Commit Graph
100 Commits
Author SHA1 Message Date
Josh BrowerandGitHub f99413c84d Merge pull request #1128 from Security-Onion-Solutions/feature/launcher-update
Osquery & WLB Parsing Update for WEL & Sysmon
2020-07-31 16:07:41 -04:00
Josh BrowerandGitHub 4d66d37ac5 Merge branch 'dev' into feature/launcher-update 2020-07-31 16:07:33 -04:00
Josh Brower d971d07720 Osquery & WLB Parsing Update for WEL & Sysmon 2020-07-31 16:06:15 -04:00
Josh BrowerandGitHub ed8d443fe5 Merge pull request #1125 from Security-Onion-Solutions/feature/launcher-update
Fleet - Update osquery config for 4.4 windows_events
2020-07-30 16:35:42 -04:00
Josh Brower 4e01ef2795 Fleet - Update osquery config for 4.4 windows_events 2020-07-30 16:34:48 -04:00
Josh BrowerandGitHub e7b9e001e1 mysql init.sls - change startup time from 2 min to 15min
Closes https://github.com/Security-Onion-Solutions/securityonion/issues/1106
2020-07-28 22:08:00 -04:00
Josh BrowerandGitHub b1c09a9b72 Typo fix - ingest parser - win.eventlogs 2020-07-28 15:23:17 -04:00
Josh BrowerandGitHub fe76f1c87c Merge pull request #1111 from Security-Onion-Solutions/feature/refactor-sysmon-parsing
initial refactor - beats/sysmon parsing
2020-07-28 11:04:13 -04:00
Josh Brower 55e60cb749 initial refactor - beats/sysmon parsing 2020-07-28 11:03:33 -04:00
Josh BrowerandGitHub 6d1ad3f2e0 Merge pull request #1038 from Security-Onion-Solutions/dev
Fix for telegraf
2020-07-20 14:38:12 -04:00
Josh BrowerandGitHub 3c6ae08d4d Merge pull request #1029 from Security-Onion-Solutions/bugfix/fleet-eval
Kibana Fleet Pivot Fix
2020-07-17 13:01:08 -04:00
Josh Brower da155b5dea Kibana Fleet Pivot Fix 2020-07-17 13:00:03 -04:00
Josh BrowerandGitHub 083e43b26b Merge pull request #1028 from Security-Onion-Solutions/bugfix/fleet-eval
Eval Ubuntu Fleet fix
2020-07-17 10:27:51 -04:00
Josh Brower 6e4eb76393 Eval Ubuntu Fleet fix 2020-07-17 10:25:48 -04:00
Josh BrowerandGitHub 442e870c16 Merge pull request #1024 from Security-Onion-Solutions/bugfix/kibana-dashboard-updates
Kibana dashboard updates
2020-07-17 08:15:33 -04:00
Josh Brower 32a6f825c2 Kibana dashboard updates 2020-07-17 08:14:37 -04:00
Josh BrowerandGitHub 4fd1daeca1 Merge pull request #1021 from Security-Onion-Solutions/bugfix/fleet-packages-urlbase
Osquery packages hostname fix
2020-07-16 16:36:30 -04:00
Josh Brower 51beb52bb8 Osquery packages hostname fix 2020-07-16 16:35:51 -04:00
Josh BrowerandGitHub 350d2fbeda Update README.md 2020-07-15 19:07:25 -04:00
Josh BrowerandGitHub 29c28fcb5e Update README.md 2020-07-15 19:06:36 -04:00
Josh BrowerandGitHub 48c9244a81 Update README.md 2020-07-15 19:05:49 -04:00
Josh BrowerandGitHub 80e081e828 Merge pull request #1010 from Security-Onion-Solutions/bugfix/playbook-anonymous-perms
Playbook anonymous perms fix
2020-07-15 12:40:47 -04:00
Josh Brower d11ef08961 Playbook anonymous perms fix 2020-07-15 12:37:04 -04:00
Josh BrowerandGitHub e7e1982862 Merge pull request #1007 from Security-Onion-Solutions/bugfix/ingest-parsing
Parsing & Hunt query updates
2020-07-14 17:00:04 -04:00
Josh Brower 8647944ae6 Parsing & Hunt query updates 2020-07-14 16:59:06 -04:00
Josh BrowerandGitHub 47388fa98d Merge pull request #998 from Security-Onion-Solutions/bugfix/fleet-soimage-fix
Fleet reactor fix
2020-07-14 13:06:52 -04:00
Josh Brower ba8395fc11 Fleet reactor fix 2020-07-14 13:04:29 -04:00
Josh BrowerandGitHub 0c9c66f6e1 Merge pull request #993 from Security-Onion-Solutions/bugfix/playbook-init
Bugfix/playbook init
2020-07-14 09:14:56 -04:00
Josh Brower 2c72940010 Playbook db init fix 2020-07-14 09:09:55 -04:00
Josh Brower b884e09e7a Playbook db init fix 2020-07-14 09:09:47 -04:00
Josh BrowerandGitHub e62381e998 Merge pull request #982 from Security-Onion-Solutions/bugfix/alerting
