CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-09-21 15:14:27 +02:00
Code Issues Packages Projects Releases Wiki Activity
8,463 Commits 39 Branches 130 Tags
a2680fad0aa1701708f73ce9bbe3cb8ff79994de
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Josh Brower 22eb82e950 Merge pull request #5566 from Security-Onion-Solutions/feature/disable_services 
Add support for disabling Zeek and Suricata
 2021-09-17 14:18:03 -04:00
Josh Brower 4d307c53e8 Add support for disabling Zeek and Suricata 2021-09-17 13:01:50 -04:00
Josh Brower c06668c68e Merge pull request #5527 from Security-Onion-Solutions/feature/so-import-evtx 
Feature/so import evtx
 2021-09-15 14:17:15 -04:00
Josh Brower a75238bc3f so-import-evtx - fix ingest formatting 2021-09-15 14:13:16 -04:00
Josh Brower ac417867ed so-import-evtx - final fixes 2021-09-15 14:06:08 -04:00
Josh Brower 1d905124d3 Merge pull request #5519 from Security-Onion-Solutions/fix/fleet-link 
Fix Fleet Link Logic
 2021-09-15 09:30:21 -04:00
Josh Brower e0a289182f Fix Fleet Link Logic 2021-09-15 09:28:23 -04:00
Josh Brower 4b7667d87f Merge pull request #5508 from Security-Onion-Solutions/fix/fleet-link 
Fleet SA - SOC Link Fix
 2021-09-14 13:29:20 -04:00
Josh Brower 74b0b365bd Fleet SA - SOC Link Fix 2021-09-14 13:23:07 -04:00
Josh Brower 0b0d508585 so-import-evtx - tweaks 2021-09-14 12:01:14 -04:00
Josh Brower 7b93f355e2 so-import-evtx - timestamp extraction 2021-08-25 15:17:19 -04:00
Josh Brower ef650c6ee6 Merge pull request #5235 from Security-Onion-Solutions/feature/so-playbook-import 
Initial version so-playbook-import
 2021-08-24 10:40:07 -04:00
Josh Brower aa420b914b Initial version so-playbook-import 2021-08-20 16:27:09 -04:00
Josh Brower 130ce34686 Merge pull request #4578 from Security-Onion-Solutions/fix/esAlerter 
esalerter ES creds fix
 2021-06-21 11:08:59 -04:00
Josh Brower 591ef540a6 esalerter ES creds fix 2021-06-21 10:50:09 -04:00
Josh Brower 4a109d6af1 Merge pull request #4299 from Security-Onion-Solutions/feature/so-pcap-pull 
Feature/so-pcap-export
 2021-05-26 09:59:45 -04:00
Josh Brower ed249600d3 Merge remote-tracking branch 'remotes/origin/dev' into feature/so-pcap-pull 2021-05-26 09:52:58 -04:00
Josh Brower 0187c9d6df Adds so-pcap-export 2021-05-26 09:51:37 -04:00
Josh Brower 23b4327c28 Merge pull request #4072 from petiepooo/fix-sleep 
fix 5-second sleep
 2021-05-06 12:48:34 -04:00
Josh Brower 94352c212f Fix so-playbook-sync 2021-04-22 13:26:41 -04:00
Josh Brower 8f37b6b73b Make sure VIM is installed with correct settings 2021-04-22 09:35:42 -04:00
Josh Brower 2b06223d7c Merge pull request #3856 from Security-Onion-Solutions/feature/osquery-ingest-timestamp 
Differentiate between event & ingest timestamp
