CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-04-25 14:07:49 +02:00
Code Issues Packages Projects Releases Wiki Activity
16,010 Commits 40 Branches 125 Tags
dab56f0882b4c3b01266a6268a147197d7eeff67
Commit Graph

41 Commits

Author SHA1 Message Date
reyesj2 ecf094f684 WIP: support all es fleet integrations 
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
 2024-12-26 16:18:04 -06:00
reyesj2 e3b7d82a8f remove all non-core integrations from elasticfleet:packages pillar 2024-12-03 08:56:56 -06:00
reyesj2 44ec237447 additional integration support - cisco secure email gateway - rapid7 threat command 
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
 2024-11-15 11:39:01 -06:00
Jorge Reyes cf95af66c6 Revert "Add support for cybereason integration" 2024-10-21 15:23:05 -04:00
reyesj2 8b11019712 Add support for cybereason integration 
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
 2024-10-18 11:56:47 -04:00
reyesj2 322199358d add support for trendmicro integration 
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
 2024-10-16 16:45:46 -04:00
defensivedepth 219cb5e044 Merge remote-tracking branch 'origin/2.4/dev' into 2.4/defend-filters 2024-09-23 13:03:32 -04:00
defensivedepth ef003ffbb5 Refactor 2024-09-23 12:55:07 -04:00
Wes f2bb54d993 Add barracuda and imperva integrations 2024-09-11 19:41:38 +00:00
weslambert f182833a8d Add tenable_io 2024-08-15 23:03:32 -04:00
weslambert 2e70d157e2 Add ref 2024-05-07 11:13:51 -04:00
reyesj2 000d15a53c Kismet integration: TODO Elasticsearch mappings 
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
 2024-03-29 13:56:01 -04:00
weslambert bed42208b1 Add journald integration 2024-03-05 09:49:55 -05:00
Wes d0457cb61e Add additional integrations to defaults 2024-01-19 22:00:38 +00:00
Wes 5703023008 Add additional packages 2024-01-11 13:59:38 +00:00
m0duspwnens c091a0845c allow user to disable elastic agent sending to manager 2024-01-03 11:48:16 -05:00
weslambert b0a69d30c9 Add Anomali, Cybersixgill, Snort, and ThreatQuotient packages 2023-12-13 10:44:03 -05:00
weslambert 5f79644aef Ignore analyzer log 2023-11-29 10:02:13 -05:00
weslambert 4bb1dabb89 Add elastic_agent 2023-11-10 10:14:59 -05:00
Wes 3875970dc5 Add checkpoint and vsphere packages 2023-11-02 21:09:37 +00:00
Wes 51247be6b9 Sublime Platform integration defaults 2023-11-01 13:37:52 +00:00
Wes c135f886a9 Remove Carbon Black Cloud integration 2023-10-18 20:41:34 +00:00
Wes 767a54c91b Add pkgs 2023-10-18 20:07:26 +00:00
Mike Reeves b8aad7f5e6 Update defaults.yaml 2023-09-28 19:44:49 -04:00
weslambert 202eb7e876 Exclude known_certs 2023-09-28 09:16:56 -04:00
weslambert 78915f900b Add fortigate package 2023-08-30 15:37:30 -04:00
weslambert c01a9006a6 Add Apache package 2023-08-29 11:01:22 -04:00
Wes 0f24c8e8bb Add packages 2023-08-23 19:02:32 +00:00
weslambert fa31bd4bf7 Exclude console log 2023-08-21 09:20:49 -04:00
Josh Brower 1d83b2f2e6 Add elasticsearch integration 2023-08-10 19:51:12 -04:00
Josh Brower 0d894b7f52 Upgrade integration packages 2023-08-10 18:57:17 -04:00
Josh Brower f153c1125d Allow multiple Custom Fleet FQDN 2023-08-02 15:23:18 -04:00
Josh Brower b520c1abb7 Allow multiple Custom Fleet FQDN 2023-08-02 10:36:40 -04:00
Wes 48d9c14563 Enable log package by default 2023-08-01 02:20:43 +00:00
Wes de7b7ff989 Add endpoint 2023-07-24 18:35:02 +00:00
Josh Brower 7561ec0512 Automatically manage Fleet Logstash Config 2023-06-29 08:52:51 -04:00
Wes 662db41857 Add default packages 2023-06-23 13:17:38 +00:00
Doug Burks 998c85e3f8 Update defaults.yaml 2023-06-12 09:31:19 -04:00
Doug Burks ae14e4870d Add ocsp to logging.zeek.exclued in defaults.yaml 2023-06-12 08:44:46 -04:00
Wes 344e2bf1d0 Update defaults file 2023-05-31 15:30:03 +00:00
m0duspwnens 3f8e15d16f enabled/disable elaticfleet in ui 2023-05-15 09:41:44 -04:00