CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-09 10:42:54 +01:00
Code Issues Packages Projects Releases Wiki Activity
2,977 Commits 25 Branches 119 Tags
9b8cf3845a4fc5eb33d657a8af4458b99a048a4f
Commit Graph

2977 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Wes Lambert
9b8cf3845a update Kibana config export 2020-05-16 15:34:33 +00:00
Wes Lambert
89527c533a update Kibana config export 2020-05-16 15:33:20 +00:00
weslambert
5d7c020223 Merge pull request #709 from Security-Onion-Solutions/fix/kibana_config 
update Kibana config
 2020-05-16 11:09:45 -04:00
Wes Lambert
bd5cc35fc0 update Kibana config 2020-05-16 15:07:33 +00:00
weslambert
95141574d4 Merge pull request #707 from Security-Onion-Solutions/fix/dhcp_parsing 
Fix/dhcp parsing
 2020-05-16 11:04:13 -04:00
Wes Lambert
4b91ade2e8 fix message_types one more time :) 2020-05-16 15:03:27 +00:00
Wes Lambert
9845ee189c fix message_types for real 2020-05-16 15:02:41 +00:00
Wes Lambert
f0662eed48 remark Beat tag for now 2020-05-16 14:59:41 +00:00
Wes Lambert
6a2ddd4ef6 move to DNS 2020-05-16 14:58:51 +00:00
Wes Lambert
66c89abbc6 Fix DHCP message types 2020-05-16 14:58:06 +00:00
William Wernert
5619768212 [fix] Use hostname or ip in Kibana based on setup 
Fixes #603
 2020-05-15 20:40:35 -04:00
Doug Burks
cc7a244d0b Create zeek.dns.tld 
https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/599
 2020-05-15 15:32:25 -04:00
Doug Burks
60d2a0818b Add to zeek.dns and have it send to zeek.dns.tld 
https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/599
 2020-05-15 15:31:17 -04:00
Josh Brower
e02bf2ebb5 Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion-saltstack into dev 2020-05-15 15:05:47 -04:00
Josh Brower
9d4536dcbe osquery ingest parsing update 2020-05-15 15:05:21 -04:00
Doug Burks
fc883745e5 add fields to conn log 
https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/599
 2020-05-15 15:02:02 -04:00
Doug Burks
58d59c6844 use null safe operator for source.port and destination.port 
https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/594
 2020-05-15 14:58:21 -04:00
Josh Brower
4737c0da3f Merge pull request #702 from Security-Onion-Solutions/bugfix/fleet-deployment 
Fleet Setup - Restart nginx
 2020-05-15 14:48:18 -04:00
Josh Brower
6b4822d98d Fleet Setup - Restart nginx 2020-05-15 14:47:19 -04:00
weslambert
baf1de4b34 Merge pull request #700 from Security-Onion-Solutions/fix/common_type_removal 
remove type field
 2020-05-15 14:37:44 -04:00
William Wernert
87afedae82 [fix] Menu spelling fixes 2020-05-15 14:33:37 -04:00
Wes Lambert
03805bd6e2 remove type field 2020-05-15 18:29:49 +00:00
weslambert
59ece8fd29 Merge pull request #699 from Security-Onion-Solutions/fix/dce_rpc_parsing 
update DCE/RPC parsing
 2020-05-15 14:20:37 -04:00
Wes Lambert
5d5f5cf105 update DCE/RPC parsing 2020-05-15 18:19:05 +00:00
Mike Reeves
7e1016ff07 Update firewall rules to allow minions to connect 2020-05-15 13:59:07 -04:00
Mike Reeves
10896c1add Update Release Notes 2020-05-15 13:41:51 -04:00
Mike Reeves
d04f58a27e Update README.md 2020-05-15 13:10:52 -04:00
William Wernert
2f4ce40095 [fix] Change verbiage to indicate the master vs open is only for OS packages 2020-05-15 11:40:37 -04:00
William Wernert
692d1d72a3 [fix] Change verbiage to indicate the master vs open is only for OS packages 2020-05-15 11:39:59 -04:00
William Wernert
c9614f9baf [fix] Only add user to SOC on masters 2020-05-15 11:20:33 -04:00
William Wernert
cfec4eb5a2 Merge branch 'dev' of github.com:Security-Onion-Solutions/securityonion-saltstack into dev 2020-05-15 10:52:33 -04:00
William Wernert
b37b993eea [fix] Don't say we're downloading containers on iso install 2020-05-15 10:43:20 -04:00
William Wernert
eeb0579acb [fix] Don't change settings during whiptail menus on ISO 2020-05-15 10:42:52 -04:00
William Wernert
b9456dcc98 [fix] Set output dir for docker registry untar 2020-05-15 10:42:13 -04:00
Doug Burks
d6d27a2861 avoid duplicate entries in _cluster/settings for mastersearch 
https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/696
 2020-05-15 10:29:24 -04:00
Doug Burks
e41c1b6755 fix typo 2020-05-14 16:57:34 -04:00
Josh Patterson
09368b05f7 Merge pull request #688 from Security-Onion-Solutions/issue/140 
rename PROD to STANDALONE
 2020-05-14 15:06:38 -04:00
m0duspwnens
5f4ec41497 rename PROD to STANDALONE 2020-05-14 15:05:37 -04:00
Josh Patterson
989dc418a8 Merge pull request #686 from Security-Onion-Solutions/quickfix/sostatus 
rename so-aptcacherng for so-status
 2020-05-14 14:12:24 -04:00
m0duspwnens
9667f8b853 rename so-aptcacherng for so-status 2020-05-14 14:11:06 -04:00
Doug Burks
34d9882987 fix Wazuh and Sysmon queries 2020-05-14 13:47:01 -04:00
Josh Patterson
8cd3d0c16c Merge pull request #684 from Security-Onion-Solutions/issue/682 
run so-elasticsearch-pipelines only on changes
 2020-05-14 13:41:07 -04:00
m0duspwnens
7f464af5fa run so-elasticsearch-pipelines only on changes - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/682 2020-05-14 13:39:19 -04:00
William Wernert
02cd70c2e0 Merge branch 'dev' of github.com:Security-Onion-Solutions/securityonion-saltstack into dev 2020-05-14 12:33:34 -04:00
William Wernert
80cd408821 [fix] Only install nc, not full nmap 2020-05-14 12:33:28 -04:00
Mike Reeves
dbef2e2832 Update soc.json 2020-05-14 11:56:18 -04:00
William Wernert
5078ea8692 Merge branch 'dev' of github.com:Security-Onion-Solutions/securityonion-saltstack into dev 2020-05-14 11:50:22 -04:00
William Wernert
2642968089 [fix] Correct wazuh + suricata pillar placement 2020-05-14 11:50:16 -04:00
Mike Reeves
6991900ceb Update Query for geo 2020-05-14 11:34:10 -04:00
Doug Burks
5c3e7acc6d change resp_mime_types to file.resp_mime_types 2020-05-14 11:21:32 -04:00