  weslambertandGitHub
|
43a8ec6f50
|
Merge pull request #719 from Security-Onion-Solutions/fix/so-kibana-config
Fix/so kibana config
|
2020-05-18 09:23:17 -04:00 |
|
|
Wes Lambert
|
ee5937d038
|
update Kibana config
|
2020-05-18 13:21:18 +00:00 |
|
|
Wes Lambert
|
228bbbea5f
|
update config export
|
2020-05-18 13:16:42 +00:00 |
|
|
weslambertandGitHub
|
f7de391518
|
Merge pull request #713 from Security-Onion-Solutions/fix/kibana_config_load
change KRATOS to MASTER
|
2020-05-16 13:07:24 -04:00 |
|
|
Wes Lambert
|
23eb73a943
|
change KRATOS to MASTER
|
2020-05-16 16:31:06 +00:00 |
|
|
weslambertandGitHub
|
907702441f
|
Merge pull request #712 from Security-Onion-Solutions/fix/kibana_config_load_order
Fix load order for PLACEHOLDER
|
2020-05-16 11:49:58 -04:00 |
|
|
Wes Lambert
|
047f4e31ad
|
Fix load order for PLACEHOLDER
|
2020-05-16 15:48:55 +00:00 |
|
|
weslambertandGitHub
|
6e9784f68c
|
Merge pull request #711 from Security-Onion-Solutions/fix/kibana_config_placeholder
fix placeholder
|
2020-05-16 11:46:46 -04:00 |
|
|
Wes Lambert
|
3363a5a20a
|
fix placeholder
|
2020-05-16 15:45:52 +00:00 |
|
|
weslambertandGitHub
|
9d4397806b
|
Merge pull request #710 from Security-Onion-Solutions/fix/kibana_config_export
Fix/kibana config export
|
2020-05-16 11:35:43 -04:00 |
|
|
Wes Lambert
|
9b8cf3845a
|
update Kibana config export
|
2020-05-16 15:34:33 +00:00 |
|
|
Wes Lambert
|
89527c533a
|
update Kibana config export
|
2020-05-16 15:33:20 +00:00 |
|
|
weslambertandGitHub
|
5d7c020223
|
Merge pull request #709 from Security-Onion-Solutions/fix/kibana_config
update Kibana config
|
2020-05-16 11:09:45 -04:00 |
|
|
Wes Lambert
|
bd5cc35fc0
|
update Kibana config
|
2020-05-16 15:07:33 +00:00 |
|
|
weslambertandGitHub
|
95141574d4
|
Merge pull request #707 from Security-Onion-Solutions/fix/dhcp_parsing
Fix/dhcp parsing
|
2020-05-16 11:04:13 -04:00 |
|
|
Wes Lambert
|
4b91ade2e8
|
fix message_types one more time :)
|
2020-05-16 15:03:27 +00:00 |
|
|
Wes Lambert
|
9845ee189c
|
fix message_types for real
|
2020-05-16 15:02:41 +00:00 |
|
|
Wes Lambert
|
f0662eed48
|
remark Beat tag for now
|
2020-05-16 14:59:41 +00:00 |
|
|
Wes Lambert
|
6a2ddd4ef6
|
move to DNS
|
2020-05-16 14:58:51 +00:00 |
|
|
Wes Lambert
|
66c89abbc6
|
Fix DHCP message types
|
2020-05-16 14:58:06 +00:00 |
|
|
weslambertandGitHub
|
baf1de4b34
|
Merge pull request #700 from Security-Onion-Solutions/fix/common_type_removal
remove type field
|
2020-05-15 14:37:44 -04:00 |
|
|
Wes Lambert
|
03805bd6e2
|
remove type field
|
2020-05-15 18:29:49 +00:00 |
|
|
weslambertandGitHub
|
59ece8fd29
|
Merge pull request #699 from Security-Onion-Solutions/fix/dce_rpc_parsing
update DCE/RPC parsing
|
2020-05-15 14:20:37 -04:00 |
|
|
Wes Lambert
|
5d5f5cf105
|
update DCE/RPC parsing
|
2020-05-15 18:19:05 +00:00 |
|
 Wes LambertandWilliam Wernert
|
7ea861650f
|
updated placeholder in saved objects
|
2020-04-18 19:11:20 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
8622dab0d2
|
update load script
|
2020-04-18 19:11:19 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
66b4f15a7b
|
replace static value for comm id
|
2020-04-18 19:03:11 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
b67229783b
|
update parsing for Zeek files
|
2020-04-18 18:59:21 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
358d2f74b2
|
update key name
|
2020-04-18 18:58:27 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
0a564a438b
|
update Kibana config
|
2020-04-18 18:58:27 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
