fix
 2020-03-31 09:54:45 -04:00
Josh Brower 131fd1f322 fleet init fix 2020-03-31 09:53:59 -04:00
Josh BrowerandGitHub e44157aa7d Merge pull request #464 from Security-Onion-Solutions/feature/zeek-communityid 
Zeek - enable Community ID policy
 2020-03-26 16:34:46 -04:00
Josh Brower 31ae8a2c26 Zeek - enable Community ID policy 2020-03-26 16:33:47 -04:00
Josh BrowerandGitHub 11907dc4ad Merge pull request #462 from Security-Onion-Solutions/bugfix/fleet 
Bugfix/fleet
 2020-03-26 11:23:28 -04:00
Josh Brower 1c9dd40b02 Fleet webpage fix 2020-03-26 11:20:20 -04:00
Josh Brower e5ecf0f4cb Fleet dedicated node - various fixes 2020-03-25 13:03:40 -04:00
Josh BrowerandGitHub 05690691f5 Merge pull request #459 from Security-Onion-Solutions/feature/communityid-suricata 
Suricata - enable community id
 2020-03-25 09:28:02 -04:00
Josh BrowerandGitHub 51b9af7ac4 Suricata - enable community id 2020-03-25 09:24:45 -04:00
Josh Brower 9bcba41882 Feature/Fleet-Standalone 2020-03-24 20:57:24 -04:00
Josh BrowerandGitHub e4e598f0be Merge pull request #458 from Security-Onion-Solutions/bugfix/so-functions 
so-functions --- conditional-fix
 2020-03-24 16:01:12 -04:00
Josh BrowerandGitHub 166a21c1d1 conditional-fix 2020-03-24 15:59:50 -04:00
Josh BrowerandGitHub e3916e5de2 Merge pull request #406 from Security-Onion-Solutions/feature/playbook-alerting 
Playbook - Schedule Playbook rule updates
 2020-03-09 08:58:39 -04:00
Josh Brower a96465383f Schedule Playbook rule updates 2020-03-09 08:57:31 -04:00
Josh BrowerandGitHub 689ef31189 Merge pull request #361 from Security-Onion-Solutions/bugfix/bpf 
bpf fix
 2020-02-18 16:38:54 -05:00
Josh Brower f9e07709f2 bpf fix 2020-02-18 16:36:20 -05:00
Josh BrowerandGitHub 074ebe6008 Merge pull request #357 from Security-Onion-Solutions/bugfix/playbook 
SOCtopus.conf quick fix RE: playbook API
 2020-02-17 07:49:29 -05:00