  weslambertandGitHub
|
7cefc218c4
|
Merge pull request #505 from Security-Onion-Solutions/strelka-sensor
Strelka sensor
|
2020-04-02 16:04:35 -04:00 |
|
|
Wes Lambert
|
9a082725d1
|
add Strelka for sensor if enabled
|
2020-04-02 20:03:29 +00:00 |
|
|
Wes Lambert
|
eb0c23387b
|
specify ES vs LS in FB config
|
2020-04-02 20:01:49 +00:00 |
|
|
weslambertandGitHub
|
fd2b35dd21
|
Merge pull request #498 from Security-Onion-Solutions/fix/observer
use agent name for observer name
|
2020-04-01 17:28:52 -04:00 |
|
|
Wes Lambert
|
e023aeb9be
|
use agent name for observer name
|
2020-04-01 21:27:25 +00:00 |
|
|
weslambertandGitHub
|
b14f9067ab
|
Merge pull request #495 from Security-Onion-Solutions/fix/zeek_output_config
Bro to Zeek
|
2020-04-01 15:19:02 -04:00 |
|
|
weslambertandGitHub
|
edbe512d82
|
Bro to Zeek
|
2020-04-01 15:18:30 -04:00 |
|
|
weslambertandGitHub
|
5f8d1c29b4
|
Merge pull request #494 from Security-Onion-Solutions/search_ls_pillar
Search ls pillar
|
2020-04-01 15:13:17 -04:00 |
|
|
Wes Lambert
|
22e7777d67
|
update search sls
|
2020-04-01 19:12:07 +00:00 |
|
|
Wes Lambert
|
09022ad752
|
Update Zeek and Strelka
|
2020-04-01 19:11:10 +00:00 |
|
|
Wes Lambert
|
1df2302287
|
Update Zeek and Strelka
|
2020-04-01 19:09:38 +00:00 |
|
|
weslambertandGitHub
|
82c99edbfc
|
Update Suricata output
|
2020-04-01 15:02:52 -04:00 |
|
|
weslambertandGitHub
|
e1008269ce
|
Update OSSEC output
|
2020-04-01 15:00:52 -04:00 |
|
|
weslambertandGitHub
|
9f58081ce8
|
Typo
|
2020-04-01 14:57:47 -04:00 |
|
|
weslambertandGitHub
|
d0ad7e7ef9
|
Update config for search pipeline
|
2020-04-01 14:57:32 -04:00 |
|
|
weslambertandGitHub
|
5c433c39e5
|
Merge pull request #492 from Security-Onion-Solutions/fix/strelka-zeek-extracted-sync
Add Zeek extracted file sync
|
2020-04-01 14:20:36 -04:00 |
|
|
weslambertandGitHub
|
cc4b1bf936
|
Add Zeek extracted file sync
|
2020-04-01 14:19:36 -04:00 |
|
|
weslambertandGitHub
|
df00405265
|
Merge pull request #491 from Security-Onion-Solutions/fix/strelka_init
Remove restart policy
|
2020-04-01 13:19:57 -04:00 |
|
|
weslambertandGitHub
|
5173da5a33
|
Remove restart policy
|
2020-04-01 13:19:31 -04:00 |
|
|
weslambertandGitHub
|
44ae4604b5
|
Merge pull request #489 from Security-Onion-Solutions/fix/strelka-curly
Fix curly brace
|
2020-04-01 12:33:02 -04:00 |
|
|
weslambertandGitHub
|
7390063026
|
Fix curly brace
|
2020-04-01 12:32:29 -04:00 |
|
|
weslambertandGitHub
|
92c714ea4c
|
Merge pull request #488 from Security-Onion-Solutions/fix/strelka_top
Update Eval for Strelka
|
2020-04-01 11:42:18 -04:00 |
|
|
weslambertandGitHub
|
2fcfb06ba5
|
Update Eval for Strelka
|
2020-04-01 11:41:56 -04:00 |
|
|
weslambertandGitHub
|
3001abc3ea
|
Merge pull request #487 from Security-Onion-Solutions/fix/elastic_fixes
Fix/elastic fixes
|
2020-04-01 11:32:22 -04:00 |
|
|
weslambertandGitHub
|
f13093dc51
|
Add message rename
|