Misc fixes
2020-07-10 19:50:27 -04:00
Josh Brower 65062d93f4 Misc fixes 2020-07-10 19:43:43 -04:00
Josh BrowerandGitHub 7b91704894 Merge pull request #970 from Security-Onion-Solutions/defensivedepth-patch-2-host-pillar
Update so-setup
2020-07-09 15:32:38 -04:00
Josh BrowerandGitHub 58d290aa57 Update so-setup 2020-07-09 15:32:19 -04:00
Josh BrowerandGitHub 206bdc60f3 Merge pull request #967 from Security-Onion-Solutions/feature/low-level-alerts
Feature - low level alerts
2020-07-09 13:56:31 -04:00
Josh Brower 52f7111e1d Feature - low level alerts 2020-07-09 13:53:55 -04:00
Josh BrowerandGitHub 10cbc96f48 Merge pull request #948 from Security-Onion-Solutions/fix/fleet
Fleet setup bugfix
2020-07-07 20:56:43 -04:00
Josh Brower b4b122dbd9 Fleet setup bugfix 2020-07-07 20:55:47 -04:00
Josh BrowerandGitHub 518c8db3de Merge pull request #922 from Security-Onion-Solutions/feature/low-level-alerts
Initial commit - Low Level Alerts
2020-07-02 12:18:03 -04:00
Josh Brower 69ace6fbfa Initial commit - Low Level Alerts 2020-07-02 12:16:56 -04:00
Josh BrowerandGitHub 07d13b7ad0 Merge pull request #916 from Security-Onion-Solutions/defensivedepth-patch-1
Delete playbook_db_init.sql.backup
2020-07-02 05:32:45 -04:00
Josh BrowerandGitHub 7811ea5d4c Delete playbook_db_init.sql.backup 2020-07-02 05:32:35 -04:00
Josh BrowerandGitHub 0f915ec85e Merge pull request #915 from Security-Onion-Solutions/feature/playbook-updates
Feature/playbook updates
2020-07-02 05:31:30 -04:00
Josh Brower 3c93f9fd45 Playbook setup fix 2020-07-02 05:30:30 -04:00
Josh Brower d893aa0032 Playbook Updates 2020-07-01 16:48:07 -04:00
Josh BrowerandGitHub 376a6e5fd5 Merge pull request #907 from Security-Onion-Solutions/feature/spacing-so-allow
so-allow spacing fix
2020-06-30 08:13:38 -04:00
Josh Brower 1c0443458c so-allow spacing fix 2020-06-30 08:13:00 -04:00
Josh BrowerandGitHub b895d6fa4f Merge pull request #894 from Security-Onion-Solutions/feature/playbook-unit-testing
Playbook - Initial Support for Unit Testing
2020-06-26 06:33:05 -04:00
Josh Brower 7f0eacd342 Playbook - Initial Support for Unit Testing 2020-06-26 06:24:09 -04:00
Josh BrowerandGitHub 6794cabf9c Merge pull request #868 from Security-Onion-Solutions/bugfix/fleet-custom-hostname
Fleet custom hostname regex fix
2020-06-17 14:46:07 -04:00
Josh Brower 3418f5748c Fleet custom hostname regex fix 2020-06-17 13:08:47 -04:00
Josh BrowerandGitHub 2986926ce9 Merge pull request #861 from Security-Onion-Solutions/bugfix/fleet-kibana
Beta3 Kibana dashboard updates
2020-06-16 10:17:26 -04:00
Josh Brower a9df5d75b0 Beta3 Kibana dashboard updates 2020-06-16 10:16:31 -04:00
Josh BrowerandGitHub 1c86ae4e14 Merge pull request #836 from Security-Onion-Solutions/bugfix/misc
Fleet gen packages hostname fix2
2020-06-11 11:45:30 -04:00
Josh Brower ab143b3216 Fleet gen packages hostname fix2 2020-06-11 11:44:56 -04:00
Josh BrowerandGitHub 496696ed80 Merge pull request #834 from Security-Onion-Solutions/bugfix/misc
Bugfix/misc
2020-06-11 07:57:58 -04:00
Josh Brower 05d890901f Fleet gen packages hostname fix 2020-06-11 07:56:20 -04:00
Josh BrowerandGitHub 910c809aa2 Merge pull request #833 from Security-Onion-Solutions/bugfix/misc
thehive setup fix
2020-06-09 12:19:02 -04:00
Josh Brower e5a23c22fd thehive setup fix 2020-06-09 12:16:39 -04:00
Josh Brower 189d0f5f36 Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion-saltstack into dev 2020-06-08 13:28:46 -04:00
Josh Brower 913c1a89bf Fleet setup fixes 2020-06-08 13:28:27 -04:00
Josh BrowerandGitHub 35bc5f9133 Merge pull request #831 from Security-Onion-Solutions/feature/fleet-setup
Feature/fleet setup
2020-06-08 08:49:35 -04:00
Josh Brower 51f97f5ae5 Fleet setup - final fixes 2020-06-08 08:47:06 -04:00