 2021-04-13 13:00:52 -04:00
Josh Brower 7cbeed985a Differentiate between event & ingest timestamp 2021-04-13 12:55:40 -04:00
Josh Brower 2fa01c9386 Merge pull request #3845 from Security-Onion-Solutions/fix/wazuh-wel-alerts 
Fix Wazuh WEL Shipping
 2021-04-12 15:22:57 -04:00
Josh Brower cf4de255ec Fix Wazuh WEL Shipping 2021-04-12 15:18:18 -04:00
Josh Brower 2b86241450 Merge pull request #3717 from Security-Onion-Solutions/fix/playbook-timestamps 
Fix Playbook Alert timestamps
 2021-03-31 15:47:11 -04:00
Josh Brower ef98445560 Fix Playbook Alert timestamps 2021-03-31 15:44:41 -04:00
Josh Brower 209d348108 Merge pull request #3688 from Security-Onion-Solutions/fix/playbook-sync 
Fix sensor cleanup & playbook sync scripts
 2021-03-31 11:59:27 -04:00
Josh Brower 679925ebd9 Fix sensor cleanup & playbook sync scripts 2021-03-30 13:29:56 -04:00
Josh Brower 2425355680 Fix https Playbook Alerter 2021-03-19 16:38:33 -04:00
Josh Brower 9d533e5db0 Merge pull request #3542 from Security-Onion-Solutions/fix/fleet-custom-hostname 
Fix Fleet Custom Hostname Reactor
 2021-03-19 08:21:30 -04:00
Josh Brower d020f1d1a1 Fix Fleet Custom Hostname Reactor 2021-03-19 08:15:47 -04:00
Josh Brower 77b8aecfd9 add so-kibana-space-defaults 2021-03-18 15:40:12 -04:00
Josh Brower 8fd3f102f1 Merge pull request #3509 from Security-Onion-Solutions/fix/kibana-space-defaults 
Add space defaults script
 2021-03-17 15:55:11 -04:00
Josh Brower 7583593152 Add space defaults scripot 2021-03-17 15:47:36 -04:00
Josh Brower d21abd9693 Merge pull request #3482 from Security-Onion-Solutions/feature/revert-livequery-hunt 
Temp revert Fleet Live Query to Hunt
 2021-03-17 08:29:28 -04:00
Josh Brower bba9913be1 Temp revert Fleet Live Query to Hunt 2021-03-17 08:25:25 -04:00
Josh Brower b56434aea1 Merge pull request #3470 from Security-Onion-Solutions/feature/disable-features-ui 
Feature/disable certain features in Kibana UI
 2021-03-16 14:00:21 -04:00
Josh Brower abd4f92088 Cleanup curl output 2021-03-16 13:53:28 -04:00
Josh Brower c855e0a55a Disable certain Features within the default space 2021-03-16 13:48:13 -04:00
Josh Brower 7b748128ea Merge pull request #3462 from Security-Onion-Solutions/delta 
Fixes IP & Port mappings
 2021-03-16 12:05:23 -04:00
Josh Brower 4d6cac4a2a Merge remote-tracking branch 'remotes/origin/dev' into delta 2021-03-16 11:57:17 -04:00
Josh Brower 71ae5b60ea Update Sigmac mappings and config for IPs and ports 2021-03-16 09:32:40 -04:00
Josh Brower 44c75122ed Update Sigmac mappings and config for IPs and ports 2021-03-16 09:05:35 -04:00
Josh Brower 5fe025318b Update Sigmac mappings and config for IPs and ports 2021-03-15 15:53:00 -04:00
