m0duspwnens
|
ad651dbea4
|
fix grafana for zeek
|
2020-02-04 17:21:13 -05:00 |
|
Josh Patterson
|
8148be6ec8
|
Merge pull request #301 from Security-Onion-Solutions/quickfix/zeek
fix zeek state
|
2020-02-03 11:17:39 -05:00 |
|
m0duspwnens
|
820462e45a
|
fix zeek state
|
2020-02-03 11:15:44 -05:00 |
|
Josh Brower
|
a6a999af95
|
tcpreplay fix
|
2020-02-03 09:59:41 -05:00 |
|
Josh Brower
|
b5bf12f8c8
|
Zeek - bpf fixup
|
2020-01-31 15:06:57 -05:00 |
|
Josh Brower
|
f5efc68825
|
Merge pull request #289 from Security-Onion-Solutions/feature/so-status
feature/so-status
|
2020-01-31 14:02:15 -05:00 |
|
Josh Brower
|
c96a95e526
|
SO Scripts - fixes
|
2020-01-31 12:41:01 -05:00 |
|
m0duspwnens
|
6b580eaba9
|
evalmode fix
|
2020-01-30 17:54:24 -05:00 |
|
m0duspwnens
|
68e7dcfba0
|
evalfix
|
2020-01-30 17:38:48 -05:00 |
|
m0duspwnens
|
88967c2512
|
evalfix
|
2020-01-30 17:36:38 -05:00 |
|
m0duspwnens
|
d94065fa00
|
evalfix
|
2020-01-30 17:09:06 -05:00 |
|
William Wernert
|
025c1972cd
|
Merge pull request #288 from Security-Onion-Solutions/hotfix/auth-init
hotfix/auth-init
|
2020-01-30 16:34:24 -05:00 |
|
Mike Reeves
|
1e0d0d74e1
|
Fix Eval Event Pickup x2
|
2020-01-30 16:16:21 -05:00 |
|
Mike Reeves
|
c32b2726fa
|
Fix Eval Event Pickup
|
2020-01-30 16:10:59 -05:00 |
|
Mike Reeves
|
59d6b7cb8a
|
Add log paths
|
2020-01-30 16:00:57 -05:00 |
|
Mike Reeves
|
048c77695d
|
Fix Filebeat
|
2020-01-30 15:47:51 -05:00 |
|
William Wernert
|
746bd99f99
|
Merge branch 'dev' into feature/so-status
|
2020-01-30 12:41:41 -05:00 |
|
William Wernert
|
f839f38553
|
Fix for jinja error
|
2020-01-30 12:40:39 -05:00 |
|
William Wernert
|
5dec2b1c87
|
Move auth init.sls to docker registry
|
2020-01-30 12:39:09 -05:00 |
|
Mike Reeves
|
21e374c82e
|
Fix SSL State
|
2020-01-30 11:10:52 -05:00 |
|
Josh Brower
|
3fdc5fbef4
|
Dep Bro and enabled Zeek BPF
|
2020-01-30 09:45:02 -05:00 |
|
Wes Lambert
|
3277ca185e
|
Update Zeek config
|
2020-01-29 22:09:32 +00:00 |
|
weslambert
|
eba02ef3b4
|
Merge pull request #279 from Security-Onion-Solutions/features/heavynode
Features/heavynode
|
2020-01-29 17:07:00 -05:00 |
|
m0duspwnens
|
07df8bff7e
|
add filebeat features back
|
2020-01-29 17:00:39 -05:00 |
|
m0duspwnens
|
0d22502072
|
changes to filebeat for heavynode
|
2020-01-29 16:45:04 -05:00 |
|
Josh Brower
|
a75949e062
|
Merge pull request #274 from Security-Onion-Solutions/fix/elastic_clear
so-elastic-clear: Set IP in script
|
2020-01-29 15:49:16 -05:00 |
|
Wes Lambert
|
aa3fc72565
|
Change bro to zeek
|
2020-01-29 18:56:21 +00:00 |
|
m0duspwnens
|
bd5b597aed
|
heavynode
|
2020-01-29 12:56:25 -05:00 |
|
m0duspwnens
|
306cc1127b
|
heavynode
|
2020-01-29 12:56:25 -05:00 |
|
Wes Lambert
|
ef83d812d2
|
Set IP
|
2020-01-29 17:41:56 +00:00 |
|
Josh Brower
|
5213c19e44
|
Suricata - logfile fix
|
2020-01-29 09:30:03 -05:00 |
|
Mike Reeves
|
bd395b8356
|
Update filebeat.yml
|
2020-01-28 22:20:21 -05:00 |
|
weslambert
|
101c2a93d1
|
Merge pull request #269 from Security-Onion-Solutions/feature/so-status
feature/so-status
|
2020-01-28 22:13:47 -05:00 |
|
Josh Brower
|
3925ed52c7
|
Suricata - BPF hotfix
|
2020-01-28 22:02:18 -05:00 |
|
Mike Reeves
|
bf1187ad60
|
Merge pull request #270 from Security-Onion-Solutions/feature/bpf-zeek
Zeek - Initial BPF Support
|
2020-01-28 21:49:03 -05:00 |
|
Mike Reeves
|
357cfcbe78
|
Merge pull request #266 from Security-Onion-Solutions/fix/elastalert_indices
Update config.yaml for Elastalert shard/replica changes
|
2020-01-28 21:47:07 -05:00 |
|
Josh Brower
|
aa2fbc2d53
|
Zeek - Initial BPF support
|
2020-01-28 21:44:42 -05:00 |
|
Mike Reeves
|
745a92f217
|
Merge pull request #259 from Security-Onion-Solutions/fix/wazuh_whitelist
Don't restart when running whitelist script
|
2020-01-28 21:44:06 -05:00 |
|
William Wernert
|
5bd037e88c
|
Initial so-status script
|
2020-01-28 21:42:47 -05:00 |
|
Josh Brower
|
492ad7035b
|
Merge pull request #268 from Security-Onion-Solutions/feature/nsm_clear
Feature/nsm clear
|
2020-01-28 21:01:04 -05:00 |
|
Wes Lambert
|
48ebc5e2e3
|
Fix data checks
|
2020-01-29 01:13:40 +00:00 |
|
Wes Lambert
|
5e0299e7bb
|
Add PCAP stop|start|restart scripts
|
2020-01-29 01:11:22 +00:00 |
|
Wes Lambert
|
41e5c6ae90
|
Add data deletion scripts
|
2020-01-29 00:57:58 +00:00 |
|
Wes Lambert
|
8b415b9db4
|
Update config.yaml for Elastalert shard/replica changes
|
2020-01-28 23:55:06 +00:00 |
|
Mike Reeves
|
149c10435e
|
Merge pull request #264 from Security-Onion-Solutions/feature/bpf-suricata
Suricata - Initial bpf support
|
2020-01-28 18:20:45 -05:00 |
|
Josh Brower
|
86689edf24
|
Merge branch 'dev' into feature/bpf-steno
|
2020-01-28 18:18:17 -05:00 |
|
Josh Brower
|
ae087c5552
|
Steno BPF tweaks
|
2020-01-28 16:53:19 -05:00 |
|
Josh Brower
|
f536e89064
|
Suricata bpf cleanup
|
2020-01-28 16:12:46 -05:00 |
|
Josh Brower
|
8204ffdd05
|
Suricata bpf - docker bind bpf file
|
2020-01-28 15:51:13 -05:00 |
|
Josh Brower
|
5403dab027
|
Suricata - Initial bpf support
|
2020-01-28 15:48:40 -05:00 |
|