CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-07-14 21:03:10 +02:00
Code Issues Packages Projects Releases Wiki Activity
1,164 Commits 40 Branches 127 Tags
f494ffcebe3be9dcb26fefd7ebae3cfda0a794b2
Commit Graph
71 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Wes Lambert cdfc3a15ad osquery: fix host field conflict 2019-01-16 19:25:06 +00:00
Wes Lambert 04cdd2d976 Redis - Re-enable for Fleet live queries 2018-12-18 15:45:25 +00:00
Wes Lambert 9930aac556 Wazuh - Add conditional for config profile 2018-12-14 21:28:46 +00:00
Wes Lambert 172c9e0593 Logstash - Wazuh parsing updates 2018-12-14 18:00:19 +00:00
Wes Lambert 2f12c36c87 Setup - Clean up old Wazuh stuff and move Curator config to SN Adv Mode 2018-12-14 14:07:20 +00:00
Wes Lambert 09f5c24251 SSL - Ensure storage node gets FB cert 2018-12-14 14:05:35 +00:00
Wes Lambert 55a426c347 Cleanup - Lowercase SENSOR 2018-12-14 03:27:13 +00:00
Wes Lambert 9ce41f81b9 Setup - Make sensor minion config consistent 2018-12-14 00:12:37 +00:00
Wes Lambert c7dcbb8dcb Merge remote-tracking branch 'upstream/master' 2018-12-13 23:57:24 +00:00
Wes Lambert a662badc5b Firewall - Fix stuff for sensor 2018-12-13 23:52:15 +00:00
Wes Lambert 1d9fae304c Setup - Get Curator disk size when /nsm not present 2018-12-13 22:01:21 +00:00
Wes Lambert bd04dc45a3 Wazuh - Fix Jinja 2018-12-13 18:30:04 +00:00
Wes Lambert 75ed258d19 Firewall - Fix Wazuh IP logic for sensors 2018-12-13 17:57:22 +00:00
Wes Lambert 4db52ec865 Wazuh - Add logic for sensors 2018-12-13 17:56:51 +00:00
Wes Lambert 5e23859557 Salt - Add Wazuh to other roles 2018-12-13 17:34:19 +00:00
Wes Lambert 62067f37cf Wazuh - Fix agent ip for storage nodes 2018-12-13 17:33:12 +00:00
Wes Lambert d13e7559fe Filebeat - Enabled for master and only enable Bro/Suri inputs when needed 2018-12-13 17:32:03 +00:00
Wes Lambert 41e9c4c7e0 Logstash - Alter input for Wazuh logs 2018-12-12 20:52:18 +00:00
Wes Lambert 54c35cdc0d Filebeat - Add Wazuh archive logs 2018-12-12 20:51:41 +00:00
Wes Lambert 8496834f8b Wazuh - Re-order top.sls so Filebeat does not overrite Wazuh logs 2018-12-12 15:48:59 +00:00
Wes Lambert 9d86744e07 Filebeat - Fix Wazuh alerts path 2018-12-12 15:19:51 +00:00
Wes Lambert e20ab3b407 Filebeat - Config for Wazuh alerts 2018-12-12 14:48:17 +00:00
Wes Lambert 5822842d2e Wazuh - Add sleep to wait for API 2018-12-12 13:36:13 +00:00
Wes Lambert a99ec40506 Setup - Remark Wazuh agent config 2018-12-12 13:10:27 +00:00
Wes Lambert 8404897fe3 Wazuh - Move agent config to init.sls 2018-12-12 06:05:13 +00:00
Wes Lambert 823a589fae Wazuh - Set mode for agent registration script 2018-12-12 04:01:13 +00:00
Wes Lambert 1a4a7382e2 Wazuh - Fix Wazuh agent registration script name 2018-12-12 03:18:55 +00:00
Wes Lambert 86a72984c7 Setup - Add auth pillar to eval mode 2018-12-12 02:58:09 +00:00
Wes Lambert 113f030873 Wazuh - Add agent register script to init.sls 2018-12-12 02:26:38 +00:00
Wes Lambert 634c435ad6 Setup - Configure Wazuh agent 2018-12-12 01:51:30 +00:00
Wes Lambert 9a021164ac Wazuh - Fix port, add agent conf, and agent registration script 2018-12-12 01:42:05 +00:00
Wes Lambert 223237f8c2 Wazuh - Expose both UDP and TCP ports 2018-12-11 19:45:56 +00:00
Wes Lambert 6cdf1ef857 Firewall - Add rules for Wazuh Manager 2018-12-11 19:44:32 +00:00
