 Mike ReevesandGitHub
|
f7043f3f62
|
Update init.sls
|
2022-10-31 15:25:38 -04:00 |
|
 Mike ReevesandGitHub
|
bf41f2984a
|
Update init.sls
|
2022-10-31 14:58:55 -04:00 |
|
 Mike ReevesandGitHub
|
86ca3602f3
|
Update init.sls
|
2022-10-31 14:44:01 -04:00 |
|
 Mike ReevesandGitHub
|
416c28fded
|
Update init.sls
|
2022-10-31 14:42:23 -04:00 |
|
 Mike ReevesandGitHub
|
297373877a
|
Update init.sls
|
2022-10-31 14:36:40 -04:00 |
|
 Mike ReevesandGitHub
|
db9b93a96c
|
Update init.sls
|
2022-10-31 14:35:02 -04:00 |
|
 Mike ReevesandGitHub
|
5635375d8d
|
Update init.sls
|
2022-10-31 14:30:11 -04:00 |
|
 Mike ReevesandGitHub
|
07e72e4013
|
Update filecheck
|
2022-10-31 13:47:49 -04:00 |
|
 Mike ReevesandGitHub
|
518d2aaa9c
|
Update filecheck.yaml
|
2022-10-31 13:45:00 -04:00 |
|
 Mike ReevesandGitHub
|
e93e2995b7
|
Update filecheck
|
2022-10-31 13:42:18 -04:00 |
|
 Mike ReevesandGitHub
|
d2eb61a830
|
Update filecheck.yaml
|
2022-10-31 13:41:45 -04:00 |
|
 Mike ReevesandGitHub
|
4c5a2c0610
|
Update filecheck
|
2022-10-31 13:36:42 -04:00 |
|
Mike Reeves
|
e9e7362005
|
Add Filechecks
|
2022-10-31 12:57:08 -04:00 |
|
 Peter Di GiorgioandGitHub
|
b97c822800
|
Add zeek.bacnet_discovery and zeek.bacnet_property
|
2022-10-27 15:40:52 -07:00 |
|
 Peter Di GiorgioandGitHub
|
71e3b2d1fb
|
Create zeek.bacnet
|
2022-10-27 15:40:07 -07:00 |
|
 Peter Di GiorgioandGitHub
|
326ba710ce
|
Add logs for bacnet
bacnet
bacnet_discovery
bacnet_property
|
2022-10-27 15:38:32 -07:00 |
|
 Peter Di GiorgioandGitHub
|
1ea6feca37
|
Add icsnpp-bacnet
|
2022-10-27 15:31:38 -07:00 |
|
 Peter Di GiorgioandGitHub
|
c524442172
|
Merge pull request #9008 from Security-Onion-Solutions/master
Synch Foxtrot with 2.3.181 Release
|
2022-10-26 13:10:01 -07:00 |
|
 weslambertandGitHub
|
8e4d0db738
|
Merge pull request #9002 from Security-Onion-Solutions/fix/remove_ja3er_references
Remove JA3er references
|
2022-10-26 10:21:54 -04:00 |
|
 weslambertandGitHub
|
a170c194c8
|
Remove JA3er references
|
2022-10-26 10:18:10 -04:00 |
|
 Peter Di GiorgioandGitHub
|
2b51d72585
|
Rename zeek.read_write_multiple_registers to zeek.modbus_read_write_multiple_registers
|
2022-10-25 17:20:01 -07:00 |
|
 weslambertandGitHub
|
0d71006f40
|
Merge pull request #8997 from Security-Onion-Solutions/fix/sensoroni_analyzers_pyyaml_wheel_name
Fix PyYAML .whl file name and remove JA3er analyzer
|
2022-10-25 14:57:35 -04:00 |
|
Wes
|
a91e3b601c
|
Remove JA3er since it is no longer a valid service
|
2022-10-25 18:48:37 +00:00 |
|
Wes
|
4940421297
|
Add PyYAML .whl files back since they were 'deleted' in the previous commit
|
2022-10-25 18:47:51 +00:00 |
|
Wes
|
58b4a8fbab
|
Change PyYAML .whl file name to comply with Joliet's 240-character limit
|
2022-10-25 18:47:02 +00:00 |
|
 Mike ReevesandGitHub
|
bd7e12f682
|
Merge pull request #8952 from Njinx/dev
FEATURE: so-pcap-export can run without needing to be attached to a TTY
|
2022-10-25 14:38:48 -04:00 |
|
 Mike ReevesandGitHub
|
64e43f07b9
|
Merge pull request #8993 from Security-Onion-Solutions/TOoSmOotH-patch-3
Update VERSION
|
2022-10-25 14:36:45 -04:00 |
|
 Mike ReevesandGitHub
|
2d84e2e977
|
Update VERSION
|
2022-10-25 14:35:52 -04:00 |