2020-04-01 11:31:57 -04:00 |
|
|
weslambertandGitHub
|
26efad1c45
|
Update Strelka log path
|
2020-04-01 11:30:02 -04:00 |
|
|
weslambertandGitHub
|
9f44a86ae4
|
Merge pull request #485 from Security-Onion-Solutions/strelka_enable
Enable Strelka via Setup
|
2020-04-01 10:08:09 -04:00 |
|
|
Wes Lambert
|
2164de97b5
|
Enable Strelka via Setup
|
2020-04-01 14:06:19 +00:00 |
|
|
weslambertandGitHub
|
fd6832bf51
|
Merge pull request #483 from Security-Onion-Solutions/elastic_config
template and kibana config updates
|
2020-04-01 09:15:10 -04:00 |
|
|
Wes Lambert
|
33512eca2a
|
template and kibana config updates
|
2020-04-01 13:14:13 +00:00 |
|
|
weslambertandGitHub
|
a6b3e0e4a8
|
Merge pull request #482 from Security-Onion-Solutions/fix/strelka_config
add strelka index
|
2020-04-01 09:04:35 -04:00 |
|
|
Wes Lambert
|
6cc757e1de
|
add strelka index
|
2020-04-01 13:02:36 +00:00 |
|
|
weslambertandGitHub
|
d8f30a0240
|
Merge pull request #481 from Security-Onion-Solutions/fix/strelka_stuff
Fix/strelka stuff
|
2020-04-01 09:00:07 -04:00 |
|
|
Wes Lambert
|
70422809ec
|
add category
|
2020-04-01 12:59:10 +00:00 |
|
|
Wes Lambert
|
9bbcc185aa
|
change Strelka log location
|
2020-04-01 12:57:51 +00:00 |
|
|
weslambertandGitHub
|
fd00cdf8f3
|
Merge pull request #473 from Security-Onion-Solutions/more_elastic_stuff
More elastic stuff
|
2020-03-30 20:41:56 -04:00 |
|
|
Wes Lambert
|
68138e009a
|
update FB config
|
2020-03-31 00:37:58 +00:00 |
|
|
Wes Lambert
|
5226ec1560
|
update Kibana config/dashboards/etc
|
2020-03-31 00:37:17 +00:00 |
|
|
Wes Lambert
|
eacd3c9bfd
|
update zeek.common
|
2020-03-31 00:36:42 +00:00 |
|
|
weslambertandGitHub
|
9758563967
|
Merge pull request #470 from Security-Onion-Solutions/ecs_community_id
add community_id parsing for ingest
|
2020-03-30 11:51:05 -04:00 |
|
|
Wes Lambert
|
ad50093315
|
add community_id parsing for ingest
|
2020-03-30 15:49:36 +00:00 |
|
|
weslambertandGitHub
|
ee4e3c0659
|
Merge pull request #469 from Security-Onion-Solutions/fix/ingest_stuff
update wazuh fields and category
|
2020-03-30 10:24:43 -04:00 |
|
|
Wes Lambert
|
93c3c86e2f
|
update wazuh fields and category
|
2020-03-30 14:24:01 +00:00 |
|
|
weslambertandGitHub
|
b6db36723d
|
Merge pull request #467 from Security-Onion-Solutions/fix/kibana_config_update
update Kibana json config
|
2020-03-30 10:21:18 -04:00 |
|
|
Wes Lambert
|
70bc35eb7e
|
update Kibana json config
|
2020-03-30 14:20:06 +00:00 |
|
|
weslambertandGitHub
|
b59fc5b77e
|
Merge pull request #457 from Security-Onion-Solutions/fix/more_ossec_fields
fix ossec fields
|
2020-03-24 11:44:45 -04:00 |
|
|
Wes Lambert
|
ef808875f4
|
fix ossec fields
|
2020-03-24 15:42:31 +00:00 |
|
|
weslambertandGitHub
|
239e0a0cb6
|
Merge pull request #456 from Security-Onion-Solutions/kibana_disable_telem
Disable telemetry
|
2020-03-24 10:20:51 -04:00 |
|
|
weslambertandGitHub
|
fef0185e90
|
