  weslambertandGitHub
|
0d3280feb7
|
Merge pull request #432 from Security-Onion-Solutions/fix/template
fix strelka pattern
|
2020-03-18 09:52:24 -04:00 |
|
|
Wes Lambert
|
29a4932785
|
fix strelka pattern
|
2020-03-18 13:47:22 +00:00 |
|
|
weslambertandGitHub
|
597f746ccb
|
Merge pull request #431 from Security-Onion-Solutions/fix/elastic_changes
Fix/elastic changes
|
2020-03-17 17:32:05 -04:00 |
|
|
Wes Lambert
|
4eac285fd9
|
change soversion
|
2020-03-17 21:31:19 +00:00 |
|
|
Wes Lambert
|
70f109af86
|
elastic changes
|
2020-03-17 21:29:28 +00:00 |
|
|
weslambertandGitHub
|
bfefbe247f
|
Merge pull request #430 from Security-Onion-Solutions/kibana_7_dark_mode
UI Dark Mode
|
2020-03-17 12:19:56 -04:00 |
|
|
weslambertandGitHub
|
272649f330
|
UI Dark Mode
|
2020-03-17 12:19:27 -04:00 |
|
|
weslambertandGitHub
|
caeef9c903
|
Merge pull request #429 from Security-Onion-Solutions/kibana_7
Update config.json
|
2020-03-17 11:51:29 -04:00 |
|
|
weslambertandGitHub
|
113fbdb863
|
Update config.json
|
2020-03-17 11:50:53 -04:00 |
|
|
weslambertandGitHub
|
367626c65e
|
Merge pull request #428 from Security-Onion-Solutions/more_ecs
More ecs
|
2020-03-17 11:23:19 -04:00 |
|
|
Wes Lambert
|
a5ff21c528
|
remove agent field for non-Wazuh logs
|
2020-03-17 15:20:46 +00:00 |
|
|
Wes Lambert
|
b80e7fedcb
|
remove agent field for non-Wazuh logs
|
2020-03-17 15:20:31 +00:00 |
|
|
Wes Lambert
|
488858f8bc
|
remove beat field removal
|
2020-03-17 15:19:08 +00:00 |
|
|
Wes Lambert
|
8bea56eccf
|
change prospectors to inputs
|
2020-03-17 15:17:52 +00:00 |
|
|
Wes Lambert
|
faea67c9cf
|
update env vars
|
2020-03-17 15:17:13 +00:00 |
|
|
Wes Lambert
|
5ed3dbff39
|
Fix template name
|
2020-03-17 15:15:01 +00:00 |
|
|
weslambertandGitHub
|
85f5c53b51
|
Merge pull request #425 from Security-Onion-Solutions/fix/template_script
Fix/template script
|
2020-03-14 20:36:17 -04:00 |
|
|
Wes Lambert
|
81da44b85d
|
fix Logstash Eval SLS
|
2020-03-15 00:32:29 +00:00 |
|
|
Wes Lambert
|
26c4d453d3
|
Add ES templates script
|
2020-03-15 00:30:59 +00:00 |
|
|
weslambertandGitHub
|
775066489a
|
Merge pull request #424 from Security-Onion-Solutions/ecs_parsing
ECS parsing
|
2020-03-14 08:11:15 -04:00 |
|
|
Wes Lambert
|
85c1873f4d
|
switch logging to error
|
2020-03-14 12:10:06 +00:00 |
|
|
Wes Lambert
|
b6ba8e483d
|
update ES init
|
2020-03-14 12:06:32 +00:00 |
|
|
Wes Lambert
|
d2016d3ff2
|
modify Filebeat config
|
2020-03-14 12:05:16 +00:00 |
|
|
Wes Lambert
|
c52220330b
|
modify pipelines
|
2020-03-14 12:03:32 +00:00 |
|
|
Wes Lambert
|
d48c2723ba
|
modify default templates
|
2020-03-14 12:02:52 +00:00 |
|
|
Wes Lambert
|
9fb3a47358
|
modify default templates
|
2020-03-14 12:02:42 +00:00 |
|
|
Wes Lambert
|
ffc33b15e5
|
switch to Filebeat
|
2020-03-14 12:00:17 +00:00 |
|
|