5f2fa0fdc5
|
migrate Zeek clean script from Bro
|
2020-04-18 18:56:34 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
159799c91d
|
move PL
|
2020-04-18 18:10:34 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
0c658d01ef
|
remark config load section for now
|
2020-04-18 18:10:33 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
19678aa977
|
fix order
|
2020-04-18 18:09:38 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
40e683d7a6
|
replace URL template with Label template
|
2020-04-18 18:09:38 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
0e3978b87c
|
Revert "update Kibana config"
This reverts commit 82bd14252c.
|
2020-04-18 18:09:37 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
f2b3ca8763
|
add Kibana config export command
|
2020-04-18 18:08:41 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
a7bb014fba
|
update Kibana config
|
2020-04-18 18:08:40 -04:00 |
|
|
weslambertandGitHub
|
60702687d2
|
Merge pull request #576 from Security-Onion-Solutions/fix/kibana_config
Fix/kibana config
|
2020-04-16 15:00:27 -04:00 |
|
|
Wes Lambert
|
1020428e49
|
updated placeholder in saved objects
|
2020-04-16 18:58:42 +00:00 |
|
|
Wes Lambert
|
15ba411d0a
|
update load script
|
2020-04-16 18:58:14 +00:00 |
|
|
weslambertandGitHub
|
133450d2de
|
Merge pull request #567 from Security-Onion-Solutions/fix/comm_id_pivot
replace static value for comm id
|
2020-04-15 14:16:36 -04:00 |
|
|
Wes Lambert
|
9a02550c69
|
replace static value for comm id
|
2020-04-15 18:15:01 +00:00 |
|
|
weslambertandGitHub
|
3321e975bd
|
Merge pull request #562 from Security-Onion-Solutions/fix/zeek_files
update parsing for Zeek files
|
2020-04-14 09:09:40 -04:00 |
|
|
Wes Lambert
|
59787a6532
|
update parsing for Zeek files
|
2020-04-14 13:08:31 +00:00 |
|
|
weslambertandGitHub
|
84e37856f0
|
Merge pull request #560 from Security-Onion-Solutions/fix/static_rename
Update key name for Wazuh and Strelka for Filebeat
|
2020-04-13 12:10:27 -04:00 |
|
|
Wes Lambert
|
e086db3de6
|
update key name
|
2020-04-13 16:09:06 +00:00 |
|
|
weslambertandGitHub
|
29437b9082
|
Merge pull request #557 from Security-Onion-Solutions/fix/kibana_config
update Kibana config
|
2020-04-13 08:18:47 -04:00 |
|
|
Wes Lambert
|
4df91ed008
|
update Kibana config
|
2020-04-13 12:17:07 +00:00 |
|
|
weslambertandGitHub
|
6aafc4ef01
|
Merge pull request #550 from Security-Onion-Solutions/fix/zeek_clean
Zeek: migrate Zeek clean script from Bro
|
2020-04-10 08:51:54 -04:00 |
|
|
Wes Lambert
|
8d8bde36e8
|
migrate Zeek clean script from Bro
|
2020-04-10 12:46:28 +00:00 |
|
|
weslambertandGitHub
|
5ecbac9abd
|
Merge pull request #538 from Security-Onion-Solutions/fix/kibana_config_load
remark config load section for now
|
2020-04-08 14:49:24 -04:00 |
|
|
Wes Lambert
|
f4c01eb313
|
move PL
|
2020-04-08 18:48:22 +00:00 |
|
|
Wes Lambert
|
ead03f5147
|
remark config load section for now
|
2020-04-08 18:47:04 +00:00 |
|
|
weslambertandGitHub
|
b293c3dd2c
|
Merge pull request #536 from Security-Onion-Solutions/fix/kibana_config
Fix/kibana config
|
2020-04-08 14:26:40 -04:00 |
|
|
Wes Lambert
|
a6c7765dd1
|
fix order
|
2020-04-08 18:25:47 +00:00 |
|
|
Wes Lambert
|
ce3807a605
|
replace URL template with Label template
|
2020-04-08 18:16:09 +00:00 |
|
|
weslambertandGitHub
|
3fab895435
|
Merge pull request #535 from Security-Onion-Solutions/fix/revert_kibana_config
Revert "update Kibana config"
|
2020-04-08 14:00:35 -04:00 |
|
|
Wes Lambert
|
433e571369
|
Revert "update Kibana config"
This reverts commit 82bd14252c.