Josh Brower 3f3990ac83 Merge remote-tracking branch 'remotes/origin/dev' into feature/fleet-setup 2020-06-08 08:30:37 -04:00
Josh BrowerandGitHub 950d4077f6 Update so-setup 2020-06-08 08:12:14 -04:00
Josh Brower ab6e36e00a Fleet syntax error fix 2020-06-06 13:15:44 -04:00
Josh Brower 33f21c05f7 Fleet standaline custom fqdn fixes 2020-06-06 10:03:25 -04:00
Josh BrowerandGitHub 88219c4827 Merge pull request #827 from Security-Onion-Solutions/feature/wlb5
Initial support - external beats
2020-06-05 10:47:56 -04:00
Josh Brower 4e4eeedb41 Initial support - external beats 2020-06-04 22:41:35 -04:00
Josh Brower 0890171527 Fixes 2020-06-04 07:51:05 -04:00
Josh Brower a09991d770 Fleet standalone - custom hostnames 2020-06-03 15:56:59 -04:00
Josh Brower 3d92145bb9 Fleet standalone - custom hostnames 2020-06-03 15:52:18 -04:00
Josh Brower eaacb7b71e Fleet cleanup 2020-06-03 05:54:35 -04:00
Josh Brower 782c669835 Fleet standalone fixes - req 2020-06-02 12:42:14 -04:00
Josh Brower 77df87880c Fleet standalone fixes - fleet sa req 2020-06-02 10:20:29 -04:00
Josh Brower b5cc653179 Fleet standalone fixes - mainip 2020-06-02 09:39:42 -04:00
Josh Brower b695b7f245 Fleet standalone fixes - firewall 2020-06-02 08:05:48 -04:00
Josh Brower 4b14ecf1d9 Fleet standalone fixes 2020-06-01 16:36:32 -04:00
Josh Brower 046bca626e Fleet pw check fix 2020-05-28 16:51:37 -04:00
Josh Brower e8e48a4beb Fleet standalone bugfixes 2020-05-28 16:40:12 -04:00
Josh Brower 0d8c0e1fa6 Fleet standalone fixes 2020-05-28 16:27:18 -04:00
Josh Brower aeb71bb8f0 Simplified setup script 2020-05-28 13:21:25 -04:00
Josh Brower e53e891bd6 Fleet reactor - Typo fix 2020-05-28 11:36:38 -04:00
Josh Brower 11c641fd1b Initial support - integrated Fleet setup 2020-05-27 15:34:14 -04:00
Josh BrowerandGitHub 894bfd47f4 Merge pull request #771 from Security-Onion-Solutions/feature/communityid-hive-pivot
Elasticsearch Ingest fixes
2020-05-26 13:08:40 -04:00
Josh Brower 8723f8785e osquery pipeline fix and fail state if errors 2020-05-26 13:05:56 -04:00
Josh BrowerandGitHub 3274ec0721 Merge pull request #769 from Security-Onion-Solutions/feature/communityid-hive-pivot
Add TheHive communityid link
2020-05-26 12:02:33 -04:00
Josh Brower 2cb7464086 Add TheHive communityid link 2020-05-26 12:01:58 -04:00
Josh BrowerandGitHub 35f3498ffa Merge pull request #760 from Security-Onion-Solutions/feature/ingest-communityid
Ingest pipeline commid fix for conn logs
2020-05-22 17:11:38 -04:00
Josh Brower 56f5fbdf6b Ingest pipeline commid fix for conn logs 2020-05-22 17:11:08 -04:00
Josh BrowerandGitHub 767eda6d60 Merge pull request #754 from Security-Onion-Solutions/feature/ingest-communityid
Feature/ingest communityid
2020-05-21 14:36:08 -04:00
Josh Brower bff86ea802 zeek.common ingest parser fix 2020-05-21 14:35:25 -04:00
Josh Brower c74ace89ba Initial support - Ingest community_id 2020-05-21 14:34:00 -04:00
Josh BrowerandGitHub 10691036e0 Update hive_init 2020-05-19 10:27:46 -04:00
Josh BrowerandGitHub b951094ea2 Change alert pivot links for MASTER 2020-05-18 14:13:32 -04:00
Josh BrowerandGitHub b01209457d Merge pull request #718 from Security-Onion-Solutions/bugfix/kibana-fleet
Update Fleet IP placeholder
2020-05-17 12:51:57 -04:00
Josh BrowerandGitHub 8a8970d9ee Update Fleet IP placeholder 2020-05-17 12:51:20 -04:00
Josh Brower e02bf2ebb5 Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion-saltstack into dev 2020-05-15 15:05:47 -04:00
Josh Brower 9d4536dcbe osquery ingest parsing update 2020-05-15 15:05:21 -04:00
Josh BrowerandGitHub 4737c0da3f Merge pull request #702 from Security-Onion-Solutions/bugfix/fleet-deployment
Fleet Setup - Restart nginx
2020-05-15 14:48:18 -04:00