CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-07-22 08:45:40 +02:00
Code Issues Packages Projects Releases Wiki Activity
10,777 Commits 46 Branches 127 Tags
6eedae601f6d1a4a6738ee3dd6dfd3fc522acc4e
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
doug 6eedae601f improve welcome screen 2022-12-13 12:35:43 -05:00
doug d58579d916 improve grammar 2022-12-13 12:05:02 -05:00
doug 0072cc42db add extra newline 2022-12-13 11:34:29 -05:00
doug 0f84f419b2 fix sizing 2022-12-13 11:31:12 -05:00
doug d3a8bdff52 setup improvements 2022-12-13 11:20:00 -05:00
Doug BurksandGitHub f94eb243e4 Merge pull request #9367 from Security-Onion-Solutions/dougburks-patch-1 
Upgrade to Elastic 8.5.3
 2022-12-13 10:14:41 -05:00
Doug BurksandGitHub 3dd4e31f49 Upgrade to Elastic 8.5.3 in config_saved_objects.ndjson 2022-12-13 10:07:52 -05:00
Doug BurksandGitHub 2004184b72 Upgrade to Elastic 8.5.3 in so-kibana-config-load 2022-12-13 10:06:23 -05:00
Doug BurksandGitHub ed8bf884eb Merge pull request #9355 from Security-Onion-Solutions/fix/2.4-ics 
Fix ICS and other issues in 2.4
 2022-12-12 09:18:14 -05:00
Doug BurksandGitHub e1d200e6ce Remove duplicate TDS dashboard from defaults.yaml 2022-12-11 14:39:08 -05:00
Doug BurksandGitHub 72f71ba695 Fix TDS dashboard in defaults.yaml 2022-12-11 14:36:27 -05:00
Doug BurksandGitHub be75062612 Update so-import-pcap 2022-12-10 15:17:02 -05:00
Doug BurksandGitHub da8e098655 update so-import-evtx 2022-12-10 15:16:32 -05:00
Doug BurksandGitHub cb16bd36fb fix descriptions in defaults.yaml 2022-12-10 14:31:59 -05:00
Doug BurksandGitHub cf7d8076e9 remove old Wazuh Hunt queries in defaults.yaml 2022-12-10 14:21:58 -05:00
Doug BurksandGitHub cd664b2d39 remove old Modbus dashboard from defaults.yaml 2022-12-10 14:16:39 -05:00
Doug BurksandGitHub 7f07a94a98 remove old DNP3 and Wazuh dashboards from defaults.yaml 2022-12-10 14:14:24 -05:00
Doug BurksandGitHub 8a0f94f8df increase window width to accommodate extra text in so-whiptail 2022-12-10 11:24:11 -05:00
Doug BurksandGitHub 66ad10cf77 fix airgap text in so-whiptail 2022-12-10 10:41:30 -05:00
Doug BurksandGitHub de2427cabe add -p option to mkdir in so-elastic-fleet-setup 2022-12-10 08:20:38 -05:00
Doug BurksandGitHub 187ca4c453 Update soc defaults.yaml to include dnp3_control and dnp3_objects eventfields 2022-12-10 07:33:09 -05:00
Doug BurksandGitHub c4ea39d1ba Merge pull request #9349 from Security-Onion-Solutions/fix/2.4-ics 
2.4: Fix multiple ICS issues and keep import indices open as in 2.3
 2022-12-09 15:09:49 -05:00
doug c2e10a4359 remove duplicate import iteration from so-functions 2022-12-09 11:00:06 -05:00
doug 90093395b6 keep so-import indices open as in 2.3 2022-12-09 10:23:09 -05:00
doug 565ca4e94f keep so-import indices open as in 2.3 2022-12-09 08:49:25 -05:00
doug 5c00ab7b7f correct order in defaults.yaml 2022-12-08 16:50:34 -05:00
doug 07a4919cd3 remove old opcua files 2022-12-08 16:43:11 -05:00
doug 7cfb688890 update defaults.yaml 2022-12-08 16:32:04 -05:00
Doug BurksandGitHub cf53242cf8 Merge pull request #9334 from Security-Onion-Solutions/dougburks-patch-1 