Disable telemetry
|
2020-03-24 10:18:39 -04:00 |
|
|
weslambertandGitHub
|
81a481022c
|
Merge pull request #455 from Security-Onion-Solutions/fix/zeek_weird_ingest
add some more fields
|
2020-03-23 23:44:47 -04:00 |
|
|
Wes Lambert
|
083c588a87
|
add some more fields
|
2020-03-24 03:43:31 +00:00 |
|
|
weslambertandGitHub
|
a01b0e44e1
|
Merge pull request #454 from Security-Onion-Solutions/es_template_fix
Add message field
|
2020-03-23 23:39:44 -04:00 |
|
|
weslambertandGitHub
|
ece7e139f2
|
Add message
|
2020-03-23 23:39:15 -04:00 |
|
|
weslambertandGitHub
|
126913e41b
|
Merge pull request #453 from Security-Onion-Solutions/fix/kibana_config_load
Fix/kibana config load
|
2020-03-23 23:24:09 -04:00 |
|
|
weslambertandGitHub
|
f5e932ab58
|
Re-enable load script
|
2020-03-23 23:23:32 -04:00 |
|
|
weslambertandGitHub
|
1a44b744f7
|
Update so-kibana-config-load
|
2020-03-23 23:23:04 -04:00 |
|
|
weslambertandGitHub
|
1c153b9081
|
Fix path
|
2020-03-23 23:09:00 -04:00 |
|
|
weslambertandGitHub
|
5207ca71c9
|
Merge pull request #452 from Security-Onion-Solutions/fix/remove_dupe
Update init.sls
|
2020-03-23 17:07:50 -04:00 |
|
|
weslambertandGitHub
|
951a087c20
|
Update init.sls
|
2020-03-23 17:07:18 -04:00 |
|
|
weslambertandGitHub
|
2ae3ff7490
|
Merge pull request #451 from Security-Onion-Solutions/fix/saved_objects_config
Fix/saved objects config
|
2020-03-23 15:58:20 -04:00 |
|
|
Wes Lambert
|
0b6ff18a0d
|
change default route
|
2020-03-23 19:57:41 +00:00 |
|
|
Wes Lambert
|
fe0ab0965a
|
move saved_objects
|
2020-03-23 19:55:07 +00:00 |
|
|
weslambertandGitHub
|
79feee1dd1
|
Merge pull request #449 from Security-Onion-Solutions/fix/kibana_master
Fix master and remark config load
|
2020-03-23 15:36:38 -04:00 |
|
|
weslambertandGitHub
|
8edecfceb9
|
Fix master and remark config load
|
2020-03-23 15:36:12 -04:00 |
|
|
weslambertandGitHub
|
c8345753ac
|
Merge pull request #447 from Security-Onion-Solutions/fix/kibana_state
Fix/kibana state
|
2020-03-23 15:17:04 -04:00 |
|
|
weslambertandGitHub
|
8e9cffad4a
|
Update init.sls
|
2020-03-23 15:15:05 -04:00 |
|
|
weslambertandGitHub
|
2a5ab3492d
|
Update init.sls
|
2020-03-23 15:14:42 -04:00 |
|
|
weslambertandGitHub
|
9c29f39cc1
|
Merge pull request #446 from Security-Onion-Solutions/fix/kibana_docker_image
Update init.sls
|
2020-03-23 14:50:54 -04:00 |
|
|
weslambertandGitHub
|
8d0659c200
|
Update init.sls
|
2020-03-23 14:50:34 -04:00 |
|
|
weslambertandGitHub
|
c1e3a00d22
|
Merge pull request #445 from Security-Onion-Solutions/fix/kibana_config
more Kibana config
|
2020-03-23 14:12:11 -04:00 |
|
|
Wes Lambert
|
a43154e0eb
|
more Kibana config
|
2020-03-23 18:07:12 +00:00 |
|
|
weslambertandGitHub
|
029c1791a2
|
Merge pull request #438 from Security-Onion-Solutions/fix/elastic_fixes
Fix/elastic fixes
|
2020-03-18 16:18:55 -04:00 |
|
|
Wes Lambert
|
7a71a2c459
|
removing mapping types
|
