CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-07-14 04:43:09 +02:00
Code Issues Packages Projects Releases Wiki Activity
1,807 Commits 40 Branches 127 Tags
cdabaabd052d967a182e532622eba4a93596463e
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Wes Lambert 4a34ac7c05 wait for TheHive before attempting to configure 2019-12-17 13:34:01 +00:00
Wes Lambert 56d354b256 update Cyberchef to serve static files vs self-hosted 2019-12-16 21:22:00 +00:00
Wes Lambert d66eca1db4 add Bro extracted directory 2019-12-16 20:45:14 +00:00
Wes Lambert c47d163a32 add initial tcpreplay state 2019-12-11 19:39:03 +00:00
Wes Lambert 65a5a2e64a pre-load custom reputation field 2019-12-05 17:41:19 +00:00
Wes Lambert b58b3afa35 add auto_analyze_alerts option 2019-12-05 03:22:10 +00:00
Wes Lambert 79e1ac5336 add webhook 2019-12-04 18:39:58 +00:00
Wes Lambert 5eb0a4f19c update SOCtopus conf 2019-12-04 03:12:02 +00:00
Wes Lambert 76cdc02305 user Cortex org user instead 2019-11-19 16:28:42 +00:00
Wes Lambert b7ad65a837 add Cortex org user 2019-11-19 16:28:05 +00:00
Wes Lambert 34460a6b07 add Cortex org user to setup 2019-11-19 16:25:10 +00:00
Wes Lambert 55db27c898 fix require 2019-11-13 02:21:36 +00:00
Wes Lambert 1feddb7922 add Cyberchef dir 2019-11-12 22:50:46 +00:00
Wes Lambert e364638a62 add Cyberchef 2019-11-12 22:50:00 +00:00
Wes Lambert 2e82d06f27 only configure Telegraf if Grafana enabled 2019-11-12 21:10:31 +00:00
Wes Lambert e323a44827 change intial user role to superadmin 2019-11-07 14:37:18 +00:00
Wes Lambert 74428f33eb pin Wazuh agent version 2019-10-31 14:55:14 +00:00
weslambertandGitHub ca8c4a6b93 Update README.md 2019-09-27 14:56:35 -04:00
weslambertandGitHub 4dd414fb16 Merge pull request #104 from weslambert/master 
update log path
 2019-09-24 16:38:52 -04:00
Wes Lambert 5bd77a5177 update log path 2019-09-24 20:37:07 +00:00
Wes Lambert 497edcbe45 update Filebeat log config 2019-09-24 19:38:06 +00:00
Wes Lambert 2784542cdb update Elastalert config 2019-09-23 22:39:43 +00:00
Wes Lambert 965ee6f922 remove duplicate alerter 2019-09-23 14:43:54 +00:00
Wes Lambert 5419bd6f08 update config for Elastalert 2019-09-23 14:43:14 +00:00
Wes Lambert 9a53cfd5ff update path 2019-09-18 19:47:39 +00:00
Wes Lambert 1f8fd7ddd1 fix typo 2019-09-18 19:42:02 +00:00
Wes Lambert 30d732e18f sync default Elastalert rules 2019-09-18 19:37:47 +00:00
Wes Lambert 3f07d7de91 add files 2019-09-09 20:28:31 +00:00
Wes Lambert a1998a8aa2 update to allow use of custom modules and local config 2019-09-09 20:23:37 +00:00
Wes Lambert 707e0e378a ensure setup log is consistent 2019-05-16 13:25:02 +00:00
Wes Lambert 4f15e14cc2 TheHive: Add initial user 2019-03-28 14:24:17 +00:00
Wes Lambert 8b8556213b SOCtopus: more config updates 2019-03-25 21:26:53 +00:00
Wes Lambert 1d01192b9e SOCtopus: update config 2019-03-25 21:21:21 +00:00
Wes Lambert 03e42a009a SOCtopus: update config 2019-03-25 16:12:24 +00:00
