CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-07-16 05:43:25 +02:00
Code Issues Packages Projects Releases Wiki Activity
2,238 Commits 42 Branches 127 Tags
85f5c53b514b4f7b51c65b2a027cfa11dea6a7cc
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
weslambertandGitHub 85f5c53b51 Merge pull request #425 from Security-Onion-Solutions/fix/template_script 
Fix/template script
 2020-03-14 20:36:17 -04:00
Wes Lambert 81da44b85d fix Logstash Eval SLS 2020-03-15 00:32:29 +00:00
Wes Lambert 26c4d453d3 Add ES templates script 2020-03-15 00:30:59 +00:00
weslambertandGitHub 775066489a Merge pull request #424 from Security-Onion-Solutions/ecs_parsing 
ECS parsing
 2020-03-14 08:11:15 -04:00
Wes Lambert 85c1873f4d switch logging to error 2020-03-14 12:10:06 +00:00
Wes Lambert b6ba8e483d update ES init 2020-03-14 12:06:32 +00:00
Wes Lambert d2016d3ff2 modify Filebeat config 2020-03-14 12:05:16 +00:00
Wes Lambert c52220330b modify pipelines 2020-03-14 12:03:32 +00:00
Wes Lambert d48c2723ba modify default templates 2020-03-14 12:02:52 +00:00
Wes Lambert 9fb3a47358 modify default templates 2020-03-14 12:02:42 +00:00
Wes Lambert ffc33b15e5 switch to Filebeat 2020-03-14 12:00:17 +00:00
weslambertandGitHub 7838018e3d Merge pull request #410 from Security-Onion-Solutions/feature/ECS 
Feature/ecs
 2020-03-11 08:23:22 -04:00
Wes Lambert 648b0ba790 remove old config 2020-03-11 12:14:22 +00:00
Wes Lambert 9ad16e8c71 upadte ingest config 2020-03-11 12:13:53 +00:00
Wes Lambert f9e4d218ec update config 2020-03-11 12:13:11 +00:00
Wes Lambert 70e78a0642 add renamed templates 2020-03-11 12:12:32 +00:00
Wes Lambert 84e54a8fae update Eval pillar 2020-03-11 12:09:34 +00:00
weslambertandGitHub aff51b6bb9 Merge pull request #407 from Security-Onion-Solutions/fix/bro_template 
Fix/bro template
 2020-03-09 09:19:37 -04:00
weslambertandGitHub 14dfec5365 Change to bro template 2020-03-09 09:18:57 -04:00
weslambertandGitHub 4a4c378327 Add bro template 2020-03-09 09:18:14 -04:00
weslambertandGitHub 47a7e025ee Merge pull request #403 from Security-Onion-Solutions/fix/zeek-extract 
fix typo
 2020-03-06 13:50:36 -05:00
Wes Lambert aeb298a818 fix typo 2020-03-06 18:49:29 +00:00
weslambertandGitHub 0f8fb7bd89 Merge pull request #402 from Security-Onion-Solutions/fix/node_init 
fix repo name
 2020-03-06 12:46:12 -05:00
Wes Lambert 84df1db201 fix repo name 2020-03-06 17:45:16 +00:00
weslambertandGitHub 21aa54690e Merge pull request #401 from Security-Onion-Solutions/fix/node_files 
add files back
 2020-03-06 12:34:07 -05:00
Wes Lambert ed8adcae5a add files back 2020-03-06 17:28:05 +00:00
weslambertandGitHub 1b667b9cb9 Merge pull request #400 from Security-Onion-Solutions/fix/node_webhook 
Fix/node webhook
 2020-03-06 11:17:40 -05:00
Wes Lambert 6af6d7f5b6 fix typo 2020-03-06 16:17:04 +00:00
Wes Lambert 627d89c481 fix webhook 2020-03-06 16:16:02 +00:00
weslambertandGitHub 08c16aaf67 Merge pull request #399 from Security-Onion-Solutions/fix/node_scripts 
add Node scripts
 2020-03-06 08:48:17 -05:00
Wes Lambert 0bf125e88e add Node scripts 2020-03-06 13:47:21 +00:00
weslambertandGitHub 162bbaebb6 Merge pull request #398 from Security-Onion-Solutions/feature/nodered 
Feature/nodered
 2020-03-06 08:32:32 -05:00
Wes Lambert 19cff23a2b restructure files 2020-03-06 13:14:52 +00:00
Wes Lambert 8bac9118fb add flows 2020-03-06 13:13:34 +00:00
Wes Lambert 32f8d7c793 update init 2020-03-06 13:11:00 +00:00
