Commit Graph

  • 1d9fae304c Setup - Get Curator disk size when /nsm not present Wes Lambert 2018-12-13 22:01:21 +00:00
  • de7e7df2b8 Merge branch 'master' of https://github.com/TOoSmOotH/securityonion-saltstack Mike Reeves 2018-12-13 16:55:55 -05:00
  • cc5bf1cf64 Setup Script - Install the repo on Ubuntu Mike Reeves 2018-12-13 16:55:48 -05:00
  • 7d5d364bd7 Merge pull request #58 from dlee35/master Mike Reeves 2018-12-13 16:30:43 -05:00
  • 06037d8222 generate self-signed cert for osquery clients dlee35 2018-12-13 16:28:52 -05:00
  • 1326d8d573 Setup Script - Cleanup of some Wazuh Mike Reeves 2018-12-13 14:46:03 -05:00
  • 1d0cb9c20e Setup Script - Cleanup of some Wazuh Mike Reeves 2018-12-13 14:41:50 -05:00
  • 52998d7340 Merge branch 'master' of https://github.com/TOoSmOotH/securityonion-saltstack Mike Reeves 2018-12-13 14:24:47 -05:00
  • 7ff47faa3d Common Module - Update core docker version Mike Reeves 2018-12-13 14:24:40 -05:00
  • fdd6bcdd6b Merge pull request #56 from dlee35/master Mike Reeves 2018-12-13 13:42:13 -05:00
  • 7fd2869159 Merge pull request #57 from weslambert/master Mike Reeves 2018-12-13 13:34:30 -05:00
  • d47e0ac4f8 Setup Script - Add Wazuh Repo for Ubuntu Mike Reeves 2018-12-13 13:33:38 -05:00
  • bd04dc45a3 Wazuh - Fix Jinja Wes Lambert 2018-12-13 18:30:04 +00:00
  • fe56e171d4 add firewall rule option for osquery dlee35 2018-12-13 13:28:37 -05:00
  • 07a2b34583 Merge branch 'master' of https://github.com/TOoSmOotH/securityonion-saltstack Mike Reeves 2018-12-13 13:22:04 -05:00
  • eb04bd1bb4 Setup Script - Add Wazuh Repo for Ubuntu Mike Reeves 2018-12-13 13:21:55 -05:00
  • f538eddb5f Merge pull request #55 from weslambert/master Mike Reeves 2018-12-13 13:01:38 -05:00
  • 75ed258d19 Firewall - Fix Wazuh IP logic for sensors Wes Lambert 2018-12-13 17:57:22 +00:00
  • 4db52ec865 Wazuh - Add logic for sensors Wes Lambert 2018-12-13 17:56:51 +00:00
  • 5e23859557 Salt - Add Wazuh to other roles Wes Lambert 2018-12-13 17:34:19 +00:00
  • 62067f37cf Wazuh - Fix agent ip for storage nodes Wes Lambert 2018-12-13 17:33:12 +00:00
  • d13e7559fe Filebeat - Enabled for master and only enable Bro/Suri inputs when needed Wes Lambert 2018-12-13 17:32:03 +00:00
  • 8163beadb0 Merge pull request #54 from dlee35/master Mike Reeves 2018-12-12 16:34:35 -05:00
  • 90d648cef1 Merge pull request #53 from weslambert/master Mike Reeves 2018-12-12 16:33:48 -05:00
  • 5c737e9fda Updated Fleet init.sls and nginx confs for fleet dlee35 2018-12-12 16:19:35 -05:00
  • 41e9c4c7e0 Logstash - Alter input for Wazuh logs Wes Lambert 2018-12-12 20:52:18 +00:00
  • 54c35cdc0d Filebeat - Add Wazuh archive logs Wes Lambert 2018-12-12 20:51:41 +00:00
  • d12f49aa9d Merge pull request #52 from weslambert/master Mike Reeves 2018-12-12 13:02:14 -05:00
  • 8496834f8b Wazuh - Re-order top.sls so Filebeat does not overrite Wazuh logs Wes Lambert 2018-12-12 15:48:59 +00:00