Wes Lambert 28c0cda16b SOCtopus: Initial Commit 2019-03-15 02:40:02 +00:00
Wes Lambert cdfc3a15ad osquery: fix host field conflict 2019-01-16 19:25:06 +00:00
Wes Lambert 04cdd2d976 Redis - Re-enable for Fleet live queries 2018-12-18 15:45:25 +00:00
Wes Lambert 9930aac556 Wazuh - Add conditional for config profile 2018-12-14 21:28:46 +00:00
Wes Lambert 172c9e0593 Logstash - Wazuh parsing updates 2018-12-14 18:00:19 +00:00
Wes Lambert 2f12c36c87 Setup - Clean up old Wazuh stuff and move Curator config to SN Adv Mode 2018-12-14 14:07:20 +00:00
Wes Lambert 09f5c24251 SSL - Ensure storage node gets FB cert 2018-12-14 14:05:35 +00:00
Wes Lambert 55a426c347 Cleanup - Lowercase SENSOR 2018-12-14 03:27:13 +00:00
Wes Lambert 9ce41f81b9 Setup - Make sensor minion config consistent 2018-12-14 00:12:37 +00:00
Wes Lambert c7dcbb8dcb Merge remote-tracking branch 'upstream/master' 2018-12-13 23:57:24 +00:00
Wes Lambert a662badc5b Firewall - Fix stuff for sensor 2018-12-13 23:52:15 +00:00
Wes Lambert 1d9fae304c Setup - Get Curator disk size when /nsm not present 2018-12-13 22:01:21 +00:00
Wes Lambert bd04dc45a3 Wazuh - Fix Jinja 2018-12-13 18:30:04 +00:00
Wes Lambert 75ed258d19 Firewall - Fix Wazuh IP logic for sensors 2018-12-13 17:57:22 +00:00
Wes Lambert 4db52ec865 Wazuh - Add logic for sensors 2018-12-13 17:56:51 +00:00
Wes Lambert 5e23859557 Salt - Add Wazuh to other roles 2018-12-13 17:34:19 +00:00
Wes Lambert 62067f37cf Wazuh - Fix agent ip for storage nodes 2018-12-13 17:33:12 +00:00
Wes Lambert d13e7559fe Filebeat - Enabled for master and only enable Bro/Suri inputs when needed 2018-12-13 17:32:03 +00:00
Wes Lambert 41e9c4c7e0 Logstash - Alter input for Wazuh logs 2018-12-12 20:52:18 +00:00
Wes Lambert 54c35cdc0d Filebeat - Add Wazuh archive logs 2018-12-12 20:51:41 +00:00
Wes Lambert 8496834f8b Wazuh - Re-order top.sls so Filebeat does not overrite Wazuh logs 2018-12-12 15:48:59 +00:00
Wes Lambert 9d86744e07 Filebeat - Fix Wazuh alerts path 2018-12-12 15:19:51 +00:00
Wes Lambert e20ab3b407 Filebeat - Config for Wazuh alerts 2018-12-12 14:48:17 +00:00
Wes Lambert 5822842d2e Wazuh - Add sleep to wait for API 2018-12-12 13:36:13 +00:00
Wes Lambert a99ec40506 Setup - Remark Wazuh agent config 2018-12-12 13:10:27 +00:00
Wes Lambert 8404897fe3 Wazuh - Move agent config to init.sls 2018-12-12 06:05:13 +00:00
Wes Lambert 823a589fae Wazuh - Set mode for agent registration script 2018-12-12 04:01:13 +00:00
Wes Lambert 1a4a7382e2 Wazuh - Fix Wazuh agent registration script name 2018-12-12 03:18:55 +00:00
Wes Lambert 86a72984c7 Setup - Add auth pillar to eval mode 2018-12-12 02:58:09 +00:00
Wes Lambert 113f030873 Wazuh - Add agent register script to init.sls 2018-12-12 02:26:38 +00:00
Wes Lambert 634c435ad6 Setup - Configure Wazuh agent 2018-12-12 01:51:30 +00:00
Wes Lambert 9a021164ac Wazuh - Fix port, add agent conf, and agent registration script 2018-12-12 01:42:05 +00:00
Wes Lambert 223237f8c2 Wazuh - Expose both UDP and TCP ports 2018-12-11 19:45:56 +00:00
