CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-07-14 04:43:09 +02:00
Code Issues Packages Projects Releases Wiki Activity
1,833 Commits 40 Branches 127 Tags
5ce5a46292e5a8bd5c0cf78e370cee83eae5595e
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Wes Lambert a646c1123f fix typo 2020-01-03 21:31:40 +00:00
weslambertandGitHub fbf6e5590d Merge pull request #199 from Security-Onion-Solutions/feature/issue127 
manage threshold.conf with Salt - #127
 2020-01-03 14:57:43 -05:00
weslambertandGitHub cc4b536042 Merge pull request #198 from Security-Onion-Solutions/feature/so-scripts 
SO Scripts - start|stop|restart
 2020-01-02 16:03:41 -05:00
weslambertandGitHub 5358220121 Merge pull request #197 from Security-Onion-Solutions/feature/so-scripts-stop 
so-stop scripts - initial commit
 2020-01-02 13:38:19 -05:00
Wes Lambert 82abdedb02 add license 2020-01-02 15:55:52 +00:00
Wes Lambert 82f1d5718a add exclusion for Zeek clean log and extracted file mgmt 2020-01-02 15:39:38 +00:00
Wes Lambert 566d3ed280 revise message text 2020-01-02 15:20:34 +00:00
Wes Lambert c4f57f09ee add Zeek clean script 2020-01-02 15:13:46 +00:00
Wes Lambert bc533bef24 update TheHiveAlerter module 2019-12-30 21:10:56 +00:00
Wes Lambert f597b9f4e5 add AR whitelist for Wazuh 2019-12-30 19:04:54 +00:00
Wes Lambert df722c173f fix typo and prevent agent from getting re-added 2019-12-30 17:47:00 +00:00
Wes Lambert ffc116085e add auth log path for Centos 2019-12-30 17:32:54 +00:00
weslambertandGitHub 8829b5132e Merge pull request #179 from Security-Onion-Solutions/feature/cyberchef_cleanup 
Remove Cyberchef from top file since it is now in so-core
 2019-12-20 12:40:44 -05:00
Wes Lambert 124c552fca remove Cyberchef from top file since it is now in so-core 2019-12-20 15:49:22 +00:00
Wes Lambert eea08f3515 add back helix 2019-12-20 01:24:20 +00:00
weslambertandGitHub 574ee6b97a Merge pull request #174 from Security-Onion-Solutions/quickfix/cyberchef-version 
[BUG] Updated missed text in cyberchef init.sls
 2019-12-19 18:12:11 -05:00
weslambertandGitHub 1876bc2b57 Merge pull request #173 from Security-Onion-Solutions/quickfix/cyberchef-version 
Revert cyberchef version update
 2019-12-19 17:08:13 -05:00
weslambertandGitHub 839f710f61 Merge pull request #166 from Security-Onion-Solutions/feature/fix_hive 
fix ssl verify hive_init.sh
 2019-12-18 14:20:43 -05:00
Wes Lambert c597dd2fb4 Strelka - Filebeat config 2019-12-18 03:22:30 +00:00
Wes Lambert 88f142664f Strelka - intial config 2019-12-18 03:13:14 +00:00
Wes Lambert 4a34ac7c05 wait for TheHive before attempting to configure 2019-12-17 13:34:01 +00:00
Wes Lambert 56d354b256 update Cyberchef to serve static files vs self-hosted 2019-12-16 21:22:00 +00:00
Wes Lambert d66eca1db4 add Bro extracted directory 2019-12-16 20:45:14 +00:00
Wes Lambert c47d163a32 add initial tcpreplay state 2019-12-11 19:39:03 +00:00
Wes Lambert 65a5a2e64a pre-load custom reputation field 2019-12-05 17:41:19 +00:00
Wes Lambert b58b3afa35 add auto_analyze_alerts option 2019-12-05 03:22:10 +00:00
Wes Lambert 79e1ac5336 add webhook 2019-12-04 18:39:58 +00:00