weslambertandGitHub b0b3211f02 Merge pull request #397 from Security-Onion-Solutions/fix/zeek-file-extraction 
Fix/zeek file extraction
 2020-03-05 10:50:16 -05:00
Wes Lambert 73cbadfe5c add complete directory to extracted 2020-03-05 15:49:22 +00:00
Wes Lambert ee611d44cf update file extraction script 2020-03-05 15:48:28 +00:00
weslambertandGitHub 478b14c488 Merge pull request #395 from Security-Onion-Solutions/fix/zeek_extracted 
Fix/zeek extracted
 2020-03-03 17:41:58 -05:00
Wes Lambert a0522943f7 fix path 2020-03-03 22:40:46 +00:00
Wes Lambert a8a93260a9 add file extraction 2020-03-03 22:40:06 +00:00
weslambertandGitHub 84b29839d8 Merge pull request #394 from Security-Onion-Solutions/config_cleanup 
Config cleanup
 2020-03-03 16:21:54 -05:00
Wes Lambert b1203cfb9f add initial Strelka ingest config 2020-03-03 21:20:45 +00:00
Wes Lambert b75bd35bc2 remove Strelka from LS PL 2020-03-03 21:19:54 +00:00
weslambertandGitHub 02cf44f4a5 Merge pull request #393 from Security-Onion-Solutions/cleanup/more_eval_ls_cleanup 
cleanup default config files
 2020-03-03 13:04:58 -05:00
Wes Lambert 3fbb81f6d1 cleanup default config files 2020-03-03 18:03:45 +00:00
weslambertandGitHub 12ada0c127 Merge pull request #391 from Security-Onion-Solutions/fix/strelka_init 
Update Strelka init
 2020-03-02 17:16:59 -05:00
Wes Lambert 4939884d93 Update Strelka init 2020-03-02 22:15:55 +00:00
weslambertandGitHub 00adb06d7c Merge pull request #390 from Security-Onion-Solutions/ls_config_cleanup 
Ls config cleanup
 2020-03-02 15:04:08 -05:00
Wes Lambert bbebc4fc9b Add src/dst objects and Bro template 2020-03-02 20:02:39 +00:00
Wes Lambert 880c5abe6b prune default loaded configs for Eval Mode 2020-03-02 19:58:46 +00:00
weslambertandGitHub 80a23f99fa Merge pull request #389 from Security-Onion-Solutions/ecs_prep 
ecs prep
 2020-03-02 14:13:37 -05:00
Wes Lambert ec6638a276 src/dst ip/port fields to ECS 2020-03-02 19:10:18 +00:00
Wes Lambert e4fee51ed6 Change Bro Files source to file_source 2020-03-02 19:09:24 +00:00
Wes Lambert 9eb5a9be3a Begin switch to ECS for Suricata 2020-03-02 19:07:40 +00:00
weslambertandGitHub cc76699a2e Merge pull request #375 from Security-Onion-Solutions/strelka_config 
remove source
 2020-02-25 13:47:56 -05:00
Wes Lambert 5d81bf3204 remove source 2020-02-25 12:36:35 +00:00
weslambertandGitHub 38b856b2b0 Merge pull request #368 from Security-Onion-Solutions/fix/more_template_fixes 
More template fixes
 2020-02-20 11:46:41 -05:00
weslambertandGitHub fc9786e541 Change template name 2020-02-20 11:46:15 -05:00
weslambertandGitHub 6945cbb843 Change template name 2020-02-20 11:45:50 -05:00
weslambertandGitHub 3303992685 Merge pull request #367 from Security-Onion-Solutions/fix/template_fix 
Fix template name
 2020-02-20 11:20:48 -05:00
weslambertandGitHub 30a1197b44 Rename template to avoid duplication under different name 2020-02-20 11:20:06 -05:00
weslambertandGitHub 82dac03199 Merge pull request #360 from Security-Onion-Solutions/feature/nodered 
Experimental: Node-RED
 2020-02-18 00:12:01 -05:00
Wes Lambert de6efffd95 Experimental: Node-RED 2020-02-18 05:04:51 +00:00
weslambertandGitHub 3eb34d9926 Merge pull request #359 from Security-Onion-Solutions/feature/strelka_ls 
Add initial/basic Strelka config
 2020-02-17 21:47:32 -05:00
Wes Lambert 50fcf8307f Add initia/basic Strelka config 2020-02-18 02:46:31 +00:00
weslambertandGitHub 4d98670fac Merge pull request #358 from Security-Onion-Solutions/fix/strelka_config 
