CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-20 16:03:06 +01:00
Code Issues Packages Projects Releases Wiki Activity
3,639 Commits 18 Branches 120 Tags
f05e366d492f11f024877f2b4cbf38f90fa95aaf
Commit Graph

2075 Commits

Author SHA1 Message Date
Mike Reeves
f05e366d49 Fix salt upgrade script 2020-07-06 15:56:55 -04:00
Mike Reeves
be3390a796 Fix Logstash state 2020-07-06 15:53:21 -04:00
Mike Reeves
623c37f1f5 Merge remote-tracking branch 'remotes/origin/dev' into issue/142 2020-07-06 14:35:46 -04:00
bryant-treacle
0b10b775c5 Additional so-container scripts 2020-07-02 07:02:35 +00:00
Josh Brower
518c8db3de Merge pull request #922 from Security-Onion-Solutions/feature/low-level-alerts 
Initial commit - Low Level Alerts
 2020-07-02 12:18:03 -04:00
Josh Brower
69ace6fbfa Initial commit - Low Level Alerts 2020-07-02 12:16:56 -04:00
Jason Ertel
cf6a229f51 Import now requires execution on a sensor node due to the need for zeek and suricata; Automatically stop curator if curator is installed 2020-07-02 12:07:30 -04:00
William Wernert
c7a3cc9c17 [fix][revert] Change source in so-allow to correct path 2020-07-02 08:58:14 -04:00
Jason Ertel
4cedacf8fd Improve curator verbiage in so-import-pcap 2020-07-02 06:01:17 -04:00
Josh Brower
7811ea5d4c Delete playbook_db_init.sql.backup 2020-07-02 05:32:35 -04:00
Josh Brower
0f915ec85e Merge pull request #915 from Security-Onion-Solutions/feature/playbook-updates 
Feature/playbook updates
 2020-07-02 05:31:30 -04:00
Jason Ertel
ac01b8de4b Stop curator when directed on PCAP imports 2020-07-01 22:04:07 -04:00
Doug Burks
98cfba18e9 fix zeek.ftp description 2020-07-01 20:27:40 -04:00
Doug Burks
f6adf4ed56 fix zeek.smb_mapping description 2020-07-01 20:26:51 -04:00
Doug Burks
2cbd5ffe61 fix zeek.ssh description 2020-07-01 20:26:06 -04:00
Jason Ertel
e3126064e8 Improve usage instructions for so-import-pcap 2020-07-01 17:58:02 -04:00
Jason Ertel
96e93b012d Adjust imports for filebeat configuration to ensure import data is placed into ES 2020-07-01 17:18:01 -04:00
Josh Brower
d893aa0032 Playbook Updates 2020-07-01 16:48:07 -04:00
Jason Ertel
d6feafb12a Correct indentation in filebeat.yaml 2020-07-01 15:39:23 -04:00
Mike Reeves
ab42126d8e Add logstash_settings pillar 2020-07-01 15:25:35 -04:00
Mike Reeves
f580da5d56 Update 9999_output_redis.conf.jinja 2020-07-01 14:45:54 -04:00
Mike Reeves
70e4ce3e98 Add batch to output 2020-07-01 14:38:51 -04:00
Josh Patterson
549fd93cba Merge pull request #912 from Security-Onion-Solutions/issue/642 
Issue/642
 2020-07-01 13:44:49 -04:00
m0duspwnens
fd939a06b9 whitespace cleanup 2020-07-01 13:40:40 -04:00
m0duspwnens
38db512eda fix spacing 2020-07-01 13:29:19 -04:00
m0duspwnens
4e7e19af54 pillarize zeek node.cfg. change reference from bro to zeek. 2020-07-01 13:26:27 -04:00
William Wernert
7bb97f2b2d [fix] Remove "Panel Title" from Kibana CPU graph 
Resolves #874
 2020-07-01 11:12:21 -04:00
Jason Ertel
a3deb868ad Improve filebeat config indentation 2020-06-30 14:57:34 -04:00
Jason Ertel
930f15eea5 Introduce so-import-pcap tool - WIP 2020-06-30 14:56:08 -04:00
William Wernert
8d624e6ade [fix] Move navigatordefaultlayer file.managed state to nginx sls 2020-06-30 10:53:10 -04:00
Josh Brower
1c0443458c so-allow spacing fix 2020-06-30 08:13:00 -04:00
Wes Lambert
84e2965fef Addl krb fix 2020-06-30 03:06:01 +00:00
Wes Lambert
bf8798f1d1 Fix krb client/server cert subject parsing 2020-06-30 03:04:01 +00:00
Wes Lambert
8f5da66335 Add null safe operator for query name 2020-06-30 03:02:38 +00:00
m0duspwnens
0f9d8024f8 add sensoroni to so-status output for sensors - https://github.com/Security-Onion-Solutions/securityonion/issues/878 2020-06-29 16:23:04 -04:00
Josh Patterson
c73071c95e Merge pull request #904 from Security-Onion-Solutions/issue/583 
Issue/583
 2020-06-29 16:17:22 -04:00
m0duspwnens
efaf41107c update description in localrules/local.rules for idstools 2020-06-29 16:14:36 -04:00
m0duspwnens
67f2eedad1 cleanup whitespace in idstools enable/disable.conf 2020-06-29 16:11:30 -04:00
m0duspwnens
fe8df22063 cleanup whitespace in idstools enable/disable.conf 2020-06-29 16:03:14 -04:00
William Wernert
23c0363899 [fix] Reference correct directory in nginx sls and remove navigator sls 2020-06-29 15:54:17 -04:00
William Wernert
b97ecd2d7a Merge branch 'dev' of github.com:Security-Onion-Solutions/securityonion-saltstack into dev 2020-06-29 15:53:29 -04:00
m0duspwnens
d7580fe6a0 fix suricata state if suripins or suri procs arent set 2020-06-29 15:38:05 -04:00
William Wernert
8e15f858dd Merge branch 'dev' of github.com:Security-Onion-Solutions/securityonion-saltstack into dev 
# Conflicts:
#	salt/common/tools/sbin/so-allow
 2020-06-29 15:14:12 -04:00
Wes Lambert
ed60d48c81 Add ES REST API option for so-allow 2020-06-29 18:49:16 +00:00
William Wernert
8cbccb656d [fix] Apply shellcheck fixes 2020-06-29 11:32:25 -04:00
William Wernert
b01bdf35f9 [fix] Remove port binding from telegraf docker state 2020-06-29 11:31:44 -04:00
m0duspwnens
8ee2142de4 pillarize idstools - https://github.com/Security-Onion-Solutions/securityonion/issues/583 2020-06-29 11:21:47 -04:00
Mike Reeves
378ad97e7b Disabled socket listener 2020-06-29 11:16:19 -04:00
Wes Lambert
9ac85cf674 Add Stelka mgmt scripts 2020-06-29 13:09:14 +00:00
weslambert
6f6e8a8853 Merge pull request #897 from Security-Onion-Solutions/fix/strelka_rules 
Fix/strelka rules
 2020-06-26 16:43:21 -04:00