992 Commits

Author	SHA1	Message	Date
Josh Brower	ff112454b1	Cleaned up dashboard	2019-01-10 11:31:23 -05:00
Mike Reeves	42d6ce171b	Bro Module - Update correct Bro Version	2019-01-09 16:09:58 -05:00
Mike Reeves	901f02e5e9	Bro Module - Remove Comments from local.bro	2019-01-09 15:58:00 -05:00
Mike Reeves	b0bb7ad404	Bro Module - Update the node.cfg	2019-01-09 14:45:07 -05:00
Mike Reeves	a00c107136	Bro Module - Add hassh	2019-01-09 13:09:40 -05:00
Mike Reeves	c1a788e85d	Kibana Module - Fix Problem with custom dashboard link	2019-01-09 10:06:31 -05:00
Mike Reeves	9af5a84a34	Kibana Module - Remove kibana.index from the config for testing	2019-01-09 09:03:34 -05:00
Mike Reeves	ccc1a5058b	Kibana Module - Add kibana index to kibana config	2019-01-08 16:31:00 -05:00
Mike Reeves	341297bbaa	Update For 1.0.6	2019-01-08 13:29:24 -05:00
Mike Reeves	a508ce80ce	Merge branch 'master' of https://github.com/TOoSmOotH/securityonion-saltstack	2019-01-08 10:37:06 -05:00
Mike Reeves	ccd541a8d9	Update Bro and Suricata Versions	2019-01-08 10:15:08 -05:00
Josh Brower	ce43fd7cd4	Moved to dynamic	2019-01-01 11:20:09 -05:00
Josh Brower	b9f6269925	Moved to dynamic	2019-01-01 11:20:01 -05:00
Josh Brower	bc7bf5774a	Enable osquery parsers for EVAL role	2019-01-01 11:14:38 -05:00
Josh Brower	15bfce07e8	Move osquery parsers from custom to dynamic	2019-01-01 11:13:05 -05:00
Josh Brower	f21e52b431	Add missing character	2019-01-01 11:11:29 -05:00
Josh Brower	fff13d5861	Tag & initial JSON decode for osquery logs	2018-12-28 13:56:06 -05:00
Josh Brower	1917b469ec	osquery-tagged logs output to ES	2018-12-28 13:55:02 -05:00
Josh Brower	389b57f226	parser for windows event logs shipped by osquery	2018-12-28 13:54:11 -05:00
Josh Brower	679a6841f8	Osquery Overview dashboard - initial version	2018-12-28 13:51:44 -05:00
Josh Brower	9c3f476f6d	add bind for fleet logs	2018-12-28 13:50:43 -05:00
Josh Brower	44eed120cb	add osquery logs if fleet is enabled	2018-12-28 13:49:53 -05:00
Wes Lambert	04cdd2d976	Redis - Re-enable for Fleet live queries	2018-12-18 15:45:25 +00:00
Wes Lambert	9930aac556	Wazuh - Add conditional for config profile	2018-12-14 21:28:46 +00:00
Wes Lambert	172c9e0593	Logstash - Wazuh parsing updates	2018-12-14 18:00:19 +00:00
Wes Lambert	09f5c24251	SSL - Ensure storage node gets FB cert	2018-12-14 14:05:35 +00:00
Mike Reeves	26418cfb26	Merge pull request #62 from dlee35/master ... remove nginx.conf.so-SENSOR	2018-12-14 08:18:26 -05:00
dlee35	e7c34cb1b8	remove nginx.conf.so-SENSOR	2018-12-14 08:04:46 -05:00
Wes Lambert	55a426c347	Cleanup - Lowercase SENSOR	2018-12-14 03:27:13 +00:00
Mike Reeves	f8b1bd0ffc	Merge pull request #59 from weslambert/master ... Various updates	2018-12-13 20:35:43 -05:00
dlee35	bd9f8ee2c7	fix filename and grep checks	2018-12-13 19:31:13 -05:00
Wes Lambert	c7dcbb8dcb	Merge remote-tracking branch 'upstream/master'	2018-12-13 23:57:24 +00:00
Wes Lambert	a662badc5b	Firewall - Fix stuff for sensor	2018-12-13 23:52:15 +00:00
Mike Reeves	2e78fc2e1e	Master Module - I dont' want to talk about it	2018-12-13 17:19:35 -05:00
Mike Reeves	5a8ab7830e	Master Module - Update acng version	2018-12-13 17:04:14 -05:00
dlee35	06037d8222	generate self-signed cert for osquery clients	2018-12-13 16:28:52 -05:00
Mike Reeves	52998d7340	Merge branch 'master' of https://github.com/TOoSmOotH/securityonion-saltstack	2018-12-13 14:24:47 -05:00
Mike Reeves	7ff47faa3d	Common Module - Update core docker version	2018-12-13 14:24:40 -05:00
Mike Reeves	fdd6bcdd6b	Merge pull request #56 from dlee35/master ... add firewall rule option for osquery	2018-12-13 13:42:13 -05:00
Wes Lambert	bd04dc45a3	Wazuh - Fix Jinja	2018-12-13 18:30:04 +00:00
dlee35	fe56e171d4	add firewall rule option for osquery	2018-12-13 13:28:37 -05:00
Wes Lambert	75ed258d19	Firewall - Fix Wazuh IP logic for sensors	2018-12-13 17:57:22 +00:00
Wes Lambert	4db52ec865	Wazuh - Add logic for sensors	2018-12-13 17:56:51 +00:00
Wes Lambert	5e23859557	Salt - Add Wazuh to other roles	2018-12-13 17:34:19 +00:00
Wes Lambert	62067f37cf	Wazuh - Fix agent ip for storage nodes	2018-12-13 17:33:12 +00:00
Wes Lambert	d13e7559fe	Filebeat - Enabled for master and only enable Bro/Suri inputs when needed	2018-12-13 17:32:03 +00:00
Mike Reeves	8163beadb0	Merge pull request #54 from dlee35/master ... Updated Fleet init.sls and nginx confs for fleet	2018-12-12 16:34:35 -05:00
dlee35	5c737e9fda	Updated Fleet init.sls and nginx confs for fleet	2018-12-12 16:19:35 -05:00
Wes Lambert	41e9c4c7e0	Logstash - Alter input for Wazuh logs	2018-12-12 20:52:18 +00:00
Wes Lambert	54c35cdc0d	Filebeat - Add Wazuh archive logs	2018-12-12 20:51:41 +00:00