update wording in so-whiptail
 2022-12-08 10:43:22 -05:00
Doug BurksandGitHub c01486b009 update wording in so-whiptail 2022-12-08 10:32:03 -05:00
Doug BurksandGitHub 6e1e6e15e8 Merge pull request #9186 from Security-Onion-Solutions/dougburks-patch-2 
Add ICS/SCADA logs to filebeat defaults.yaml
 2022-11-21 13:30:35 -05:00
Doug BurksandGitHub febb781428 Add ICS/SCADA logs to filebeat defaults.yaml 2022-11-21 12:10:55 -05:00
Doug BurksandGitHub 5a0fe6050b Merge pull request #9179 from Security-Onion-Solutions/dougburks-patch-2 
Simplify version in README.md to just 2.4
 2022-11-21 08:46:33 -05:00
Doug BurksandGitHub 778ee4b00f Simplify version in README.md to just 2.4 2022-11-21 08:39:18 -05:00
Doug BurksandGitHub a2da8e5e08 Merge pull request #9129 from Security-Onion-Solutions/dougburks-patch-1 
fix descriptions in files related to analyzers
 2022-11-12 19:26:34 +00:00
Doug BurksandGitHub 632464335f fix descriptions in files related to analyzers 2022-11-12 13:14:02 -05:00
Doug BurksandGitHub f77db78219 fix descriptions in files related to analyzers 2022-11-12 13:13:30 -05:00
Doug BurksandGitHub 2f4ce91678 fix descriptions in files related to analyzers 2022-11-12 13:12:58 -05:00
Doug BurksandGitHub 154dff98de fix descriptions in files related to analyzers 2022-11-12 13:12:23 -05:00
Doug BurksandGitHub a15ca3cc49 fix descriptions in files related to analyzers 2022-11-12 13:11:38 -05:00
Doug BurksandGitHub a6ad7fa3ac Merge pull request #9125 from Security-Onion-Solutions/dougburks-patch-2 
FIX: Avoid deprecation warning in Zeek file extraction script #9123
 2022-11-11 21:33:43 +00:00
Doug BurksandGitHub 40f5bb25ef FIX: Avoid deprecation warning in Zeek file extraction script #9123 2022-11-11 16:28:23 -05:00
Doug BurksandGitHub f3fc52dd2c Merge pull request #9041 from Security-Onion-Solutions/dougburks-patch-1 
https://github.com/Security-Onion-Solutions/securityonion/pull/8952
 2022-11-01 13:40:51 +00:00
Doug BurksandGitHub 2030f08b54 https://github.com/Security-Onion-Solutions/securityonion/pull/8952 2022-11-01 09:35:53 -04:00
Doug BurksandGitHub 7ede0c3c76 Merge pull request #8915 from Security-Onion-Solutions/dougburks-patch-2 
Remove destination_geo.organization_name from Sysmon Network sankey diagram
 2022-10-13 13:04:23 +00:00
Doug BurksandGitHub f6151b3895 Remove destination_geo.organization_name from Sysmon Network sankey diagram 2022-10-13 09:03:10 -04:00
Doug BurksandGitHub 2c5038aa9c Merge pull request #8879 from Security-Onion-Solutions/2.4/improve-sysmon-dashboards 
improve sysmon dashboards
 2022-10-07 16:46:51 +00:00
doug d65fde9536 improve sysmon dashboards 2022-10-07 12:23:40 -04:00
Doug BurksandGitHub ea8d9362ae Merge pull request #8813 from Security-Onion-Solutions/dougburks-patch-1 
Change managing-rules.html to rules.html in soc_idstools.yaml
 2022-09-26 19:00:41 +00:00
Doug BurksandGitHub 80201f1465 Change managing-rules.html to rules.html in soc_idstools.yaml 2022-09-26 14:58:51 -04:00
Doug BurksandGitHub 1b13e454f8 Merge pull request #8812 from Security-Onion-Solutions/2.4/dev-fix-screenshots 
