6278 Commits

Author	SHA1	Message	Date
Doug Burks	80e50fa7b4	add ecat_arp_info to hunt.eventfields.json	2022-11-22 10:53:48 -05:00
Doug Burks	84d333e915	add s7comm to hunt.eventfields.json	2022-11-22 10:51:06 -05:00
Doug Burks	ae582caa55	Add modbus_detailed to hunt.eventfields.json	2022-11-22 10:48:33 -05:00
Doug Burks	264ae2b9ac	add enip to hunt.eventfields.json	2022-11-22 10:45:20 -05:00
Doug Burks	b522c9eea4	reorder fields in hunt.eventfields.json	2022-11-22 10:43:01 -05:00
Doug Burks	51cc047933	add cip to hunt.eventfields.json	2022-11-22 10:40:22 -05:00
Doug Burks	2a805ac1a6	Add tds entries to hunt.eventfields.json	2022-11-22 10:29:55 -05:00
Doug Burks	595f615ed9	Add ICS dashboard	2022-11-22 10:22:55 -05:00
Doug Burks	aa7c39d312	Add dashboards for stun, tds, and wireguard	2022-11-22 10:08:39 -05:00
Wes	95a6f9aa7d	Add COTP and TDS ingest pipelines	2022-11-22 13:35:19 +00:00
weslambert	4c09c8856b	Fix syntax error for 'ics' tag logic	2022-11-22 07:23:56 -05:00
weslambert	72eccd2649	Fix indentation	2022-11-21 17:01:16 -05:00
weslambert	310ea633b6	Add 'ics' tag to events generated from ICS protocol logs	2022-11-21 16:43:43 -05:00
Doug Burks	0536d174fe	Fix opcua_binary reference in so-zeek-logs	2022-11-21 14:03:22 -05:00
Doug Burks	a54bb2bad4	Remove descriptions from so-zeek-logs	2022-11-21 13:23:53 -05:00
lock-wire	f80c8b89e4	Shorten Log Descriptions	2022-11-21 09:49:31 -07:00
Peter Di Giorgio	33bf0c6902	Merge pull request #9163 from Security-Onion-Solutions/dev ... Update Foxtrot from Dev	2022-11-17 10:44:24 -06:00
Wes	a278194037	Add additional ICS/SCADA ingest node pipelines	2022-11-17 16:16:33 +00:00
lock-wire	1b8e546045	Add s7comm,tds,stun,profinet,wireguard	2022-11-16 21:41:02 -06:00
Wes	35e131b888	Update ingest node pipelines for ICS/SCADA protocols	2022-11-16 21:09:30 +00:00
Mike Reeves	b0e08ed749	Merge pull request #9066 from security-companion/analyzers-patch1 ... fix descriptions in files related to analyzers	2022-11-12 11:32:09 -05:00
Doug Burks	9bf1c1e869	FIX: Avoid deprecation warning in Zeek file extraction script #9123	2022-11-11 16:27:11 -05:00
Peter Di Giorgio	1e96a0b6a6	Merge pull request #9122 from Security-Onion-Solutions/foxtrot ... Merge new protocol analyzers into dev	2022-11-11 12:53:57 -08:00
lock-wire	8dc08f66fd	Merge branch 'foxtrot' of https://github.com/Security-Onion-Solutions/securityonion into foxtrot ... merge remote	2022-11-11 12:18:02 -08:00
lock-wire	73b1e5949b	Add ecat, enip, cip, and opcua	2022-11-11 12:15:54 -08:00
Doug Burks	2d6a4d7c28	Merge pull request #9098 from Security-Onion-Solutions/feature/local-docs ... FEATURE: Improve local copy of docs in SOC #9097	2022-11-11 16:21:54 +00:00
Peter Di Giorgio	ae389ee487	Merge pull request #9121 from Security-Onion-Solutions/dev ... Update foxtrot from dev	2022-11-11 07:25:26 -08:00
lock-wire	85d30520ce	Add BSAP protocol	2022-11-11 07:22:55 -08:00
Jason Ertel	595a95fdf5	merge conflicts	2022-11-10 16:47:52 -05:00
Mike Reeves	4acd9f8816	Update soup	2022-11-09 10:10:52 -05:00
security-companion	7ee4eb6101	fix descriptions in files related to analyzers	2022-11-08 22:32:28 +01:00
doug	84b2fc9c17	FEATURE: Improve local copy of docs in SOC #9097	2022-11-08 16:26:09 -05:00
Mike Reeves	a7417a7242	Update soup	2022-11-08 14:48:48 -05:00
Peter Di Giorgio	5532577fdd	Merge pull request #9071 from Security-Onion-Solutions/dev ... Merge Dev into Foxtrot	2022-11-04 08:01:29 -07:00
Peter Di Giorgio	5ebf470a86	Update zeek.bacnet_discovery	2022-11-03 22:27:04 -07:00
Peter Di Giorgio	4b39ccec6d	Update zeek.bacnet_property	2022-11-03 15:30:20 -07:00
Mike Reeves	c5bfe6ffdb	Update init.sls	2022-11-02 12:59:46 -04:00
Mike Reeves	4ac365e670	Update init.sls	2022-11-02 12:59:17 -04:00
Mike Reeves	ff1a903895	Update init.sls	2022-11-02 12:58:31 -04:00
Mike Reeves	388486ec08	Update init.sls	2022-11-02 10:06:13 -04:00
Mike Reeves	f74aee6a03	Update init.sls	2022-11-01 13:21:12 -04:00
Mike Reeves	16d8e9e5a0	Fix soup and perms updates	2022-11-01 09:05:26 -04:00
Mike Reeves	ee1f55361e	Add soup and perms updates	2022-10-31 16:33:38 -04:00
Mike Reeves	cb33464668	Merge pull request #9033 from Security-Onion-Solutions/strelkafix ... Add Filechecks	2022-10-31 15:49:40 -04:00
Mike Reeves	06ddae13b5	Update filecheck	2022-10-31 15:41:57 -04:00
Mike Reeves	16d3dead04	Update sensor-rotate.conf	2022-10-31 15:33:10 -04:00
Mike Reeves	f7043f3f62	Update init.sls	2022-10-31 15:25:38 -04:00
Mike Reeves	bf41f2984a	Update init.sls	2022-10-31 14:58:55 -04:00
Mike Reeves	86ca3602f3	Update init.sls	2022-10-31 14:44:01 -04:00
Mike Reeves	416c28fded	Update init.sls	2022-10-31 14:42:23 -04:00