Commit Graph

2603 Commits

Author SHA1 Message Date
m0duspwnens 2e5877ff68 update nsm threshholds for searchnode 2020-04-15 10:16:30 -04:00
m0duspwnens bef6d6d9f7 changes to master dashboard 2020-04-15 10:16:01 -04:00
m0duspwnens e38d199e25 update master dashboard 2020-04-15 09:04:42 -04:00
m0duspwnens eb3a069e8d rename forward node to sensor node for grafana 2020-04-14 19:02:44 -04:00
m0duspwnens bb7c78891e rename forward node to sensor node for grafana 2020-04-14 18:55:08 -04:00
m0duspwnens 274ab07ce8 rename forward node to sensor node for grafana 2020-04-14 18:48:33 -04:00
m0duspwnens 41fd4fe715 remove graph from uptime eval 2020-04-14 18:47:49 -04:00
Josh Brower 615eb661c4 Merge pull request #564 from Security-Onion-Solutions/bugfix/fleet-package-versioning
osquery package versioning bugfix
2020-04-14 16:43:15 -04:00
Josh Brower fabec23b37 osquery package versioning bugfix 2020-04-14 16:42:25 -04:00
m0duspwnens 51b68fde2d zeek restart count red if >= 1 2020-04-14 15:36:57 -04:00
m0duspwnens efd43f6fe4 fix spacing in zeek packet loss grafana panel 2020-04-14 15:13:16 -04:00
m0duspwnens 28b4381e3c changes to eval grafana dashboard 2020-04-14 14:25:46 -04:00
William Wernert 7360f6ce7f [fix] Correct placeholder subbing for Kibana 2020-04-14 14:17:36 -04:00
William Wernert 8fdd32f263 [fix] Add correct PATH location in so-setup 2020-04-14 14:01:26 -04:00
m0duspwnens f2980d7e09 change healthcheck to send 0 or 1 to telegraf for zeek restart 2020-04-14 12:57:54 -04:00
Josh Brower 983e9476e6 Merge pull request #563 from Security-Onion-Solutions/bugfix/playbook-set-api
Playbook - automatically set SOCtopus IP
2020-04-14 12:49:06 -04:00
Josh Brower 10b7f55372 Playbook - automatically set SOCtopus IP 2020-04-14 12:47:59 -04:00
Mike Reeves 9c5ef3d092 Fix Logix so py3 salt gets installed for non masters 2020-04-14 10:10:43 -04:00
Mike Reeves 6ef14afa9e Apply yum fixes once changes are opk 2020-04-14 09:59:48 -04:00
weslambert 3321e975bd Merge pull request #562 from Security-Onion-Solutions/fix/zeek_files
update parsing for Zeek files
2020-04-14 09:09:40 -04:00
Wes Lambert 59787a6532 update parsing for Zeek files 2020-04-14 13:08:31 +00:00
Josh Brower a1bea7217b Merge pull request #561 from Security-Onion-Solutions/bugfix/fleet-launcher-versioning
Fleet package fixes
2020-04-13 16:19:44 -04:00
Josh Brower 29ebed3005 Fleet package fixes 2020-04-13 16:18:58 -04:00
weslambert 84e37856f0 Merge pull request #560 from Security-Onion-Solutions/fix/static_rename
Update key name for Wazuh and Strelka for Filebeat
2020-04-13 12:10:27 -04:00
Wes Lambert e086db3de6 update key name 2020-04-13 16:09:06 +00:00
Josh Brower febf18174d Merge pull request #559 from Security-Onion-Solutions/bugfix/playbook1
osquery ingest ecs
2020-04-13 10:58:54 -04:00
Josh Brower 634100318e osquery ingest ecs 2020-04-13 10:58:13 -04:00
weslambert 29437b9082 Merge pull request #557 from Security-Onion-Solutions/fix/kibana_config
update Kibana config
2020-04-13 08:18:47 -04:00
Wes Lambert 4df91ed008 update Kibana config 2020-04-13 12:17:07 +00:00
Josh Brower 277ee4d5ea Merge pull request #556 from Security-Onion-Solutions/bugfix/playbook1
NIDS2TheHive Update for ECS
2020-04-11 11:48:13 -04:00
Josh Brower 995b255017 NIDS2TheHive Update for ECS 2020-04-11 11:47:34 -04:00
Jason Ertel 5a16dc066d Merge pull request #554 from Security-Onion-Solutions/feature/auth
Feature/auth
2020-04-10 17:50:01 -04:00
Jason Ertel 607ff1fd0d secure config files 2020-04-10 17:48:28 -04:00
Jason Ertel 7529144635 secure config files 2020-04-10 17:27:50 -04:00
Josh Brower 7d92db23b4 Merge pull request #553 from Security-Onion-Solutions/bugfix/fleetv2
fleet osquery fixes
2020-04-10 16:57:12 -04:00
Josh Brower edae63097c fleet osquery fixes 2020-04-10 16:56:37 -04:00
Jason Ertel c5a4e567d9 Ensure Path=/ is specified for cookie for eval mode 2020-04-10 16:35:58 -04:00
Josh Patterson 1735cc8252 Merge pull request #552 from Security-Onion-Solutions/issue/551
change log_size_limit logic - https://github.com/Security-Onion-Solut…
2020-04-10 16:17:56 -04:00
m0duspwnens 69031ab6b2 change log_size_limit logic - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/551 2020-04-10 16:15:43 -04:00
weslambert 6aafc4ef01 Merge pull request #550 from Security-Onion-Solutions/fix/zeek_clean
Zeek: migrate Zeek clean script from Bro
2020-04-10 08:51:54 -04:00
Wes Lambert 8d8bde36e8 migrate Zeek clean script from Bro 2020-04-10 12:46:28 +00:00
Jason Ertel 3bf7a5aab5 Merge pull request #549 from Security-Onion-Solutions/feature/auth
Feature/auth
2020-04-09 17:39:23 -04:00
Jason Ertel c130c8fbf4 Merge branch 'dev' into feature/auth 2020-04-09 17:37:09 -04:00
Jason Ertel bb470be4e6 support auto redirect on login 2020-04-09 17:37:03 -04:00
Mike Reeves c0739976c9 Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion-saltstack into dev 2020-04-09 13:58:25 -04:00
Mike Reeves b70d19781d Fix Filebeat Yaml 2020-04-09 13:58:19 -04:00
Josh Patterson be70de9623 Merge pull request #546 from Security-Onion-Solutions/issue/530
move salt logs to /opt/so/logs - https://github.com/Security-Onion-So…
2020-04-09 13:28:27 -04:00
m0duspwnens 57570fb740 move salt logs to /opt/so/logs - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/530 2020-04-09 13:27:32 -04:00
Mike Reeves 6625e17bf2 Have templates applied on the master only 2020-04-09 12:22:27 -04:00
Mike Reeves 5a985736e5 Disable Strelka for all things 2020-04-09 11:49:38 -04:00