2020-03-18 20:17:57 +00:00 |
|
|
Wes Lambert
|
5072095eeb
|
removing mapping types
|
2020-03-18 20:15:10 +00:00 |
|
|
Wes Lambert
|
150eaf59fd
|
don't load FB template
|
2020-03-18 20:05:42 +00:00 |
|
|
weslambertandGitHub
|
8bd3c3f333
|
Merge pull request #435 from Security-Onion-Solutions/fix/index_names
fix index names
|
2020-03-18 12:45:01 -04:00 |
|
|
Wes Lambert
|
fcc5c306ea
|
fix index names
|
2020-03-18 16:42:06 +00:00 |
|
|
weslambertandGitHub
|
0d3280feb7
|
Merge pull request #432 from Security-Onion-Solutions/fix/template
fix strelka pattern
|
2020-03-18 09:52:24 -04:00 |
|
|
Wes Lambert
|
29a4932785
|
fix strelka pattern
|
2020-03-18 13:47:22 +00:00 |
|
|
weslambertandGitHub
|
597f746ccb
|
Merge pull request #431 from Security-Onion-Solutions/fix/elastic_changes
Fix/elastic changes
|
2020-03-17 17:32:05 -04:00 |
|
|
Wes Lambert
|
4eac285fd9
|
change soversion
|
2020-03-17 21:31:19 +00:00 |
|
|
Wes Lambert
|
70f109af86
|
elastic changes
|
2020-03-17 21:29:28 +00:00 |
|
|
weslambertandGitHub
|
bfefbe247f
|
Merge pull request #430 from Security-Onion-Solutions/kibana_7_dark_mode
UI Dark Mode
|
2020-03-17 12:19:56 -04:00 |
|
|
weslambertandGitHub
|
272649f330
|
UI Dark Mode
|
2020-03-17 12:19:27 -04:00 |
|
|
weslambertandGitHub
|
caeef9c903
|
Merge pull request #429 from Security-Onion-Solutions/kibana_7
Update config.json
|
2020-03-17 11:51:29 -04:00 |
|
|
weslambertandGitHub
|
113fbdb863
|
Update config.json
|
2020-03-17 11:50:53 -04:00 |
|
|
weslambertandGitHub
|
367626c65e
|
Merge pull request #428 from Security-Onion-Solutions/more_ecs
More ecs
|
2020-03-17 11:23:19 -04:00 |
|
|
Wes Lambert
|
a5ff21c528
|
remove agent field for non-Wazuh logs
|
2020-03-17 15:20:46 +00:00 |
|
|
Wes Lambert
|
b80e7fedcb
|
remove agent field for non-Wazuh logs
|
2020-03-17 15:20:31 +00:00 |
|
|
Wes Lambert
|
488858f8bc
|
remove beat field removal
|
2020-03-17 15:19:08 +00:00 |
|
|
Wes Lambert
|
8bea56eccf
|
change prospectors to inputs
|
2020-03-17 15:17:52 +00:00 |
|
|
Wes Lambert
|
faea67c9cf
|
update env vars
|
2020-03-17 15:17:13 +00:00 |
|
|
Wes Lambert
|
5ed3dbff39
|
Fix template name
|
2020-03-17 15:15:01 +00:00 |
|
|
weslambertandGitHub
|
85f5c53b51
|
Merge pull request #425 from Security-Onion-Solutions/fix/template_script
Fix/template script
|
2020-03-14 20:36:17 -04:00 |
|
|
Wes Lambert
|
81da44b85d
|
fix Logstash Eval SLS
|
2020-03-15 00:32:29 +00:00 |
|
|
Wes Lambert
|
26c4d453d3
|
Add ES templates script
|
2020-03-15 00:30:59 +00:00 |
|
|
weslambertandGitHub
|
775066489a
|
Merge pull request #424 from Security-Onion-Solutions/ecs_parsing
ECS parsing
|
2020-03-14 08:11:15 -04:00 |
|
|
Wes Lambert
|
85c1873f4d
|
switch logging to error
|
2020-03-14 12:10:06 +00:00 |
|
|
Wes Lambert
|
b6ba8e483d
|
update ES init
|
2020-03-14 12:06:32 +00:00 |
|
|
Wes Lambert
|
d2016d3ff2
|
modify Filebeat config
|
2020-03-14 12:05:16 +00:00 |
|