fix screenshots in README.md
 2022-09-26 17:49:10 +00:00
doug 97a6b3c2f3 fix screenshots 2022-09-26 13:46:46 -04:00
Doug BurksandGitHub 4e5eb1cbb8 Merge pull request #8807 from Security-Onion-Solutions/2.4/dev-ocd 
initial quick OCD pass
 2022-09-23 20:39:54 +00:00
doug fee5a7bea9 initial quick OCD pass 2022-09-23 16:29:55 -04:00
Doug BurksandGitHub 8a537204d6 Merge pull request #8783 from Security-Onion-Solutions/2.4/fix-docs-links 
fix docs links
 2022-09-20 19:34:01 +00:00
Doug BurksandGitHub 0137004344 Fix releaseNotesUrl in defaults.yaml 2022-09-20 15:16:53 -04:00
Doug BurksandGitHub 530c497800 Update motd.md 2022-09-20 15:16:04 -04:00
Doug BurksandGitHub 0eafed32a4 Update docs links in README.md 2022-09-20 15:13:14 -04:00
Doug BurksandGitHub bc57a74ac8 Merge pull request #8782 from Security-Onion-Solutions/dougburks-patch-1 
change version to 2.4.0
 2022-09-20 16:52:39 +00:00
Doug BurksandGitHub aadce055d1 change version to 2.4.0 2022-09-20 12:49:14 -04:00
Doug BurksandGitHub 8c88285365 Merge pull request #8780 from Security-Onion-Solutions/2.4/sysmon-fix-bryant 
2.4/sysmon fix bryant
 2022-09-20 14:32:35 +00:00
Doug BurksandGitHub df18f8f886 Merge pull request #8779 from Security-Onion-Solutions/2.4/dev 
2.4/dev
 2022-09-20 13:32:54 +00:00
doug fdffac83e1 sysmon fix by bryant 2022-09-19 14:47:45 -04:00
Doug BurksandGitHub de0a7d3bcd Merge pull request #8293 from Security-Onion-Solutions/dougburks-patch-1 
change hyperlink for Elastic 8 issues
 2022-07-13 12:41:50 -04:00
Doug BurksandGitHub c67a58a5b1 change hyperlink for Elastic 8 issues 2022-07-13 12:40:03 -04:00
Doug BurksandGitHub 7ae5d49a4a Merge pull request #8290 from Security-Onion-Solutions/dougburks-patch-1 
increment version to 2.3.140
 2022-07-13 09:33:37 -04:00
Doug BurksandGitHub 34d3c6a882 increment version to 2.3.140 2022-07-13 09:32:28 -04:00
Doug BurksandGitHub 00cf0b38d0 Merge pull request #8165 from Security-Onion-Solutions/dougburks-patch-1 
FIX: Improve default dashboards #8136
 2022-06-21 12:57:46 -04:00
Doug BurksandGitHub 94c637449d FIX: Improve default dashboards #8136 2022-06-21 12:53:06 -04:00
Doug BurksandGitHub 286909af4b Merge pull request #8113 from Security-Onion-Solutions/fix/pfsense-category 
FIX: Add event.category field to pfsense firewall logs #8112
 2022-06-13 08:08:00 -04:00
doug 025993407e FIX: Add event.category field to pfsense firewall logs #8112 2022-06-13 08:03:44 -04:00
Doug BurksandGitHub 73baa1d2f0 Merge pull request #8073 from Security-Onion-Solutions/dougburks-patch-1 
Update motd.md to include links to Dashboards and Cases
 2022-06-04 08:53:54 -04:00
Doug BurksandGitHub dce415297c improve readability in motd.md 2022-06-04 06:59:09 -04:00
Doug BurksandGitHub de126647f8 Update motd.md to include links to Dashboards and Cases 2022-06-04 06:55:08 -04:00
Doug BurksandGitHub c34f456151 Merge pull request #8069 from Security-Onion-Solutions/dougburks-patch-1 
add bar and pie examples to overview dashboard in dashboards.queries.…
 2022-06-03 15:04:16 -04:00
Doug BurksandGitHub 83bff5ee87 add bar and pie examples to overview dashboard in dashboards.queries.json 2022-06-03 15:02:40 -04:00
