 Wes
|
5553be02ac
|
Change how tags are added
|
2023-07-24 21:31:28 +00:00 |
|
|
Wes
|
4efc951eaf
|
Add tags
|
2023-07-24 20:57:39 +00:00 |
|
|
Wes
|
d84dbf9535
|
Add fleet
|
2023-07-24 18:53:52 +00:00 |
|
|
Wes
|
de7b7ff989
|
Add endpoint
|
2023-07-24 18:35:02 +00:00 |
|
 weslambertandGitHub
|
be254b15f2
|
Merge pull request #10804 from Security-Onion-Solutions/fix/fleet_logging
Fleet logging
|
2023-07-20 15:51:56 -04:00 |
|
|
weslambertandGitHub
|
83e1e3efdc
|
Merge pull request #10788 from Security-Onion-Solutions/fix/elastic_mappings
Fix user name mapping and remove security subfield
|
2023-07-20 15:51:42 -04:00 |
|
|
Wes
|
d07c46f27e
|
Change playbook and sysmon
|
2023-07-20 16:08:50 +00:00 |
|
|
Wes
|
c68cd6cf33
|
Fix typo
|
2023-07-20 14:39:35 +00:00 |
|
|
Wes
|
4b7e7978ef
|
Add final pipeline
|
2023-07-19 19:56:54 +00:00 |
|
|
Wes
|
0b19179630
|
Add logrotate
|
2023-07-19 15:17:42 +00:00 |
|
|
Wes
|
30a14f8aaf
|
Add logging
|
2023-07-19 15:00:20 +00:00 |
|
|
Wes
|
877fc36013
|
Add log dir
|
2023-07-19 14:57:24 +00:00 |
|
|
Wes
|
b738325880
|
Remove keyword
|
2023-07-19 13:55:12 +00:00 |
|
|
Wes
|
1848a835f5
|
Remove keyword
|
2023-07-19 13:52:15 +00:00 |
|
|
weslambertandGitHub
|
17fcf12608
|
Merge pull request #10791 from Security-Onion-Solutions/fix/elastic_clear
Set delete for interactive
|
2023-07-19 08:27:00 -04:00 |
|
|
Wes
|
6a8737e9a2
|
Set delete for interactive
|
2023-07-19 12:21:47 +00:00 |
|
|
weslambertandGitHub
|
41ebb403ca
|
Merge pull request #10787 from Security-Onion-Solutions/fix/elastic_clear
Use new agent scripts for Elastic clear command
|
2023-07-18 16:15:27 -04:00 |
|
|
Wes
|
a59eda319e
|
Remove security subfield
|
2023-07-18 19:00:50 +00:00 |
|
|
Wes
|
8a76975d8c
|
Use new agent scripts
|
2023-07-18 18:43:57 +00:00 |
|
|
Wes
|
1d3e39b6bd
|
Map user name to keyword and remove security subfield generation
|
2023-07-18 14:46:47 +00:00 |
|
|
weslambertandGitHub
|
6816d06710
|
Merge pull request #10766 from Security-Onion-Solutions/fix/elastic-agent-scripts
Add agent scripts
|
2023-07-17 10:46:54 -04:00 |
|
|
Wes
|
d19615f743
|
Fix typo
|
2023-07-17 14:42:27 +00:00 |
|
|
Wes
|
1a4515fc8a
|
Split restart into stop and start
|
2023-07-17 14:30:51 +00:00 |
|
|
Wes
|
31696803e1
|
Use correct name
|
2023-07-17 14:28:12 +00:00 |
|
|
Wes
|
e715dfa354
|
Remove sbin
|
2023-07-17 14:27:39 +00:00 |
|
|
Wes
|
c723a09107
|
Remove agent installer generation script
|
2023-07-14 21:45:25 +00:00 |
|
|
Wes
|
8cf3ceeb71
|
Update agent scripts
|
2023-07-14 21:43:03 +00:00 |
|
|
weslambertandGitHub
|
922a77ac55
|
Merge pull request #10762 from Security-Onion-Solutions/fix/integration_elasticsearch
Allow Elasticsearch integration policy
|
2023-07-13 14:42:23 -04:00 |
|
|
weslambertandGitHub
|
a62f96595c
|
Merge pull request #10763 from Security-Onion-Solutions/fix/strelka_pe
Strelka entropy and pe fixes
|
2023-07-13 14:42:12 -04:00 |
|
|
weslambertandGitHub
|
0c177ec923
|
Allow Elasticsearch integration policy
|
2023-07-13 10:46:59 -04:00 |
|
|
Wes
|
41f00c0aa1
|
Add agent scripts
|
2023-07-13 14:32:22 +00:00 |
|
|
Wes
|
e3249c8e4c
|
Wrap values in quotes for proper conversion
|
2023-07-13 14:18:57 +00:00 |
|
|
weslambertandGitHub
|
85bb5a327c
|
Fix long vs float for pe version
|
2023-07-13 09:38:09 -04:00 |
|
|
weslambertandGitHub
|
8acc37a7d1
|
Merge pull request #10749 from Security-Onion-Solutions/fix/yara_update
Fix syntax for conditional