Wes Lambert 5eb0a4f19c update SOCtopus conf 2019-12-04 03:12:02 +00:00
Wes Lambert 76cdc02305 user Cortex org user instead 2019-11-19 16:28:42 +00:00
Wes Lambert b7ad65a837 add Cortex org user 2019-11-19 16:28:05 +00:00
Wes Lambert 34460a6b07 add Cortex org user to setup 2019-11-19 16:25:10 +00:00
Wes Lambert 55db27c898 fix require 2019-11-13 02:21:36 +00:00
Wes Lambert 1feddb7922 add Cyberchef dir 2019-11-12 22:50:46 +00:00
Wes Lambert e364638a62 add Cyberchef 2019-11-12 22:50:00 +00:00
Wes Lambert 2e82d06f27 only configure Telegraf if Grafana enabled 2019-11-12 21:10:31 +00:00
Wes Lambert e323a44827 change intial user role to superadmin 2019-11-07 14:37:18 +00:00
Wes Lambert 74428f33eb pin Wazuh agent version 2019-10-31 14:55:14 +00:00
weslambertandGitHub ca8c4a6b93 Update README.md 2019-09-27 14:56:35 -04:00
weslambertandGitHub 4dd414fb16 Merge pull request #104 from weslambert/master 
update log path
 2019-09-24 16:38:52 -04:00
Wes Lambert 5bd77a5177 update log path 2019-09-24 20:37:07 +00:00
Wes Lambert 497edcbe45 update Filebeat log config 2019-09-24 19:38:06 +00:00
Wes Lambert 2784542cdb update Elastalert config 2019-09-23 22:39:43 +00:00
Wes Lambert 965ee6f922 remove duplicate alerter 2019-09-23 14:43:54 +00:00
Wes Lambert 5419bd6f08 update config for Elastalert 2019-09-23 14:43:14 +00:00
Wes Lambert 9a53cfd5ff update path 2019-09-18 19:47:39 +00:00
Wes Lambert 1f8fd7ddd1 fix typo 2019-09-18 19:42:02 +00:00
Wes Lambert 30d732e18f sync default Elastalert rules 2019-09-18 19:37:47 +00:00
Wes Lambert 3f07d7de91 add files 2019-09-09 20:28:31 +00:00
Wes Lambert a1998a8aa2 update to allow use of custom modules and local config 2019-09-09 20:23:37 +00:00
Wes Lambert 707e0e378a ensure setup log is consistent 2019-05-16 13:25:02 +00:00
Wes Lambert 4f15e14cc2 TheHive: Add initial user 2019-03-28 14:24:17 +00:00
Wes Lambert 8b8556213b SOCtopus: more config updates 2019-03-25 21:26:53 +00:00
Wes Lambert 1d01192b9e SOCtopus: update config 2019-03-25 21:21:21 +00:00
Wes Lambert 03e42a009a SOCtopus: update config 2019-03-25 16:12:24 +00:00
Wes Lambert 28c0cda16b SOCtopus: Initial Commit 2019-03-15 02:40:02 +00:00
Wes Lambert cdfc3a15ad osquery: fix host field conflict 2019-01-16 19:25:06 +00:00
Wes Lambert 04cdd2d976 Redis - Re-enable for Fleet live queries 2018-12-18 15:45:25 +00:00
Wes Lambert 9930aac556 Wazuh - Add conditional for config profile 2018-12-14 21:28:46 +00:00
Wes Lambert 172c9e0593 Logstash - Wazuh parsing updates 2018-12-14 18:00:19 +00:00
Wes Lambert 2f12c36c87 Setup - Clean up old Wazuh stuff and move Curator config to SN Adv Mode 2018-12-14 14:07:20 +00:00
Wes Lambert 09f5c24251 SSL - Ensure storage node gets FB cert 2018-12-14 14:05:35 +00:00
Wes Lambert 55a426c347 Cleanup - Lowercase SENSOR 2018-12-14 03:27:13 +00:00
Wes Lambert 9ce41f81b9 Setup - Make sensor minion config consistent 2018-12-14 00:12:37 +00:00
Wes Lambert c7dcbb8dcb Merge remote-tracking branch 'upstream/master' 2018-12-13 23:57:24 +00:00
Wes Lambert a662badc5b Firewall - Fix stuff for sensor 2018-12-13 23:52:15 +00:00