Doug BurksandGitHub 918f431728 Merge pull request #8065 from Security-Onion-Solutions/dougburks-patch-1 
Add sankey diagram to default dashboard in dashboards.queries.json
 2022-06-03 11:13:39 -04:00
Doug BurksandGitHub 4a886338c8 fix description field for default dashboard in dashboards.queries.json 2022-06-03 11:10:01 -04:00
Doug BurksandGitHub 7da1802eae Add sankey diagram to default dashboard in dashboards.queries.json 2022-06-03 11:03:48 -04:00
Doug BurksandGitHub 91f8d3e5e9 Merge pull request #8050 from Security-Onion-Solutions/fix/elastalert-query 
FIX: Elastalert query in Hunt #8049
 2022-05-31 16:54:34 -04:00
Doug BurksandGitHub 269b16bbfd https://github.com/Security-Onion-Solutions/securityonion/issues/8049 2022-05-31 16:51:05 -04:00
Doug BurksandGitHub cd382a1b25 FIX: Elastalert query in Hunt #8049 2022-05-31 16:50:32 -04:00
Doug BurksandGitHub e1c9b0d108 FIX: Elastalert query in Hunt #8049 2022-05-31 16:47:52 -04:00
Doug BurksandGitHub 9a98667e85 FIX: Elastalert query in Hunt #8049 2022-05-31 16:47:11 -04:00
doug b93a108386 update Cases screenshot in README 2022-05-27 16:33:08 -04:00
doug 6089f3906d update screenshots and README 2022-05-27 16:32:00 -04:00
Doug BurksandGitHub 6bd02c0b99 Merge pull request #8003 from Security-Onion-Solutions/feature/elastic-7.17.4 
UPGRADE: Elastic 7.17.4 #8002
 2022-05-24 13:24:13 -04:00
Doug BurksandGitHub 1d0bb21908 UPGRADE: Elastic 7.17.4 #8002 2022-05-24 13:19:30 -04:00
Doug BurksandGitHub bde06e7ec5 UPGRADE: Elastic 7.17.4 #8002 2022-05-24 13:19:01 -04:00
Doug BurksandGitHub eb9597217c Merge pull request #7949 from Security-Onion-Solutions/fix/dashboards-hunt-queries 
update dashboards.queries.json and hunt.queries.json
 2022-05-16 08:47:06 -04:00
doug 5cbb50a781 update dashboards.queries.json and hunt.queries.json 2022-05-16 08:33:48 -04:00
Doug BurksandGitHub 58b049257d Merge pull request #7932 from Security-Onion-Solutions/dougburks-patch-1 
remove duplicate showSubtitle from hunt.queries.json
 2022-05-12 09:24:18 -04:00
Doug BurksandGitHub 6ed3f42449 remove duplicate showSubtitle from hunt.queries.json 2022-05-12 09:23:00 -04:00
Doug BurksandGitHub 2910b56ea1 Merge pull request #7835 from Security-Onion-Solutions/elastic-7.17.3 
UPGRADE: Elastic 7.17.3 #7807
 2022-04-21 09:02:51 -04:00
Doug BurksandGitHub e608285341 UPGRADE: Elastic 7.17.3 #7807 2022-04-21 08:57:08 -04:00
Doug BurksandGitHub 04856540dc UPGRADE: Elastic 7.17.3 #7807 2022-04-21 08:54:09 -04:00
Doug BurksandGitHub feb7eeeb8e UPGRADE: Elastic 7.17.3 #7807 2022-04-21 08:47:40 -04:00
Doug BurksandGitHub 44f4b1da7f Merge pull request #7832 from Security-Onion-Solutions/fix/prevent-multiple-instances 
FIX: Prevent multiple instances of so-sensor-clean and so-playbook-sync #6622
 2022-04-20 17:00:09 -04:00
Doug BurksandGitHub 1edb443c5d so-playbook-sync pgrep should be more strict to avoid multiple matches on Ubuntu 2022-04-20 16:48:26 -04:00
Doug BurksandGitHub 8fc03afdc0 so-sensor-clean pgrep should be more strict to avoid matching multiples on Ubuntu 2022-04-20 16:47:18 -04:00