|
2020-04-08 17:59:24 +00:00 |
|
|
weslambertandGitHub
|
313f332ac8
|
Merge pull request #533 from Security-Onion-Solutions/elastic_updates
Elastic updates
|
2020-04-08 12:28:14 -04:00 |
|
|
Wes Lambert
|
051167a692
|
add Kibana config export command
|
2020-04-08 16:26:13 +00:00 |
|
|
Wes Lambert
|
82bd14252c
|
update Kibana config
|
2020-04-08 16:25:24 +00:00 |
|
|
weslambertandGitHub
|
fea345326b
|
Merge pull request #525 from Security-Onion-Solutions/fix/strelka_filebeat
update variables
|
2020-04-06 09:11:04 -04:00 |
|
|
Wes Lambert
|
ad5626f407
|
update variables
|
2020-04-06 13:09:52 +00:00 |
|
|
weslambertandGitHub
|
673c64d2a4
|
Merge pull request #523 from Security-Onion-Solutions/fix/elastic_improvements
Fix/elastic improvements
|
2020-04-05 16:53:19 -04:00 |
|
|
Wes Lambert
|
c476b28ac8
|
update script
|
2020-04-05 20:52:00 +00:00 |
|
|
Wes Lambert
|
cc9a91bfdb
|
update Kibana config
|
2020-04-05 20:50:29 +00:00 |
|
|
Wes Lambert
|
7765d9a038
|
update common template
|
2020-04-05 20:40:30 +00:00 |
|
|
Wes Lambert
|
9e50387eec
|
update ingest files
|
2020-04-05 20:40:00 +00:00 |
|
|
weslambertandGitHub
|
69c90fcdc1
|
Merge pull request #516 from Security-Onion-Solutions/fix/kibana_placeholders
fix placeholders
|
2020-04-03 08:31:54 -04:00 |
|
|
Wes Lambert
|
52edbd23d6
|
fix placeholders
|
2020-04-03 12:21:32 +00:00 |
|
|
weslambertandGitHub
|
0e568103d1
|
Merge pull request #515 from Security-Onion-Solutions/fix/add_more_dashes
update dashboards
|
2020-04-03 00:25:58 -04:00 |
|
|
Wes Lambert
|
638ed36a79
|
update dashboards
|
2020-04-03 04:23:50 +00:00 |
|
|
weslambertandGitHub
|
61aa723c1d
|
Merge pull request #514 from Security-Onion-Solutions/fix/strelka_setup
install Strelka for sensor
|
2020-04-02 21:37:07 -04:00 |
|
|
Wes Lambert
|
b22a3a6534
|
install Strelka for sensor
|
2020-04-03 01:36:00 +00:00 |
|
|
weslambertandGitHub
|
86ccca3c2e
|
Merge pull request #513 from Security-Onion-Solutions/fix/strelka_backend_restart
change restart policy for now
|
2020-04-02 21:09:56 -04:00 |
|
|
Wes Lambert
|
17fd32f12d
|
change restart policy for now
|
2020-04-03 01:07:45 +00:00 |
|
|
weslambertandGitHub
|
395503165c
|
Merge pull request #512 from Security-Onion-Solutions/fix/strelka_cron
change user
|
2020-04-02 21:03:32 -04:00 |
|
|
Wes Lambert
|
d477d73baa
|
change user
|
2020-04-03 01:02:46 +00:00 |
|
|
weslambertandGitHub
|