Wes Lambert 6cdf1ef857 Firewall - Add rules for Wazuh Manager 2018-12-11 19:44:32 +00:00
Wes Lambert 0f5fbadaf5 Filebeat - Switch negation to equals 2018-12-10 20:17:41 +00:00
Wes Lambert 10d6c0f5a9 Setup - Remark Wazuh user section completely 2018-12-10 19:55:53 +00:00
Wes Lambert 2544984433 Wazuh - add to top.sls for Eval Mode 2018-12-10 19:51:57 +00:00
Wes Lambert e70db05a0f Filebeat - Modify config for Wazuh alerts 2018-12-10 19:50:55 +00:00
Wes Lambert cb68f502ee Wazuh - Changes to init.sls 2018-12-10 19:49:14 +00:00
Wes Lambert 0a33204726 Setup - Only add Wazuh repo 2018-12-07 18:16:03 +00:00
Wes Lambert e6469d505a Wazuh - initial init.sls 2018-12-07 18:13:42 +00:00
Wes Lambert 6a9a537cf8 Wazuh - Remove filebeat.yml 2018-12-07 13:39:10 +00:00
Wes Lambert e355503324 Filebeat - Update for Wazuh logs 2018-12-07 13:38:31 +00:00
Wes Lambert e11aadf730 Wazuh - agent install for CentOS 2018-12-07 13:36:11 +00:00
Wes Lambert f5e2b7f210 Setup - Adjust to prevent unary operator error 2018-12-07 04:22:11 +00:00
Wes Lambert 6bfb813cdf Setup - Adjust syntax 2018-12-07 04:18:28 +00:00
Wes Lambert e21c67f553 Setup - Fix typo 2018-12-07 04:14:30 +00:00
Wes Lambert bccb83fae9 Setup - Install Wazuh agent 2018-12-07 03:57:31 +00:00
Wes Lambert e335be7476 Elastalert - Remove config from ES Module 2018-12-06 05:44:09 +00:00
Wes Lambert d310f163e8 Elastalert - Enable for Master/Eval 2018-12-06 05:43:15 +00:00
Wes Lambert fe1c771f21 Elastalert - Initial Config 2018-12-06 05:42:30 +00:00
Wes Lambert 52dfe2500a Cleanup - Remove pulledpork module 2018-12-06 03:14:03 +00:00
Wes Lambert e7be61bd28 Cleanup - Remove somaster module 2018-12-06 03:13:39 +00:00
Wes Lambert 3ffdcd81d6 Redis - Don't start if using Eval Mode 2018-12-06 03:07:16 +00:00
Wes Lambert 5c28576674 Logtash - Update input for Eval Mode 2018-12-06 02:38:59 +00:00
Wes Lambert 6399889e60 Merge branch 'master' of https://github.com/toosmooth/securityonion-saltstack 2018-12-05 16:13:40 +00:00
Wes Lambert 88c144a250 Curator - Fix path for master pillar additions 2018-12-05 15:51:10 +00:00
Wes Lambert aa32a55b4e Curator - Update Master pillar in setup 2018-12-05 15:16:14 +00:00
Wes Lambert 3461c7e226 Curator - Update config for Eval Mode 2018-12-05 15:14:36 +00:00
Wes Lambert 7a260a4876 Curator - Move files to /usr/sbin 2018-12-05 13:24:16 +00:00
Wes Lambert 90e3b6912c Curator - Remove Curator files from ES module 2018-12-05 13:14:19 +00:00
Wes Lambert 2e73a6fb02 Curator - Update top.sls for Curator 2018-12-05 13:13:15 +00:00
Wes Lambert 1ccece70ef Curator - Remove config from ES 2018-12-05 13:10:29 +00:00
Wes Lambert ce70e590a1 Curator - break out from ES and add config 2018-12-05 13:09:07 +00:00
Wes Lambert 4c67695cd0 Setup - Set cur_close_days and log_size_limit 2018-12-05 13:06:29 +00:00
Wes Lambert 7399172450 Merge branch 'master' of https://github.com/toosmooth/securityonion-saltstack 2018-11-30 15:39:38 +00:00