Wes Lambert 1d9fae304c Setup - Get Curator disk size when /nsm not present 2018-12-13 22:01:21 +00:00
Wes Lambert bd04dc45a3 Wazuh - Fix Jinja 2018-12-13 18:30:04 +00:00
Wes Lambert 75ed258d19 Firewall - Fix Wazuh IP logic for sensors 2018-12-13 17:57:22 +00:00
Wes Lambert 4db52ec865 Wazuh - Add logic for sensors 2018-12-13 17:56:51 +00:00
Wes Lambert 5e23859557 Salt - Add Wazuh to other roles 2018-12-13 17:34:19 +00:00
Wes Lambert 62067f37cf Wazuh - Fix agent ip for storage nodes 2018-12-13 17:33:12 +00:00
Wes Lambert d13e7559fe Filebeat - Enabled for master and only enable Bro/Suri inputs when needed 2018-12-13 17:32:03 +00:00
Wes Lambert 41e9c4c7e0 Logstash - Alter input for Wazuh logs 2018-12-12 20:52:18 +00:00
Wes Lambert 54c35cdc0d Filebeat - Add Wazuh archive logs 2018-12-12 20:51:41 +00:00
Wes Lambert 8496834f8b Wazuh - Re-order top.sls so Filebeat does not overrite Wazuh logs 2018-12-12 15:48:59 +00:00
Wes Lambert 9d86744e07 Filebeat - Fix Wazuh alerts path 2018-12-12 15:19:51 +00:00
Wes Lambert e20ab3b407 Filebeat - Config for Wazuh alerts 2018-12-12 14:48:17 +00:00
Wes Lambert 5822842d2e Wazuh - Add sleep to wait for API 2018-12-12 13:36:13 +00:00
Wes Lambert a99ec40506 Setup - Remark Wazuh agent config 2018-12-12 13:10:27 +00:00
Wes Lambert 8404897fe3 Wazuh - Move agent config to init.sls 2018-12-12 06:05:13 +00:00
Wes Lambert 823a589fae Wazuh - Set mode for agent registration script 2018-12-12 04:01:13 +00:00
Wes Lambert 1a4a7382e2 Wazuh - Fix Wazuh agent registration script name 2018-12-12 03:18:55 +00:00
Wes Lambert 86a72984c7 Setup - Add auth pillar to eval mode 2018-12-12 02:58:09 +00:00
Wes Lambert 113f030873 Wazuh - Add agent register script to init.sls 2018-12-12 02:26:38 +00:00
Wes Lambert 634c435ad6 Setup - Configure Wazuh agent 2018-12-12 01:51:30 +00:00
Wes Lambert 9a021164ac Wazuh - Fix port, add agent conf, and agent registration script 2018-12-12 01:42:05 +00:00
Wes Lambert 223237f8c2 Wazuh - Expose both UDP and TCP ports 2018-12-11 19:45:56 +00:00
Wes Lambert 6cdf1ef857 Firewall - Add rules for Wazuh Manager 2018-12-11 19:44:32 +00:00
Wes Lambert 0f5fbadaf5 Filebeat - Switch negation to equals 2018-12-10 20:17:41 +00:00
Wes Lambert 10d6c0f5a9 Setup - Remark Wazuh user section completely 2018-12-10 19:55:53 +00:00
Wes Lambert 2544984433 Wazuh - add to top.sls for Eval Mode 2018-12-10 19:51:57 +00:00
Wes Lambert e70db05a0f Filebeat - Modify config for Wazuh alerts 2018-12-10 19:50:55 +00:00
Wes Lambert cb68f502ee Wazuh - Changes to init.sls 2018-12-10 19:49:14 +00:00
Wes Lambert 0a33204726 Setup - Only add Wazuh repo 2018-12-07 18:16:03 +00:00
Wes Lambert e6469d505a Wazuh - initial init.sls 2018-12-07 18:13:42 +00:00
Wes Lambert 6a9a537cf8 Wazuh - Remove filebeat.yml 2018-12-07 13:39:10 +00:00
Wes Lambert e355503324 Filebeat - Update for Wazuh logs 2018-12-07 13:38:31 +00:00
Wes Lambert e11aadf730 Wazuh - agent install for CentOS 2018-12-07 13:36:11 +00:00
Wes Lambert f5e2b7f210 Setup - Adjust to prevent unary operator error 2018-12-07 04:22:11 +00:00
Wes Lambert 6bfb813cdf Setup - Adjust syntax 2018-12-07 04:18:28 +00:00