Commit Graph

10649 Commits

Author SHA1 Message Date
m0duspwnens d1ee3a7d04 zeek 2.4 2022-09-20 11:11:29 -04:00
Mike Reeves 9fffe1b5fa Replace so-firewall 2022-09-20 11:11:19 -04:00
Doug Burks 8c88285365 Merge pull request #8780 from Security-Onion-Solutions/2.4/sysmon-fix-bryant
2.4/sysmon fix bryant
2022-09-20 14:32:35 +00:00
Doug Burks df18f8f886 Merge pull request #8779 from Security-Onion-Solutions/2.4/dev
2.4/dev
2022-09-20 13:32:54 +00:00
Josh Brower 0815b607e6 Merge pull request #8778 from Security-Onion-Solutions/2.4/elastic-fleet
Hunt Query - Elastic Agent Live Osquery Logs
2022-09-20 08:29:47 -04:00
Josh Brower 120fdef173 Hunt Query - Elastic Agent Live Osquery Logs 2022-09-20 08:27:47 -04:00
Josh Brower da8d09713f Merge pull request #8776 from Security-Onion-Solutions/2.4/elastic-fleet
Hunt Query - Elastic Agent Live Osquery Logs
2022-09-20 06:20:51 -04:00
Josh Brower 3eb4adc5c3 Hunt Query - Elastic Agent Live Osquery Logs 2022-09-19 20:12:47 -04:00
Mike Reeves 512c044d80 Thresholding 2022-09-19 16:53:51 -04:00
weslambert d4fb78fe3b Merge pull request #8775 from Security-Onion-Solutions/fix/elasticsearch_elastic_agent_index_templates_load
Update so-elasticsearch-templates-load to allow for proper loading of differently formatted Elastic Agent index templates
2022-09-19 16:44:21 -04:00
weslambert 509c32482f Update so-elasticsearch-templates-load to allow for proper loading of differently formatted Elastic Agent index templates 2022-09-19 16:39:49 -04:00
Mike Reeves a1aae627a2 Merge pull request #8771 from Security-Onion-Solutions/funstuff
Add NTP and NGINX
2022-09-19 16:33:05 -04:00
Mike Reeves e72eae2e8a NGINX fun 2022-09-19 16:23:46 -04:00
Mike Reeves fad0e0a145 NGINX fun 2022-09-19 16:14:37 -04:00
Mike Reeves cb2e46f275 NGINX fun 2022-09-19 16:11:49 -04:00
Josh Brower b38804840d Merge pull request #8772 from Security-Onion-Solutions/2.4/grafana-ids
Grafana SOC Redirect
2022-09-19 16:02:41 -04:00
Josh Brower 80919827c6 Fixup index patterns 2022-09-19 15:55:23 -04:00
Josh Patterson 0367365225 Merge pull request #8773 from Security-Onion-Solutions/fix/soc2.4
fix some soc defaults
2022-09-19 15:54:25 -04:00
m0duspwnens 30afc88322 fix some soc defaults 2022-09-19 15:51:29 -04:00
Josh Brower ea7979cfdd Add Elastic Agent datastreams to SOC index 2022-09-19 15:33:15 -04:00
m0duspwnens 79785fc053 zeek jinja 2022-09-19 15:26:32 -04:00
Mike Reeves 22e8c7ef3e Add NTP 2022-09-19 15:10:11 -04:00
Mike Reeves 2abfcdc042 Add NTP 2022-09-19 14:48:40 -04:00
doug fdffac83e1 sysmon fix by bryant 2022-09-19 14:47:45 -04:00
Mike Reeves 17cbe38c25 Add NTP 2022-09-19 14:32:29 -04:00
Mike Reeves 74ccf333e0 Add NTP 2022-09-19 14:30:23 -04:00
Mike Reeves 44be7b4969 Add NTP 2022-09-19 14:26:16 -04:00
Mike Reeves 03ea714dc1 Add NTP 2022-09-19 14:06:46 -04:00
Mike Reeves f7e614f358 Add NTP 2022-09-19 14:06:30 -04:00
Josh Brower d28a9ecec2 Set Dashboard UUID 2022-09-19 13:32:04 -04:00
weslambert 4c2ac9dd93 Merge pull request #8770 from Security-Onion-Solutions/fix/elasticsearch_cluster_settings
Re-establish Elasticsearch cluster (search) settings
2022-09-19 12:10:55 -04:00
Wes 9095bc2205 Re-establish Elasticsearch cluster (search) settings 2022-09-19 15:41:54 +00:00
Mike Reeves 0a885221e8 Merge pull request #8769 from Security-Onion-Solutions/funstuff
Firewall and Sensoroni Fix
2022-09-19 11:05:46 -04:00
Mike Reeves 32034078fa Fix sensoroni Agent 2022-09-19 10:48:36 -04:00
Mike Reeves aa8ce074f7 Fix sensoroni Agent 2022-09-19 10:43:05 -04:00
Mike Reeves 04a0be8247 Merge branch '2.4/dev' into funstuff 2022-09-19 10:41:53 -04:00
Mike Reeves e3e6e7b4e8 Fix sensoroni Agent 2022-09-19 10:41:01 -04:00
Jason Ertel 21f8b3b61c Merge pull request #8768 from Security-Onion-Solutions/config
refactor sostatus telegraf input script
2022-09-19 10:35:22 -04:00
Jason Ertel ae6fbab45d refactor sostatus telegraf input script 2022-09-19 10:27:20 -04:00
Mike Reeves f4508aa534 Fix sensoroni Agent 2022-09-19 10:22:32 -04:00
Mike Reeves 61f3479d92 Merge branch '2.4/dev' into funstuff 2022-09-19 09:40:27 -04:00
Mike Reeves 9bdb364122 Firewall Fun 2022-09-19 09:39:42 -04:00
Jason Ertel f2b09c84d4 Merge pull request #8767 from Security-Onion-Solutions/config
Config
2022-09-19 09:18:10 -04:00
Jason Ertel 7d965b5cda Ensure so-status does not get jinjafied 2022-09-19 09:17:06 -04:00
Jason Ertel b4add5ebb3 Merge pull request #8766 from Security-Onion-Solutions/config
complete rewrite of so-status
2022-09-19 07:40:51 -04:00
Mike Reeves d7585e1b3d Firewall Fun 2022-09-17 10:03:18 -04:00
Mike Reeves 4a68a5e054 Firewall Fun 2022-09-17 09:57:43 -04:00
Mike Reeves 98ae6149dc Firewall Fun 2022-09-17 09:54:20 -04:00
Mike Reeves e717579113 Firewall Fun 2022-09-17 09:51:26 -04:00
Mike Reeves 8a26b3fa04 Firewall Fun 2022-09-17 09:47:15 -04:00