8d84ee9c81
|
Merge pull request #511 from Security-Onion-Solutions/fix/kibana_load
update Kibana config
|
2020-04-02 21:00:45 -04:00 |
|
|
Wes Lambert
|
f0848906e7
|
update Kibana config
|
2020-04-03 00:59:23 +00:00 |
|
|
weslambertandGitHub
|
7cefc218c4
|
Merge pull request #505 from Security-Onion-Solutions/strelka-sensor
Strelka sensor
|
2020-04-02 16:04:35 -04:00 |
|
|
Wes Lambert
|
9a082725d1
|
add Strelka for sensor if enabled
|
2020-04-02 20:03:29 +00:00 |
|
|
Wes Lambert
|
eb0c23387b
|
specify ES vs LS in FB config
|
2020-04-02 20:01:49 +00:00 |
|
|
weslambertandGitHub
|
fd2b35dd21
|
Merge pull request #498 from Security-Onion-Solutions/fix/observer
use agent name for observer name
|
2020-04-01 17:28:52 -04:00 |
|
|
Wes Lambert
|
e023aeb9be
|
use agent name for observer name
|
2020-04-01 21:27:25 +00:00 |
|
|
weslambertandGitHub
|
b14f9067ab
|
Merge pull request #495 from Security-Onion-Solutions/fix/zeek_output_config
Bro to Zeek
|
2020-04-01 15:19:02 -04:00 |
|
|
weslambertandGitHub
|
edbe512d82
|
Bro to Zeek
|
2020-04-01 15:18:30 -04:00 |
|
|
weslambertandGitHub
|
5f8d1c29b4
|
Merge pull request #494 from Security-Onion-Solutions/search_ls_pillar
Search ls pillar
|
2020-04-01 15:13:17 -04:00 |
|
|
Wes Lambert
|
22e7777d67
|
update search sls
|
2020-04-01 19:12:07 +00:00 |
|
|
Wes Lambert
|
09022ad752
|
Update Zeek and Strelka
|
2020-04-01 19:11:10 +00:00 |
|
|
Wes Lambert
|
1df2302287
|
Update Zeek and Strelka
|
2020-04-01 19:09:38 +00:00 |
|
|
weslambertandGitHub
|
82c99edbfc
|
Update Suricata output
|
2020-04-01 15:02:52 -04:00 |
|
|
weslambertandGitHub
|
e1008269ce
|
Update OSSEC output
|
2020-04-01 15:00:52 -04:00 |
|
|
weslambertandGitHub
|
9f58081ce8
|
Typo
|
2020-04-01 14:57:47 -04:00 |
|
|
weslambertandGitHub
|
d0ad7e7ef9
|
Update config for search pipeline
|
2020-04-01 14:57:32 -04:00 |
|
|
weslambertandGitHub
|
5c433c39e5
|
Merge pull request #492 from Security-Onion-Solutions/fix/strelka-zeek-extracted-sync
Add Zeek extracted file sync
|
2020-04-01 14:20:36 -04:00 |
|
|
weslambertandGitHub
|
cc4b1bf936
|
Add Zeek extracted file sync
|
2020-04-01 14:19:36 -04:00 |
|
|
weslambertandGitHub
|
df00405265
|
Merge pull request #491 from Security-Onion-Solutions/fix/strelka_init
Remove restart policy
|
2020-04-01 13:19:57 -04:00 |
|
|
weslambertandGitHub
|
5173da5a33
|
Remove restart policy
|
2020-04-01 13:19:31 -04:00 |
|