weslambertandGitHub
|
7838018e3d
|
Merge pull request #410 from Security-Onion-Solutions/feature/ECS
Feature/ecs
|
2020-03-11 08:23:22 -04:00 |
|
|
Wes Lambert
|
648b0ba790
|
remove old config
|
2020-03-11 12:14:22 +00:00 |
|
|
Wes Lambert
|
9ad16e8c71
|
upadte ingest config
|
2020-03-11 12:13:53 +00:00 |
|
|
Wes Lambert
|
f9e4d218ec
|
update config
|
2020-03-11 12:13:11 +00:00 |
|
|
Wes Lambert
|
70e78a0642
|
add renamed templates
|
2020-03-11 12:12:32 +00:00 |
|
|
Wes Lambert
|
84e54a8fae
|
update Eval pillar
|
2020-03-11 12:09:34 +00:00 |
|
|
weslambertandGitHub
|
aff51b6bb9
|
Merge pull request #407 from Security-Onion-Solutions/fix/bro_template
Fix/bro template
|
2020-03-09 09:19:37 -04:00 |
|
|
weslambertandGitHub
|
14dfec5365
|
Change to bro template
|
2020-03-09 09:18:57 -04:00 |
|
|
weslambertandGitHub
|
4a4c378327
|
Add bro template
|
2020-03-09 09:18:14 -04:00 |
|
|
weslambertandGitHub
|
47a7e025ee
|
Merge pull request #403 from Security-Onion-Solutions/fix/zeek-extract
fix typo
|
2020-03-06 13:50:36 -05:00 |
|
|
Wes Lambert
|
aeb298a818
|
fix typo
|
2020-03-06 18:49:29 +00:00 |
|
|
weslambertandGitHub
|
0f8fb7bd89
|
Merge pull request #402 from Security-Onion-Solutions/fix/node_init
fix repo name
|
2020-03-06 12:46:12 -05:00 |
|
|
Wes Lambert
|
84df1db201
|
fix repo name
|
2020-03-06 17:45:16 +00:00 |
|
|
weslambertandGitHub
|
21aa54690e
|
Merge pull request #401 from Security-Onion-Solutions/fix/node_files
add files back
|
2020-03-06 12:34:07 -05:00 |
|
|
Wes Lambert
|
ed8adcae5a
|
add files back
|
2020-03-06 17:28:05 +00:00 |
|
|
weslambertandGitHub
|
1b667b9cb9
|
Merge pull request #400 from Security-Onion-Solutions/fix/node_webhook
Fix/node webhook
|
2020-03-06 11:17:40 -05:00 |
|
|
Wes Lambert
|
6af6d7f5b6
|
fix typo
|
2020-03-06 16:17:04 +00:00 |
|
|
Wes Lambert
|
627d89c481
|
fix webhook
|
2020-03-06 16:16:02 +00:00 |
|
|
weslambertandGitHub
|
08c16aaf67
|
Merge pull request #399 from Security-Onion-Solutions/fix/node_scripts
add Node scripts
|
2020-03-06 08:48:17 -05:00 |
|
|
Wes Lambert
|
0bf125e88e
|
add Node scripts
|
2020-03-06 13:47:21 +00:00 |
|
|
weslambertandGitHub
|
162bbaebb6
|
Merge pull request #398 from Security-Onion-Solutions/feature/nodered
Feature/nodered
|
2020-03-06 08:32:32 -05:00 |
|
|
Wes Lambert
|
19cff23a2b
|
restructure files
|
2020-03-06 13:14:52 +00:00 |
|
|
Wes Lambert
|
8bac9118fb
|
add flows
|
2020-03-06 13:13:34 +00:00 |
|
|
Wes Lambert
|
32f8d7c793
|
update init
|
2020-03-06 13:11:00 +00:00 |
|
|
weslambertandGitHub
|
b0b3211f02
|
Merge pull request #397 from Security-Onion-Solutions/fix/zeek-file-extraction
Fix/zeek file extraction
|
2020-03-05 10:50:16 -05:00 |
|
|
Wes Lambert
|
73cbadfe5c
|
add complete directory to extracted
|
2020-03-05 15:49:22 +00:00 |
|
|
Wes Lambert
|
ee611d44cf