  • 9d86744e07 Filebeat - Fix Wazuh alerts path Wes Lambert 2018-12-12 15:19:51 +00:00
  • e20ab3b407 Filebeat - Config for Wazuh alerts Wes Lambert 2018-12-12 14:48:17 +00:00
  • 5822842d2e Wazuh - Add sleep to wait for API Wes Lambert 2018-12-12 13:36:13 +00:00
  • a99ec40506 Setup - Remark Wazuh agent config Wes Lambert 2018-12-12 13:10:27 +00:00
  • 8404897fe3 Wazuh - Move agent config to init.sls Wes Lambert 2018-12-12 06:05:13 +00:00
  • 823a589fae Wazuh - Set mode for agent registration script Wes Lambert 2018-12-12 04:01:13 +00:00
  • 1a4a7382e2 Wazuh - Fix Wazuh agent registration script name Wes Lambert 2018-12-12 03:18:55 +00:00
  • 86a72984c7 Setup - Add auth pillar to eval mode Wes Lambert 2018-12-12 02:58:09 +00:00
  • 113f030873 Wazuh - Add agent register script to init.sls Wes Lambert 2018-12-12 02:26:38 +00:00
  • 634c435ad6 Setup - Configure Wazuh agent Wes Lambert 2018-12-12 01:51:30 +00:00
  • 9a021164ac Wazuh - Fix port, add agent conf, and agent registration script Wes Lambert 2018-12-12 01:42:05 +00:00
  • 223237f8c2 Wazuh - Expose both UDP and TCP ports Wes Lambert 2018-12-11 19:45:56 +00:00
  • 6cdf1ef857 Firewall - Add rules for Wazuh Manager Wes Lambert 2018-12-11 19:44:32 +00:00
  • dd15a6e31a SSL Module - Fixed it so certs do not keep renewing Mike Reeves 2018-12-11 12:27:57 -05:00
  • bea4286054 Setup - Fix static file creation Mike Reeves 2018-12-11 11:57:27 -05:00
  • a54a5ede8c MySQL Module - fix password designation Mike Reeves 2018-12-11 11:32:37 -05:00
  • 8c1a7b3e0c Setup - Change so passwords survive re-install Mike Reeves 2018-12-11 11:19:54 -05:00
  • 4c88f89835 Merge pull request #51 from weslambert/master Mike Reeves 2018-12-10 15:23:22 -05:00
  • 0f5fbadaf5 Filebeat - Switch negation to equals Wes Lambert 2018-12-10 20:17:41 +00:00
  • 10d6c0f5a9 Setup - Remark Wazuh user section completely Wes Lambert 2018-12-10 19:55:53 +00:00
  • 2544984433 Wazuh - add to top.sls for Eval Mode Wes Lambert 2018-12-10 19:51:57 +00:00
  • e70db05a0f Filebeat - Modify config for Wazuh alerts Wes Lambert 2018-12-10 19:50:55 +00:00
  • cb68f502ee Wazuh - Changes to init.sls Wes Lambert 2018-12-10 19:49:14 +00:00
  • 0a33204726 Setup - Only add Wazuh repo Wes Lambert 2018-12-07 18:16:03 +00:00
  • e6469d505a Wazuh - initial init.sls Wes Lambert 2018-12-07 18:13:42 +00:00
  • cdc8b577bd Redis Module - Update REDIS version to address vuln Mike Reeves 2018-12-07 10:28:43 -05:00
  • 65d6b07f6d Merge pull request #50 from weslambert/master Mike Reeves 2018-12-07 08:46:56 -05:00
  • 6a9a537cf8 Wazuh - Remove filebeat.yml Wes Lambert 2018-12-07 13:39:10 +00:00
  • e355503324 Filebeat - Update for Wazuh logs Wes Lambert 2018-12-07 13:38:31 +00:00
  • e11aadf730 Wazuh - agent install for CentOS Wes Lambert 2018-12-07 13:36:11 +00:00