Josh Brower 00da549430 Merge pull request #3358 from Security-Onion-Solutions/delta 
FEATURE: Initial support for viewing Osquery Live Query results in Hunt
 2021-03-09 09:18:57 -05:00
Josh Brower fe8788c09a Merge remote-tracking branch 'remotes/origin/dev' into delta 2021-03-08 12:56:47 -05:00
Josh Brower 19b3c7bb07 Merge pull request #3339 from Security-Onion-Solutions/feature/live_query-hunt 
Feature/live query hunt
 2021-03-08 08:31:25 -05:00
Josh Brower 548f67ca6f Initial support for Live Queries in Hunt 2021-03-04 18:21:13 -05:00
Josh Brower 45f626887d Merge pull request #3153 from Security-Onion-Solutions/bugfix/so-playbook-sigmarefresh 
Fix so-playbook-sigma-refresh
 2021-02-26 08:36:36 -05:00
Josh Brower 5678e66b39 Fix so-playbook-sigma-refresh 2021-02-26 08:33:24 -05:00
Josh Brower b8137214e4 Initial Support - Live Query to Hunt 2021-02-26 08:08:09 -05:00
Josh Brower a7eb3cd38d Add so-playbook-sigma-refresh 2021-02-23 15:43:09 -05:00
Josh Brower 122e34b69c Configure fleet result.log to rotate 2021-02-23 10:06:24 -05:00
Josh Brower 5ca3dc492c Merge pull request #3061 from Security-Onion-Solutions/foxtrot 
Fix Playbook Fields & Mappings
 2021-02-21 09:40:59 -05:00
Josh Brower 046cc0fbb0 Merge pull request #3052 from Security-Onion-Solutions/feature/sigma-tweaks 
Feature/sigma tweaks
 2021-02-19 15:16:34 -05:00
Josh Brower 8c69e19419 Add sigma refresh script 2021-02-19 15:14:37 -05:00
Josh Brower 2a324eac32 Add sigma refresh script 2021-02-19 15:12:55 -05:00
Josh Brower b5087b815a Merge pull request #3002 from Security-Onion-Solutions/feature/sigma-tweaks 
Update .security analyzer
 2021-02-17 16:38:22 -05:00
Josh Brower d2a74c80e2 Update .security analyzer 2021-02-17 16:37:31 -05:00
Josh Brower 741f674a4c Merge pull request #3001 from Security-Onion-Solutions/dev 
Dev
 2021-02-17 16:36:49 -05:00
Josh Brower d277bf6d05 Merge pull request #2749 from Security-Onion-Solutions/bugfix/osquery-wel-parsing 
Update Osquery Windows Eventlog Parsing
 2021-01-27 09:17:17 -05:00
Josh Brower 13ab4c66eb Update Osquery Windows Eventlog Parsing 2021-01-27 09:15:54 -05:00
Josh Brower 5719b12968 Merge pull request #2373 from Security-Onion-Solutions/bugfix/so-suricata-testrule 
Fix so-suricata-testrule
 2020-12-17 11:08:26 -05:00
Josh Brower 73ad89f4ba Fix so-suricata-testrule 2020-12-17 11:05:57 -05:00
Josh Brower efe44323cb Merge pull request #2346 from Security-Onion-Solutions/bugfix/fleet-patch 
Swap localhost for 127.0.0.1
 2020-12-14 15:49:58 -05:00
Josh Brower 73d23e6d17 Revert "Initial support - Playbook Overrides" 
This reverts commit 8915e49288.
 2020-12-12 10:07:30 -05:00
Josh Brower 8faf80a03b Revert "Playbook db updates" 
This reverts commit 35be785f7a.