|
update file extraction script
|
2020-03-05 15:48:28 +00:00 |
|
|
weslambertandGitHub
|
478b14c488
|
Merge pull request #395 from Security-Onion-Solutions/fix/zeek_extracted
Fix/zeek extracted
|
2020-03-03 17:41:58 -05:00 |
|
|
Wes Lambert
|
a0522943f7
|
fix path
|
2020-03-03 22:40:46 +00:00 |
|
|
Wes Lambert
|
a8a93260a9
|
add file extraction
|
2020-03-03 22:40:06 +00:00 |
|
|
weslambertandGitHub
|
84b29839d8
|
Merge pull request #394 from Security-Onion-Solutions/config_cleanup
Config cleanup
|
2020-03-03 16:21:54 -05:00 |
|
|
Wes Lambert
|
b1203cfb9f
|
add initial Strelka ingest config
|
2020-03-03 21:20:45 +00:00 |
|
|
Wes Lambert
|
b75bd35bc2
|
remove Strelka from LS PL
|
2020-03-03 21:19:54 +00:00 |
|
|
weslambertandGitHub
|
02cf44f4a5
|
Merge pull request #393 from Security-Onion-Solutions/cleanup/more_eval_ls_cleanup
cleanup default config files
|
2020-03-03 13:04:58 -05:00 |
|
|
Wes Lambert
|
3fbb81f6d1
|
cleanup default config files
|
2020-03-03 18:03:45 +00:00 |
|
|
weslambertandGitHub
|
12ada0c127
|
Merge pull request #391 from Security-Onion-Solutions/fix/strelka_init
Update Strelka init
|
2020-03-02 17:16:59 -05:00 |
|
|
Wes Lambert
|
4939884d93
|
Update Strelka init
|
2020-03-02 22:15:55 +00:00 |
|
|
weslambertandGitHub
|
00adb06d7c
|
Merge pull request #390 from Security-Onion-Solutions/ls_config_cleanup
Ls config cleanup
|
2020-03-02 15:04:08 -05:00 |
|
|
Wes Lambert
|
bbebc4fc9b
|
Add src/dst objects and Bro template
|
2020-03-02 20:02:39 +00:00 |
|
|
Wes Lambert
|
880c5abe6b
|
prune default loaded configs for Eval Mode
|
2020-03-02 19:58:46 +00:00 |
|
|
weslambertandGitHub
|
80a23f99fa
|
Merge pull request #389 from Security-Onion-Solutions/ecs_prep
ecs prep
|
2020-03-02 14:13:37 -05:00 |
|
|
Wes Lambert
|
ec6638a276
|
src/dst ip/port fields to ECS
|
2020-03-02 19:10:18 +00:00 |
|
|
Wes Lambert
|
e4fee51ed6
|
Change Bro Files source to file_source
|
2020-03-02 19:09:24 +00:00 |
|
|
Wes Lambert
|
9eb5a9be3a
|
Begin switch to ECS for Suricata
|
2020-03-02 19:07:40 +00:00 |
|
|
weslambertandGitHub
|
cc76699a2e
|
Merge pull request #375 from Security-Onion-Solutions/strelka_config
remove source
|
2020-02-25 13:47:56 -05:00 |
|
|
Wes Lambert
|
5d81bf3204
|
remove source
|
2020-02-25 12:36:35 +00:00 |
|
|
weslambertandGitHub
|
38b856b2b0
|
Merge pull request #368 from Security-Onion-Solutions/fix/more_template_fixes
More template fixes
|
2020-02-20 11:46:41 -05:00 |
|
|
weslambertandGitHub
|
fc9786e541
|
Change template name
|
2020-02-20 11:46:15 -05:00 |
|
|
weslambertandGitHub
|
6945cbb843
|
Change template name
|
2020-02-20 11:45:50 -05:00 |
|
|
weslambertandGitHub
|
3303992685
|
Merge pull request #367 from Security-Onion-Solutions/fix/template_fix
Fix template name
|
2020-02-20 11:20:48 -05:00 |
|
|
weslambertandGitHub
