Wes Lambert
|
41db668af6
|
update Wazuh data paths
|
2020-02-11 22:16:25 +00:00 |
|
Wes Lambert
|
0994f598c7
|
update Wazuh paths
|
2020-02-11 13:45:28 +00:00 |
|
Mike Reeves
|
521de8f154
|
Update 9997_output_helix.conf
|
2020-02-10 22:47:11 -05:00 |
|
Mike Reeves
|
6ceb127c46
|
Fix Wazuh paths for logstash/fb
|
2020-02-07 08:52:09 -05:00 |
|
Wes Lambert
|
ec11b9ea25
|
Remove Redis config from eval PL
|
2020-02-05 20:34:32 +00:00 |
|
m0duspwnens
|
799cf32265
|
fix logstash for so-helix role
|
2020-02-05 14:45:07 -05:00 |
|
Josh Brower
|
c1dd26d97e
|
Logstash EVAL pipeline fix - osquery
|
2020-02-05 08:12:08 -05:00 |
|
m0duspwnens
|
6b580eaba9
|
evalmode fix
|
2020-01-30 17:54:24 -05:00 |
|
m0duspwnens
|
68e7dcfba0
|
evalfix
|
2020-01-30 17:38:48 -05:00 |
|
m0duspwnens
|
88967c2512
|
evalfix
|
2020-01-30 17:36:38 -05:00 |
|
m0duspwnens
|
d94065fa00
|
evalfix
|
2020-01-30 17:09:06 -05:00 |
|
Mike Reeves
|
1e0d0d74e1
|
Fix Eval Event Pickup x2
|
2020-01-30 16:16:21 -05:00 |
|
Mike Reeves
|
c32b2726fa
|
Fix Eval Event Pickup
|
2020-01-30 16:10:59 -05:00 |
|
Mike Reeves
|
59d6b7cb8a
|
Add log paths
|
2020-01-30 16:00:57 -05:00 |
|
m0duspwnens
|
bd5b597aed
|
heavynode
|
2020-01-29 12:56:25 -05:00 |
|
m0duspwnens
|
306cc1127b
|
heavynode
|
2020-01-29 12:56:25 -05:00 |
|
Wes Lambert
|
fbb9f099f9
|
Update Elastic state files
|
2020-01-28 14:49:58 +00:00 |
|
Mike Reeves
|
e038a8b731
|
Merge branch 'dev' into feature/issue124
|
2020-01-21 16:48:26 -05:00 |
|
m0duspwnens
|
a39edad3f6
|
changes for multipipelines / mastersearch node - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/124
|
2020-01-21 16:39:42 -05:00 |
|
William Wernert
|
54fb2ad244
|
Merge branch 'dev' of github.com:Security-Onion-Solutions/securityonion-saltstack into feature/registry
# Conflicts:
# salt/common/init.sls
# salt/elasticsearch/init.sls
# salt/filebeat/init.sls
# salt/hive/init.sls
# salt/kibana/init.sls
# salt/logstash/init.sls
# salt/suricata/init.sls
# salt/tcpreplay/init.sls
# salt/wazuh/init.sls
|
2020-01-14 15:48:56 -05:00 |
|
Mike Reeves
|
e141443238
|
Fix some contianer links
|
2020-01-14 11:05:36 -05:00 |
|
Mike Reeves
|
ae55b59048
|
Switch to using images in registry
|
2020-01-14 10:11:26 -05:00 |
|
Wes Lambert
|
7e1870e9d0
|
update image versions
|
2020-01-13 13:52:30 +00:00 |
|
m0duspwnens
|
ed28be4ba9
|
rename logstash config for storage to search - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/176
|
2019-12-20 11:32:55 -05:00 |
|
Mike Reeves
|
e49de63460
|
Helix - Final Parser Fixes
|
2019-12-13 13:59:29 -05:00 |
|
Mike Reeves
|
fdbb223155
|
Helix - Add geo
|
2019-12-13 11:52:43 -05:00 |
|
Mike Reeves
|
e263d72813
|
Setup - Add sensor pillar to Helix
|
2019-12-13 11:46:30 -05:00 |
|
Mike Reeves
|
79d48f9e77
|
Logstash - Fix helix output typeo
|
2019-12-12 15:17:19 -05:00 |
|
Mike Reeves
|
bd9b1957ba
|
Logstash - Fix helix output
|
2019-12-12 14:12:51 -05:00 |
|
Mike Reeves
|
989641eb5a
|
Setup - Fix prompts and disable onion user if iso
|
2019-12-11 13:44:40 -05:00 |
|
Mike Reeves
|
e134071295
|
Helix - Change Parsers for Helix
|
2019-12-10 13:50:27 -05:00 |
|
Mike Reeves
|
ae3c428941
|
Helix Logstash Changes
|
2019-12-10 10:02:41 -05:00 |
|
Mike Reeves
|
4c4cdb7189
|
Helix changes and Wazuh
|
2019-12-09 16:27:03 -05:00 |
|
Mike Reeves
|
3904c19333
|
Change Variables to UperCase
|
2019-12-09 10:04:14 -05:00 |
|
m0duspwnens
|
599341483e
|
adding api key for Helix
|
2019-12-09 09:59:28 -05:00 |
|
Mike Reeves
|
362cd0487f
|
Additional Helix Support
|
2019-12-09 09:52:52 -05:00 |
|
Mike Reeves
|
5140a17fe3
|
Merge pull request #140 from defensivedepth/logstash-fix
Fix dup events
|
2019-11-19 15:25:46 -05:00 |
|
Josh Brower
|
7373473b3f
|
Fix dup events
|
2019-11-19 15:02:35 -05:00 |
|
Mike Reeves
|
f3c204c790
|
Disable Beats input - Update sensoroni version
|
2019-11-06 13:37:42 -05:00 |
|
Mike Reeves
|
9d9b3c18f3
|
Merge pull request #115 from defensivedepth/logstash-tweaks
Logstash tweaks
|
2019-10-28 10:38:51 -04:00 |
|
Josh Brower
|
4dbc5f07b2
|
Enable 0006_input_beats.conf by default on EVAL
|
2019-10-25 10:19:05 -04:00 |
|
Josh Brower
|
504dd6559d
|
Default ssl to false
|
2019-10-24 16:44:33 -04:00 |
|
Mike Reeves
|
ca4cd782a1
|
Docker URL Fix - Issue #68
|
2019-10-16 10:39:18 -04:00 |
|
Dustin Lee
|
699371a4d7
|
logstash: add beats template used in latest SO
|
2019-10-11 08:36:44 -04:00 |
|
Mike Reeves
|
b1f582d218
|
Logstash Module - 1.1.1
|
2019-09-24 11:22:07 -04:00 |
|
doug
|
8472b24a67
|
parse Bro logs using Elasticsearch ingest node
|
2019-09-23 16:04:23 -04:00 |
|
Mike Reeves
|
6d14a94765
|
Logstash Module - Fix watch
|
2019-09-20 16:31:23 -04:00 |
|
Mike Reeves
|
50c074bb4e
|
Logstash Module - Add more watches
|
2019-09-19 15:46:46 -04:00 |
|
Josh Brower
|
9a4eadc967
|
Add rule_signature mapping
|
2019-09-19 08:30:33 -04:00 |
|
Mike Reeves
|
b6fd6fa2cc
|
PCAP module - fix dir
|
2019-06-19 22:10:09 -04:00 |
|