Fix/strelka config
 2020-02-17 16:16:16 -05:00
Wes Lambert 64166f96a1 Ensure correct template is used 2020-02-17 21:15:11 +00:00
Wes Lambert 8d9ff4428b Update Strelka LS config 2020-02-17 21:12:25 +00:00
weslambertandGitHub f8d162ac5f Merge pull request #349 from Security-Onion-Solutions/hotfix/wazuh_archive_path 
Fix Wazuh archives path
 2020-02-13 13:48:45 -05:00
Wes Lambert 11319362c4 Fix Wazuh archives path 2020-02-13 18:47:45 +00:00
weslambertandGitHub 15533b7fac Merge pull request #336 from Security-Onion-Solutions/hotfix/wazuh 
Hotfix/wazuh
 2020-02-11 22:45:43 -05:00
Wes Lambert e76dc73ea6 change Wazuh install order 2020-02-12 03:44:20 +00:00
Wes Lambert 718dacf29a update Wazuh order 2020-02-12 03:37:56 +00:00
Wes Lambert 0344ea7878 update Wazuh path 2020-02-12 03:34:12 +00:00
weslambertandGitHub bb4a428dda Merge pull request #334 from Security-Onion-Solutions/hotfix/wazuh_data_path 
update Wazuh data paths
 2020-02-11 17:18:06 -05:00
Wes Lambert 41db668af6 update Wazuh data paths 2020-02-11 22:16:25 +00:00
weslambertandGitHub 6a70511cc9 Merge pull request #330 from Security-Onion-Solutions/hotfix/wazuh_paths 
update Wazuh paths
 2020-02-11 08:54:12 -05:00
Wes Lambert 0994f598c7 update Wazuh paths 2020-02-11 13:45:28 +00:00
weslambertandGitHub 776d5c3fcc Merge pull request #328 from Security-Onion-Solutions/hotfix/wazuh_config 
dont manage config
 2020-02-10 16:23:18 -05:00
Wes Lambert 76305d42fc dont manage config 2020-02-10 21:21:22 +00:00
weslambertandGitHub 419493e52e Merge pull request #327 from Security-Onion-Solutions/hotfix/wazuh_dir 
change wazuh dir
 2020-02-10 15:58:04 -05:00
Wes Lambert fbeba98af8 change wazuh dir 2020-02-10 20:56:03 +00:00
weslambertandGitHub aeec5563eb Merge pull request #309 from Security-Onion-Solutions/fix/redis_conf 
Remove Redis config from eval PL
 2020-02-05 15:36:04 -05:00
Wes Lambert ec11b9ea25 Remove Redis config from eval PL 2020-02-05 20:34:32 +00:00
Wes Lambert 3277ca185e Update Zeek config 2020-01-29 22:09:32 +00:00
weslambertandGitHub eba02ef3b4 Merge pull request #279 from Security-Onion-Solutions/features/heavynode 
Features/heavynode
 2020-01-29 17:07:00 -05:00
Wes Lambert aa3fc72565 Change bro to zeek 2020-01-29 18:56:21 +00:00
Wes Lambert f187180509 change bro user to zeek 2020-01-29 18:50:09 +00:00
Wes Lambert ef83d812d2 Set IP 2020-01-29 17:41:56 +00:00
weslambertandGitHub 2a5d62e3f2 Merge pull request #272 from Security-Onion-Solutions/TOoSmOotH-patch-1 
Update filebeat.yml
 2020-01-28 22:20:58 -05:00
weslambertandGitHub 101c2a93d1 Merge pull request #269 from Security-Onion-Solutions/feature/so-status 
feature/so-status
 2020-01-28 22:13:47 -05:00
weslambertandGitHub 8ba3b07c5e Merge pull request #271 from Security-Onion-Solutions/feature/bpf-suricata-fix 
Suricata  - bpf hotfix
 2020-01-28 22:13:20 -05:00
Wes Lambert 48ebc5e2e3 Fix data checks 2020-01-29 01:13:40 +00:00
Wes Lambert 5e0299e7bb Add PCAP stop|start|restart scripts 2020-01-29 01:11:22 +00:00
Wes Lambert 41e5c6ae90 Add data deletion scripts 2020-01-29 00:57:58 +00:00
Wes Lambert 8b415b9db4 Update config.yaml for Elastalert shard/replica changes 2020-01-28 23:55:06 +00:00
Wes Lambert b92cceb986 Fix order of static add 2020-01-28 19:44:56 +00:00
Wes Lambert c22753a8fb Don't restart when running whitelist script 2020-01-28 19:42:59 +00:00
Wes Lambert 38f42eafa5 Add Features enable script 2020-01-28 15:02:50 +00:00