|
 Mike ReevesandGitHub
|
465a1a82d7
|
Merge pull request #8981 from Security-Onion-Solutions/dev
2.3.181
2.3.181-20221021
|
2022-10-25 14:30:50 -04:00 |
|
 Peter Di GiorgioandGitHub
|
61d36d584f
|
Add Modbus, DNP3, BZAR, and oui-logging
|
2022-10-25 07:10:52 -07:00 |
|
 Peter Di GiorgioandGitHub
|
2d343110cc
|
Add DNP3 and Modbus extensions to zeeklogs.sls
|
2022-10-25 07:09:11 -07:00 |
|
 Peter Di GiorgioandGitHub
|
4502e2c260
|
Remove logs for OT parsers
|
2022-10-24 23:16:18 -07:00 |
|
 Peter Di GiorgioandGitHub
|
beb67847f9
|
Remove modbus,bzar,dnp3,oui-logging
|
2022-10-24 23:14:32 -07:00 |
|
 Peter Di GiorgioandGitHub
|
9cdc29c482
|
Fix Syntax for zeeklogs pillar
|
2022-10-24 14:30:15 -07:00 |
|
 weslambertandGitHub
|
292f66138b
|
Merge pull request #8983 from Security-Onion-Solutions/revert-8982-fix/sensoroni_analyzers_pyyaml_wheel_name
Revert "Change PyYAML .whl file name to comply with Joliet's 240-character limit/threshold"
|
2022-10-24 16:49:19 -04:00 |
|
 weslambertandGitHub
|
0087768946
|
Revert "Change PyYAML .whl file name to comply with Joliet's 240-character limit/threshold"
|
2022-10-24 16:47:30 -04:00 |
|
 Peter Di GiorgioandGitHub
|
01d177366d
|
Fix Zeek Pillar
|
2022-10-24 12:00:43 -07:00 |
|
 weslambertandGitHub
|
712340a027
|
Merge pull request #8982 from Security-Onion-Solutions/fix/sensoroni_analyzers_pyyaml_wheel_name
Change PyYAML .whl file name to comply with Joliet's 240-character limit/threshold
|
2022-10-24 14:14:45 -04:00 |
|
Wes
|
1caac3f0b0
|
Add PyYAML .whl files back since they were 'deleted' in the previous commit.
|
2022-10-24 18:06:19 +00:00 |
|
Wes
|
54a5dd6cbd
|
Change name of PyYAML .whl file to remain under Joliet's 240-character limit/threshold
|
2022-10-24 18:05:15 +00:00 |
|
 Mike ReevesandGitHub
|
6570177b0c
|
Merge pull request #8979 from Security-Onion-Solutions/2.3.181
2.3.181
|
2022-10-24 11:39:08 -04:00 |
|
Mike Reeves
|
f7ed992f24
|
2.3.181
|
2022-10-24 11:33:31 -04:00 |
|
Mike Reeves
|
4a18f8d18a
|
2.3.181
|
2022-10-24 11:32:19 -04:00 |
|
 Peter Di GiorgioandGitHub
|
24cf481f4a
|
Merge pull request #8973 from lock-wire/patch-3
Add Modbus, DNP3, BZAR, and oui-logging
|
2022-10-21 18:06:13 -07:00 |
|
 Peter Di GiorgioandGitHub
|
cd4e0c1f8e
|
Add DNP3 and Modbus extensions to zeeklogs.sls
Add DNP3 and Modbus extenstions to zeeklogs to ensure filebeat.yml is configured properly to ship lots. Need to move these behind the OT flag.
|
2022-10-21 14:19:21 -07:00 |
|
 Peter Di GiorgioandGitHub
|
4a60310dc8
|
Add Modbus, DNP3, BZAR, and oui-logging
This is an initial proof of concept. Need to migrate these entries behind a flag.
|
2022-10-21 14:04:40 -07:00 |
|
 weslambertandGitHub
|
930620fce6
|
Merge pull request #8971 from lock-wire/patch-2
Add Ingest pipeline for Modbus and DNP3 extensions
|
2022-10-21 16:28:52 -04:00 |
|
 Peter Di GiorgioandGitHub
|
7a60d0987c
|
Update zeek.conn to include client.oui
|
2022-10-21 13:02:01 -07:00 |
|
 Peter Di GiorgioandGitHub
|
9ac06057c1
|
Create zeek.read_write_multiple_registers
|
2022-10-21 13:00:12 -07:00 |
|
 Peter Di GiorgioandGitHub
|
e5c69c3236
|
Create zeek.modbus_mask_write_register
|
2022-10-21 12:58:36 -07:00 |
|