Commit Graph

2151 Commits

Author SHA1 Message Date
Wes Lambert
880c5abe6b prune default loaded configs for Eval Mode 2020-03-02 19:58:46 +00:00
weslambert
80a23f99fa Merge pull request #389 from Security-Onion-Solutions/ecs_prep
ecs prep
2020-03-02 14:13:37 -05:00
Wes Lambert
ec6638a276 src/dst ip/port fields to ECS 2020-03-02 19:10:18 +00:00
Wes Lambert
e4fee51ed6 Change Bro Files source to file_source 2020-03-02 19:09:24 +00:00
Wes Lambert
9eb5a9be3a Begin switch to ECS for Suricata 2020-03-02 19:07:40 +00:00
Josh Patterson
f40b23e4b2 Merge pull request #376 from Security-Onion-Solutions/issue/326
Issue/326
2020-02-26 16:41:07 -05:00
m0duspwnens
847e6d2d13 create pipelines directory 2020-02-26 16:38:47 -05:00
m0duspwnens
a3e48f0315 logstash cleanup and conflict resolution - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/326 2020-02-26 10:58:39 -05:00
m0duspwnens
54e4c40c2a logstash cleanup and conflict resolution - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/326 2020-02-26 10:26:50 -05:00
m0duspwnens
0c4973ad77 pillarize logstash config,parsers,templates and docker port bindings 2020-02-25 17:44:32 -05:00
weslambert
cc76699a2e Merge pull request #375 from Security-Onion-Solutions/strelka_config
remove source
2020-02-25 13:47:56 -05:00
Wes Lambert
5d81bf3204 remove source 2020-02-25 12:36:35 +00:00
m0duspwnens
e2ccebd2fa resolve conflicts 2020-02-20 17:00:15 -05:00
m0duspwnens
2b34bdece9 logstash cleanup - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/326 2020-02-20 16:47:40 -05:00
weslambert
38b856b2b0 Merge pull request #368 from Security-Onion-Solutions/fix/more_template_fixes
More template fixes
2020-02-20 11:46:41 -05:00
weslambert
fc9786e541 Change template name 2020-02-20 11:46:15 -05:00
weslambert
6945cbb843 Change template name 2020-02-20 11:45:50 -05:00
weslambert
3303992685 Merge pull request #367 from Security-Onion-Solutions/fix/template_fix
Fix template name
2020-02-20 11:20:48 -05:00
weslambert
30a1197b44 Rename template to avoid duplication under different name 2020-02-20 11:20:06 -05:00
m0duspwnens
7604853c59 fix logic for logstash pipelines 2020-02-19 16:02:24 -05:00
m0duspwnens
54e94676fe fix pipelines variable 2020-02-19 14:59:39 -05:00
m0duspwnens
408b3695e0 add back deleted states to logstash state 2020-02-19 14:12:18 -05:00
m0duspwnens
c396342aea fix syntax error with new ls pipeline config 2020-02-19 13:46:52 -05:00
m0duspwnens
6a7580404d directory cleanup - logstash pipeline rework 2020-02-19 13:08:14 -05:00
Josh Brower
689ef31189 Merge pull request #361 from Security-Onion-Solutions/bugfix/bpf
bpf fix
2020-02-18 16:38:54 -05:00
Josh Brower
f9e07709f2 bpf fix 2020-02-18 16:36:20 -05:00
weslambert
82dac03199 Merge pull request #360 from Security-Onion-Solutions/feature/nodered
Experimental: Node-RED
2020-02-18 00:12:01 -05:00
Wes Lambert
de6efffd95 Experimental: Node-RED 2020-02-18 05:04:51 +00:00
weslambert
3eb34d9926 Merge pull request #359 from Security-Onion-Solutions/feature/strelka_ls
Add initial/basic Strelka config
2020-02-17 21:47:32 -05:00
Wes Lambert
50fcf8307f Add initia/basic Strelka config 2020-02-18 02:46:31 +00:00
weslambert
4d98670fac Merge pull request #358 from Security-Onion-Solutions/fix/strelka_config
Fix/strelka config
2020-02-17 16:16:16 -05:00
Wes Lambert
64166f96a1 Ensure correct template is used 2020-02-17 21:15:11 +00:00
Wes Lambert
8d9ff4428b Update Strelka LS config 2020-02-17 21:12:25 +00:00
Josh Brower
074ebe6008 Merge pull request #357 from Security-Onion-Solutions/bugfix/playbook
SOCtopus.conf quick fix RE: playbook API
2020-02-17 07:49:29 -05:00
Josh Brower
63c8515d87 SOCtopus.conf quick fix RE: playbook API 2020-02-17 07:48:54 -05:00
Josh Brower
6c37fbd020 Merge pull request #355 from Security-Onion-Solutions/feature/playbook-changes
Playbook - Schema changes & more
2020-02-14 16:40:28 -05:00
Josh Brower
240620caa3 Playbook - create play API 2020-02-14 16:38:02 -05:00
Mike Reeves
ae1fa9a7a4 Update README.md 2020-02-13 16:48:06 -05:00
Mike Reeves
61063d62c4 Merge pull request #352 from Security-Onion-Solutions/TOoSmOotH-patch-1
T oo sm oot h patch 1
2020-02-13 15:28:24 -05:00
Mike Reeves
4caedca795 Update telegraf.conf 2020-02-13 15:27:45 -05:00
Doug Burks
a1e80d8366 Merge pull request #351 from Security-Onion-Solutions/dev
last fixes
2020-02-13 15:12:12 -05:00
Mike Reeves
6f42c607f7 Update telegraf.conf 2020-02-13 15:08:00 -05:00
Mike Reeves
ae113c0b84 Merge pull request #348 from Security-Onion-Solutions/fix/patch-1
Update README - install instructions
2020-02-13 14:32:25 -05:00
weslambert
f8d162ac5f Merge pull request #349 from Security-Onion-Solutions/hotfix/wazuh_archive_path
Fix Wazuh archives path
2020-02-13 13:48:45 -05:00
Wes Lambert
11319362c4 Fix Wazuh archives path 2020-02-13 18:47:45 +00:00
Josh Brower
6920240f8e Update README - install instructions 2020-02-13 12:50:12 -05:00
Mike Reeves
9666f24e14 Update VERSION 2020-02-13 10:55:24 -05:00
Doug Burks
1fa238eb1d Merge pull request #343 from Security-Onion-Solutions/dev
Update README.md
1.1.4
2020-02-13 06:15:01 -05:00
Mike Reeves
4cf2b8c0f9 Update README.md 2020-02-12 21:11:49 -05:00
Josh Brower
3ba619b720 Merge pull request #340 from Security-Onion-Solutions/dev
Update Readme and index.html
2020-02-12 10:32:18 -05:00