|
30a1197b44
|
Rename template to avoid duplication under different name
|
2020-02-20 11:20:06 -05:00 |
|
|
weslambertandGitHub
|
82dac03199
|
Merge pull request #360 from Security-Onion-Solutions/feature/nodered
Experimental: Node-RED
|
2020-02-18 00:12:01 -05:00 |
|
|
Wes Lambert
|
de6efffd95
|
Experimental: Node-RED
|
2020-02-18 05:04:51 +00:00 |
|
|
weslambertandGitHub
|
3eb34d9926
|
Merge pull request #359 from Security-Onion-Solutions/feature/strelka_ls
Add initial/basic Strelka config
|
2020-02-17 21:47:32 -05:00 |
|
|
Wes Lambert
|
50fcf8307f
|
Add initia/basic Strelka config
|
2020-02-18 02:46:31 +00:00 |
|
|
weslambertandGitHub
|
4d98670fac
|
Merge pull request #358 from Security-Onion-Solutions/fix/strelka_config
Fix/strelka config
|
2020-02-17 16:16:16 -05:00 |
|
|
Wes Lambert
|
64166f96a1
|
Ensure correct template is used
|
2020-02-17 21:15:11 +00:00 |
|
|
Wes Lambert
|
8d9ff4428b
|
Update Strelka LS config
|
2020-02-17 21:12:25 +00:00 |
|
|
weslambertandGitHub
|
f8d162ac5f
|
Merge pull request #349 from Security-Onion-Solutions/hotfix/wazuh_archive_path
Fix Wazuh archives path
|
2020-02-13 13:48:45 -05:00 |
|
|
Wes Lambert
|
11319362c4
|
Fix Wazuh archives path
|
2020-02-13 18:47:45 +00:00 |
|
|
weslambertandGitHub
|
15533b7fac
|
Merge pull request #336 from Security-Onion-Solutions/hotfix/wazuh
Hotfix/wazuh
|
2020-02-11 22:45:43 -05:00 |
|
|
Wes Lambert
|
e76dc73ea6
|
change Wazuh install order
|
2020-02-12 03:44:20 +00:00 |
|
|
Wes Lambert
|
718dacf29a
|
update Wazuh order
|
2020-02-12 03:37:56 +00:00 |
|
|
Wes Lambert
|
0344ea7878
|
update Wazuh path
|
2020-02-12 03:34:12 +00:00 |
|
|
weslambertandGitHub
|
bb4a428dda
|
Merge pull request #334 from Security-Onion-Solutions/hotfix/wazuh_data_path
update Wazuh data paths
|
2020-02-11 17:18:06 -05:00 |
|
|
Wes Lambert
|
41db668af6
|
update Wazuh data paths
|
2020-02-11 22:16:25 +00:00 |
|
|
weslambertandGitHub
|
6a70511cc9
|
Merge pull request #330 from Security-Onion-Solutions/hotfix/wazuh_paths
update Wazuh paths
|
2020-02-11 08:54:12 -05:00 |
|
|
Wes Lambert
|
0994f598c7
|
update Wazuh paths
|
2020-02-11 13:45:28 +00:00 |
|
|
weslambertandGitHub
|
776d5c3fcc
|
Merge pull request #328 from Security-Onion-Solutions/hotfix/wazuh_config
dont manage config
|
2020-02-10 16:23:18 -05:00 |
|
|
Wes Lambert
|
76305d42fc
|
dont manage config
|
2020-02-10 21:21:22 +00:00 |
|
|
weslambertandGitHub
|
419493e52e
|
Merge pull request #327 from Security-Onion-Solutions/hotfix/wazuh_dir
change wazuh dir
|
2020-02-10 15:58:04 -05:00 |
|
|
Wes Lambert
|
fbeba98af8
|
change wazuh dir
|
2020-02-10 20:56:03 +00:00 |
|
|
weslambertandGitHub
|
aeec5563eb
|
Merge pull request #309 from Security-Onion-Solutions/fix/redis_conf
Remove Redis config from eval PL
|
2020-02-05 15:36:04 -05:00 |
|