Wes Lambert
|
e70db05a0f
|
Filebeat - Modify config for Wazuh alerts
|
2018-12-10 19:50:55 +00:00 |
|
Wes Lambert
|
cb68f502ee
|
Wazuh - Changes to init.sls
|
2018-12-10 19:49:14 +00:00 |
|
Wes Lambert
|
0a33204726
|
Setup - Only add Wazuh repo
|
2018-12-07 18:16:03 +00:00 |
|
Wes Lambert
|
e6469d505a
|
Wazuh - initial init.sls
|
2018-12-07 18:13:42 +00:00 |
|
Wes Lambert
|
6a9a537cf8
|
Wazuh - Remove filebeat.yml
|
2018-12-07 13:39:10 +00:00 |
|
Wes Lambert
|
e355503324
|
Filebeat - Update for Wazuh logs
|
2018-12-07 13:38:31 +00:00 |
|
Wes Lambert
|
e11aadf730
|
Wazuh - agent install for CentOS
|
2018-12-07 13:36:11 +00:00 |
|
Wes Lambert
|
f5e2b7f210
|
Setup - Adjust to prevent unary operator error
|
2018-12-07 04:22:11 +00:00 |
|
Wes Lambert
|
6bfb813cdf
|
Setup - Adjust syntax
|
2018-12-07 04:18:28 +00:00 |
|
Wes Lambert
|
e21c67f553
|
Setup - Fix typo
|
2018-12-07 04:14:30 +00:00 |
|
Wes Lambert
|
bccb83fae9
|
Setup - Install Wazuh agent
|
2018-12-07 03:57:31 +00:00 |
|
Wes Lambert
|
e335be7476
|
Elastalert - Remove config from ES Module
|
2018-12-06 05:44:09 +00:00 |
|
Wes Lambert
|
d310f163e8
|
Elastalert - Enable for Master/Eval
|
2018-12-06 05:43:15 +00:00 |
|
Wes Lambert
|
fe1c771f21
|
Elastalert - Initial Config
|
2018-12-06 05:42:30 +00:00 |
|
Wes Lambert
|
52dfe2500a
|
Cleanup - Remove pulledpork module
|
2018-12-06 03:14:03 +00:00 |
|
Wes Lambert
|
e7be61bd28
|
Cleanup - Remove somaster module
|
2018-12-06 03:13:39 +00:00 |
|
Wes Lambert
|
3ffdcd81d6
|
Redis - Don't start if using Eval Mode
|
2018-12-06 03:07:16 +00:00 |
|
Wes Lambert
|
5c28576674
|
Logtash - Update input for Eval Mode
|
2018-12-06 02:38:59 +00:00 |
|
Wes Lambert
|
6399889e60
|
Merge branch 'master' of https://github.com/toosmooth/securityonion-saltstack
|
2018-12-05 16:13:40 +00:00 |
|
Wes Lambert
|
88c144a250
|
Curator - Fix path for master pillar additions
|
2018-12-05 15:51:10 +00:00 |
|
Wes Lambert
|
aa32a55b4e
|
Curator - Update Master pillar in setup
|
2018-12-05 15:16:14 +00:00 |
|
Wes Lambert
|
3461c7e226
|
Curator - Update config for Eval Mode
|
2018-12-05 15:14:36 +00:00 |
|
Wes Lambert
|
7a260a4876
|
Curator - Move files to /usr/sbin
|
2018-12-05 13:24:16 +00:00 |
|
Wes Lambert
|
90e3b6912c
|
Curator - Remove Curator files from ES module
|
2018-12-05 13:14:19 +00:00 |
|
Wes Lambert
|
2e73a6fb02
|
Curator - Update top.sls for Curator
|
2018-12-05 13:13:15 +00:00 |
|
Wes Lambert
|
1ccece70ef
|
Curator - Remove config from ES
|
2018-12-05 13:10:29 +00:00 |
|
Wes Lambert
|
ce70e590a1
|
Curator - break out from ES and add config
|
2018-12-05 13:09:07 +00:00 |
|
Wes Lambert
|
4c67695cd0
|
Setup - Set cur_close_days and log_size_limit
|
2018-12-05 13:06:29 +00:00 |
|
Wes Lambert
|
7399172450
|
Merge branch 'master' of https://github.com/toosmooth/securityonion-saltstack
|
2018-11-30 15:39:38 +00:00 |
|
Wes Lambert
|
056e22dd11
|
Logstash - Update template for Suricata metadata fields
|
2018-11-30 13:22:31 +00:00 |
|
Wes Lambert
|
05accf3017
|
Logstash - Output config update for IDS type
|
2018-11-30 13:17:53 +00:00 |
|
Wes Lambert
|
2695a8e1a7
|
Filebeat - Modify config for IDS type
|
2018-11-30 13:15:35 +00:00 |
|
Wes Lambert
|
53284a7173
|
Bro - Switch logs to JSON format
|
2018-11-30 13:13:55 +00:00 |
|
Wes Lambert
|
61802f7d62
|
adjust logging options
|
2018-11-03 15:17:38 +00:00 |
|
Wes Lambert
|
a531dd6e52
|
update template for eve.json output
|
2018-11-03 15:11:49 +00:00 |
|