 2020-12-12 10:07:23 -05:00
Josh Brower 66495e6bae Swap localhost for 127.0.0.1 2020-12-11 17:38:42 -05:00
Josh Brower f34a10a986 Merge pull request #2259 from Security-Onion-Solutions/feature/playbook-updates2 
Playbook db updates
 2020-12-08 10:36:42 -05:00
Josh Brower 35be785f7a Playbook db updates 2020-12-08 10:35:50 -05:00
Josh Brower 5f756549b1 Merge pull request #2254 from Security-Onion-Solutions/feature/playbook-updates2 
Initial support - Playbook Overrides
 2020-12-07 22:30:50 -05:00
Josh Brower 8915e49288 Initial support - Playbook Overrides 2020-12-07 22:28:58 -05:00
Josh Brower 35ea6c36d2 Merge pull request #2247 from Security-Onion-Solutions/feature/so-suricata-ruletest 
so-suricata-testrule initial commit
 2020-12-07 15:12:20 -05:00
Josh Brower 134d9bc89a so-suricata-testrule initial commit 2020-12-06 17:08:11 -05:00
Josh Brower c303cdff09 Merge pull request #2150 from Security-Onion-Solutions/bugfix/fleet-standalone 
Fleet Fixes - mysql race condition
 2020-11-30 18:06:30 -05:00
Josh Brower e7a927188b Fleet Fixes - mysql race condition 2020-11-30 17:28:11 -05:00
Josh Brower 8e9458ca84 Merge pull request #2149 from Security-Onion-Solutions/bugfix/fleet-standalone 
Fix Fleet setup errors
 2020-11-30 12:06:36 -05:00
Josh Brower 5d2acf4011 Fix Fleet setup errors 2020-11-30 12:06:02 -05:00
Josh Brower 704f024441 Merge pull request #2146 from Security-Onion-Solutions/bugfix/fleet-standalone 
Fleet standalone - fix event
 2020-11-30 10:33:05 -05:00
Josh Brower 65d8005629 Fleet standalone - fix event 2020-11-30 10:32:39 -05:00
Josh Brower 7fddf99648 Merge pull request #2128 from Security-Onion-Solutions/bugfix/fleet-standalone 
Fix Fleet setup errors
 2020-11-27 13:59:19 -05:00
Josh Brower f52c30bff5 Fix Fleet setup errors 2020-11-27 13:58:41 -05:00
Josh Brower 19a33c5c2a Merge pull request #2126 from Security-Onion-Solutions/bugfix/fleet-standalone 
Bugfix/fleet standalone
 2020-11-27 11:45:25 -05:00
Josh Brower 19b36f0468 Fleet standalone redirect fix 2020-11-27 11:43:51 -05:00
Josh Brower 95a664e12a Merge pull request #2103 from Security-Onion-Solutions/bugfix/fleet-standalone 
Fleet standalone fix
 2020-11-25 14:09:27 -05:00
Josh Brower 38afd67108 Fleet standalone fix 2020-11-25 14:08:30 -05:00
Josh Brower b79e1c3225 Merge pull request #1987 from Security-Onion-Solutions/bugfix/playbookdb-user 
playbook mysqluser
 2020-11-18 20:48:49 -05:00
Josh Brower d3065005ca playbook mysqluser 2020-11-18 20:48:02 -05:00
Josh Brower 3d0003555a Merge pull request #1980 from Security-Onion-Solutions/bugfix/soup-regen-osquery 
SOUP - Regen Osquery Packages
 2020-11-18 14:56:23 -05:00
Josh Brower 0830f63c4e SOUP - Regen Osquery Packages 2020-11-18 14:55:14 -05:00
Josh Brower cc4357d567 Merge pull request #1954 from Security-Onion-Solutions/bugfix/ingest-mappings 
Cleanup & fix sysmon pid ingest
 2020-11-17 09:05:31 -05:00
Josh Brower 1908a68330 Cleanup & fix sysmon pid ingest 2020-11-14 16:19:23 -05:00
Josh Brower adec9ad48b Merge pull request #1916 from Security-Onion-Solutions/feature/so-playbook-reset 
Feature/so playbook reset
 2020-11-13 11:21:50 -05:00
Josh Brower 8b3262ce1b Add so-playbook-reset 2020-11-13 11:20:39 -05:00
Josh Brower 844ffe8fdf nest case_template 2020-10-21 09:58:31 -04:00
Josh Brower 1e14d66f54 Add case_template field to Playbook alerts 2020-10-21 08:59:26 -04:00
Josh Brower 2e012432b4 Merge pull request #1455 from Security-Onion-Solutions/feature/training-req 
Write out nested json
 2020-10-05 15:34:43 -04:00
Josh Brower de9ace62d4 Write out nested json 2020-10-05 15:34:02 -04:00
Josh Brower 7b05cf4266 Merge pull request #1443 from Security-Onion-Solutions/feature/training-req 
Feature/training req
 2020-10-04 21:37:03 -04:00