|
2023-07-11 13:41:38 -04:00 |
|
|
weslambertandGitHub
|
5f1b467e64
|
Fix syntax for conditional
|
2023-07-11 13:37:50 -04:00 |
|
|
weslambertandGitHub
|
fe7fb7f54d
|
Merge pull request #10748 from Security-Onion-Solutions/fix/elasticsearch_strelka
Update logic for YARA matches
|
2023-07-11 13:02:24 -04:00 |
|
|
Wes
|
577bfac886
|
Update logic for YARA matches
|
2023-07-11 17:00:13 +00:00 |
|
|
weslambertandGitHub
|
7cdd1f89d7
|
Merge pull request #10736 from Security-Onion-Solutions/fix/strelka_path
Change path to old one
|
2023-07-11 09:13:36 -04:00 |
|
|
weslambertandGitHub
|
b7cab1d118
|
Change path to old one
|
2023-07-11 09:10:20 -04:00 |
|
|
weslambertandGitHub
|
f03a472ee5
|
Merge pull request #10731 from Security-Onion-Solutions/fix/kibana_file_search
Kibana dashboard changes
|
2023-07-11 08:50:03 -04:00 |
|
|
Wes
|
6b8893ded5
|
Update saved objects
|
2023-07-10 18:13:34 +00:00 |
|
|
Wes
|
6da96a733f
|
Use tags instead of dataset
|
2023-07-10 13:06:38 +00:00 |
|
|
weslambertandGitHub
|
8178338971
|
Merge pull request #10717 from Security-Onion-Solutions/fix/strelka_rules
Change path
|
2023-07-07 13:45:02 -04:00 |
|
|
weslambertandGitHub
|
79ed17b506
|
Change path
|
2023-07-07 13:31:43 -04:00 |
|
|
weslambertandGitHub
|
9f95306458
|
Merge pull request #10708 from Security-Onion-Solutions/fix/elasticsearch_templates_hn
Fix heavy node Elasticsearch template load
|
2023-07-07 09:52:54 -04:00 |
|
|
Wes
|
0b5ee49873
|
Fix inverted logic for component template
|
2023-07-06 20:46:35 +00:00 |
|
|
Wes
|
910125f13a
|
Restructure logic
|
2023-07-06 17:49:06 +00:00 |
|
|
Wes
|
d551faeb16
|
Heavy node template considerations
|
2023-07-06 17:19:28 +00:00 |
|
|
weslambertandGitHub
|
d31ea4097d
|
Merge pull request #10683 from Security-Onion-Solutions/fix/kibana_http_search
Kibana dashboard changes
|
2023-06-30 17:17:37 -04:00 |
|
|
Wes
|
c277b7acfa
|
Change Zeek file from evet dataset to tags
|
2023-06-30 20:24:10 +00:00 |
|
|
Wes
|
6bdccec6b1
|
Add asterisk back to Modbus search
|
2023-06-30 19:01:53 +00:00 |
|
|
Wes
|
8b38cbe8cf
|
Fix Modbus since the previous fix was reverted
|
2023-06-30 17:38:05 +00:00 |
|
|
Wes
|
35ea084466
|
Update from exported saved objects again
|
2023-06-30 16:55:00 +00:00 |
|
|
Wes
|
e2acf027a9
|
Update from exported saved objects
|
2023-06-30 16:01:50 +00:00 |
|
|
Wes
|
273e78da94
|
Modbus dashboard - use asterisk
|
2023-06-30 15:03:20 +00:00 |
|
|
Wes
|
446376395e
|
Modbus dashboard - use tags
|
2023-06-30 13:56:08 +00:00 |
|
|
Wes
|
a13001dce0
|
PE dashboard - use tags
|
2023-06-30 13:40:36 +00:00 |
|
|
Wes
|
8819e1d4d6
|
HTTP search - use tags
|
2023-06-30 13:02:00 +00:00 |
|
|
weslambertandGitHub
|
add72d7a5c
|
Merge pull request #10670 from Security-Onion-Solutions/fix/kibana_dashboards
Kibana Dashboards - Remove Wazuh reference and use tags
|
2023-06-28 09:41:19 -04:00 |
|
|
Wes
|
8436b647dd
|
Remove Wazuh and use tags
|
2023-06-27 18:05:04 +00:00 |
|
|
weslambertandGitHub
|
c2efd7ef64
|
Merge pull request #10655 from Security-Onion-Solutions/feature/supported_integrations
Restructure Elasticsearch templates for supported integrations
|
2023-06-26 09:43:10 -04:00 |
|
|
weslambertandGitHub
|
05b84327b8
|
Fix typo
|
2023-06-23 16:32:57 -04:00 |
|
|
weslambertandGitHub
|
e02bdffe34
|
Fix typos
|
2023-06-23 16:10:22 -04:00 |
|
|
weslambertandGitHub
|
e2ff48164b
|
Only load if so-elastic-fleet-common exists
|