Wes Lambert 0f5fbadaf5 Filebeat - Switch negation to equals 2018-12-10 20:17:41 +00:00
Wes Lambert 10d6c0f5a9 Setup - Remark Wazuh user section completely 2018-12-10 19:55:53 +00:00
Wes Lambert 2544984433 Wazuh - add to top.sls for Eval Mode 2018-12-10 19:51:57 +00:00
Wes Lambert e70db05a0f Filebeat - Modify config for Wazuh alerts 2018-12-10 19:50:55 +00:00
Wes Lambert cb68f502ee Wazuh - Changes to init.sls 2018-12-10 19:49:14 +00:00
Wes Lambert 0a33204726 Setup - Only add Wazuh repo 2018-12-07 18:16:03 +00:00
Wes Lambert e6469d505a Wazuh - initial init.sls 2018-12-07 18:13:42 +00:00
Wes Lambert 6a9a537cf8 Wazuh - Remove filebeat.yml 2018-12-07 13:39:10 +00:00
Wes Lambert e355503324 Filebeat - Update for Wazuh logs 2018-12-07 13:38:31 +00:00
Wes Lambert e11aadf730 Wazuh - agent install for CentOS 2018-12-07 13:36:11 +00:00
Wes Lambert f5e2b7f210 Setup - Adjust to prevent unary operator error 2018-12-07 04:22:11 +00:00
Wes Lambert 6bfb813cdf Setup - Adjust syntax 2018-12-07 04:18:28 +00:00
Wes Lambert e21c67f553 Setup - Fix typo 2018-12-07 04:14:30 +00:00
Wes Lambert bccb83fae9 Setup - Install Wazuh agent 2018-12-07 03:57:31 +00:00
Wes Lambert e335be7476 Elastalert - Remove config from ES Module 2018-12-06 05:44:09 +00:00
Wes Lambert d310f163e8 Elastalert - Enable for Master/Eval 2018-12-06 05:43:15 +00:00
Wes Lambert fe1c771f21 Elastalert - Initial Config 2018-12-06 05:42:30 +00:00
Wes Lambert 52dfe2500a Cleanup - Remove pulledpork module 2018-12-06 03:14:03 +00:00
Wes Lambert e7be61bd28 Cleanup - Remove somaster module 2018-12-06 03:13:39 +00:00
Wes Lambert 3ffdcd81d6 Redis - Don't start if using Eval Mode 2018-12-06 03:07:16 +00:00
Wes Lambert 5c28576674 Logtash - Update input for Eval Mode 2018-12-06 02:38:59 +00:00
Wes Lambert 6399889e60 Merge branch 'master' of https://github.com/toosmooth/securityonion-saltstack 2018-12-05 16:13:40 +00:00
Wes Lambert 88c144a250 Curator - Fix path for master pillar additions 2018-12-05 15:51:10 +00:00
Wes Lambert aa32a55b4e Curator - Update Master pillar in setup 2018-12-05 15:16:14 +00:00
Wes Lambert 3461c7e226 Curator - Update config for Eval Mode 2018-12-05 15:14:36 +00:00
Wes Lambert 7a260a4876 Curator - Move files to /usr/sbin 2018-12-05 13:24:16 +00:00
Wes Lambert 90e3b6912c Curator - Remove Curator files from ES module 2018-12-05 13:14:19 +00:00
Wes Lambert 2e73a6fb02 Curator - Update top.sls for Curator 2018-12-05 13:13:15 +00:00
Wes Lambert 1ccece70ef Curator - Remove config from ES 2018-12-05 13:10:29 +00:00
Wes Lambert ce70e590a1 Curator - break out from ES and add config 2018-12-05 13:09:07 +00:00
Wes Lambert 4c67695cd0 Setup - Set cur_close_days and log_size_limit 2018-12-05 13:06:29 +00:00
Wes Lambert 7399172450 Merge branch 'master' of https://github.com/toosmooth/securityonion-saltstack 2018-11-30 15:39:38 +00:00
Wes Lambert 056e22dd11 Logstash - Update template for Suricata metadata fields 2018-11-30 13:22:31 +00:00
Wes Lambert 05accf3017 Logstash - Output config update for IDS type 2018-11-30 13:17:53 +00:00
Wes Lambert 2695a8e1a7 Filebeat - Modify config for IDS type 2018-11-30 13:15:35 +00:00
Wes Lambert 53284a7173 Bro - Switch logs to JSON format 2018-11-30 13:13:55 +00:00
Wes Lambert 61802f7d62 adjust logging options 2018-11-03 15:17:38 +00:00
Wes Lambert a531dd6e52 update template for eve.json output 2018-11-03 15:11:49 +00:00