2023-06-23 16:03:58 -04:00 |
|
|
weslambertandGitHub
|
aa91c1fef2
|
Add empty object for index_settings
|
2023-06-23 15:57:30 -04:00 |
|
|
weslambertandGitHub
|
ff7db0be63
|
Remove old index settings
|
2023-06-23 15:31:11 -04:00 |
|
|
Wes
|
b96d3473f2
|
Fix indentation
|
2023-06-23 18:38:04 +00:00 |
|
|
Wes
|
62fa15c63e
|
Add more templates
|
2023-06-23 14:43:15 +00:00 |
|
|
weslambertandGitHub
|
e995576b1d
|
Remove extra templates
|
2023-06-23 09:41:49 -04:00 |
|
|
Wes
|
5e8748c436
|
Load Elasticsearch templates
|
2023-06-23 13:28:01 +00:00 |
|
|
Wes
|
e2cca917c1
|
Add package load command to Fleet setup
|
2023-06-23 13:26:06 +00:00 |
|
|
Wes
|
d8700137d2
|
Add updated so-elasticsearch-templates-load
|
2023-06-23 13:23:29 +00:00 |
|
|
Wes
|
2c42d4b19e
|
Add package check to so-elasticsearch-templates-load
|
2023-06-23 13:22:51 +00:00 |
|
|
Wes
|
a3c7e40c40
|
Add package load command
|
2023-06-23 13:20:05 +00:00 |
|
|
Wes
|
94fe456e28
|
Add package functions
|
2023-06-23 13:19:20 +00:00 |
|
|
Wes
|
662db41857
|
Add default packages
|
2023-06-23 13:17:38 +00:00 |
|
|
weslambertandGitHub
|
6b97d07a89
|
Merge pull request #10629 from Security-Onion-Solutions/fix/elasticsearch_ingest_suricata_xff_ip
Parse xff
|
2023-06-22 08:45:58 -04:00 |
|
|
weslambertandGitHub
|
7e37cd0f05
|
Parse xff
|
2023-06-21 14:29:54 -04:00 |
|
|
Wes
|
3a34da354f
|
Use append instead of set
|
2023-06-15 16:35:43 +00:00 |
|
|
Wes
|
58a63e0765
|
Remove extra comma
|
2023-06-15 14:22:37 +00:00 |
|
|
Wes
|
b5bccc5e05
|
Use module in dataset name and add dataset tag
|
2023-06-15 13:06:57 +00:00 |
|
|
weslambertandGitHub
|
03082339ca
|
Merge pull request #10592 from Security-Onion-Solutions/fix/analyzer_dependencies
Update analyzer dependencies
|
2023-06-14 12:22:06 -04:00 |
|
|
weslambertandGitHub
|
3f1741e75a
|
Merge pull request #10585 from Security-Onion-Solutions/fix/elasticsearch_templates
Update Elasticsearch templates for Fleet
|
2023-06-14 09:33:23 -04:00 |
|
|
Wes
|
48331ce35b
|
Add system.system component templates
|
2023-06-14 13:29:11 +00:00 |
|
|
Wes
|
c2ac60b82e
|
Add system.system template and add event-mappings
|
2023-06-14 13:28:00 +00:00 |
|
|
Wes
|
c205438771
|
Update dependencies
|
2023-06-14 02:35:29 +00:00 |
|
|
Wes
|
8cde05807c
|
Remove elastic-agent dir
|
2023-06-13 21:33:04 +00:00 |
|
|
Wes
|
2ac0aba916
|
Add osquery files
|
2023-06-13 21:32:02 +00:00 |
|
|
Wes
|
af003cc2a1
|
Add osquery templates
|
2023-06-13 20:43:39 +00:00 |
|
|
Wes
|
bd7644a557
|
Add another template
|
2023-06-13 19:13:20 +00:00 |
|
|
Wes
|
5547a1b7ab
|
Add event mappings
|
2023-06-13 18:23:50 +00:00 |
|
|
Wes
|
1b90fd8581
|
Add custom component templates
|
2023-06-13 18:21:45 +00:00 |
|
|
Wes
|
e43b7607bb
|
Add more component templates
|
2023-06-13 17:04:03 +00:00 |
|
|
Wes
|
a265c06e31
|
Add other component templates
|
2023-06-13 15:47:25 +00:00 |
|
|
Wes
|
2aa954cb0a
|
Add component templates
|
2023-06-13 15:25:23 +00:00 |
|
|
Wes
|
73812b11a3
|
Allow ingest node pipelines that start with a period
|
2023-06-13 13:37:56 +00:00 |
|
|
Wes
|
38ab426470
|
Add final Fleet pipeline
|
2023-06-13 13:36:26 +00:00 |
|
|
Wes
|
d0a6881c2c
|
Add event mappings and remove meta information for now
|
2023-06-13 13:35:46 +00:00 |
|
|
Wes
|
57268ba934
|
Change priority of templates
|
2023-06-12 14:29:45 +00:00 |
|
|
Wes
|
1208915896
|
Remove Elastic Agent package templates
|
2023-06-12 14:24:59 +00:00 |
|