  • f5e2b7f210 Setup - Adjust to prevent unary operator error Wes Lambert 2018-12-07 04:22:11 +00:00
  • 6bfb813cdf Setup - Adjust syntax Wes Lambert 2018-12-07 04:18:28 +00:00
  • e21c67f553 Setup - Fix typo Wes Lambert 2018-12-07 04:14:30 +00:00
  • bccb83fae9 Setup - Install Wazuh agent Wes Lambert 2018-12-07 03:57:31 +00:00
  • f5d16181d4 Common Module - Add Fleet to nginx Mike Reeves 2018-12-06 14:40:44 -05:00
  • 7d7cd313fa Fleet Module - Use the SO docker Mike Reeves 2018-12-06 14:25:31 -05:00
  • 8315f9279e Fleet Module - Fix order Mike Reeves 2018-12-06 14:10:28 -05:00
  • ac3eaaf114 Setup Script - Add MYSQL and fleet password generation Mike Reeves 2018-12-06 13:51:59 -05:00
  • bcd7773ace Fleet Module - fix assignment of MYSQLPASS Mike Reeves 2018-12-06 11:19:44 -05:00
  • 4e28feb084 Mysql Module - fix nameing Mike Reeves 2018-12-06 11:18:13 -05:00
  • 43d75ba07d Fleet Module - Move database stuff to the fleet module Mike Reeves 2018-12-06 11:17:04 -05:00
  • 5a830b4ff4 Fleet Module - Move database stuff to the fleet module Mike Reeves 2018-12-06 11:12:56 -05:00
  • 46ef0280cd Fleet Module - Move database stuff to the fleet module Mike Reeves 2018-12-06 11:11:25 -05:00
  • 7816c6e18e Merge pull request #49 from weslambert/master Mike Reeves 2018-12-06 09:15:48 -05:00
  • e335be7476 Elastalert - Remove config from ES Module Wes Lambert 2018-12-06 05:44:09 +00:00
  • d310f163e8 Elastalert - Enable for Master/Eval Wes Lambert 2018-12-06 05:43:15 +00:00
  • fe1c771f21 Elastalert - Initial Config Wes Lambert 2018-12-06 05:42:30 +00:00
  • 52dfe2500a Cleanup - Remove pulledpork module Wes Lambert 2018-12-06 03:14:03 +00:00
  • e7be61bd28 Cleanup - Remove somaster module Wes Lambert 2018-12-06 03:13:39 +00:00
  • 3ffdcd81d6 Redis - Don't start if using Eval Mode Wes Lambert 2018-12-06 03:07:16 +00:00
  • 5c28576674 Logtash - Update input for Eval Mode Wes Lambert 2018-12-06 02:38:59 +00:00
  • 24cb7f4a14 Fleet Modules Mike Reeves 2018-12-05 19:50:59 -05:00
  • e9d97286c3 MYSQL Module - Modify network for fleetdb user Mike Reeves 2018-12-05 18:29:46 -05:00
  • b2c711af53 MYSQL Module - Modify network for fleetdb user Mike Reeves 2018-12-05 17:21:46 -05:00
  • f988c7c0e7 Fleet Module - SSL additions Mike Reeves 2018-12-05 17:16:46 -05:00
  • 53f7fcd07c Fleet Module - SSL additions Mike Reeves 2018-12-05 15:54:43 -05:00
  • b22b10926d MySQL Module - Fix password file formatting Mike Reeves 2018-12-05 15:12:53 -05:00
  • c5dfe32c55 Merge pull request #48 from dlee35/master Mike Reeves 2018-12-05 15:09:59 -05:00
  • a52fdafea0 Merge pull request #1 from dlee35/development Dustin Lee 2018-12-05 15:06:31 -05:00
  • 7fc1f576d9 changed tag eval to type dlee35 2018-12-05 15:05:11 -05:00
  • 13a4388b97 Merge branch 'master' of https://github.com/TOoSmOotH/securityonion-saltstack Mike Reeves 2018-12-05 12:43:20 -05:00
  • 658bc2cc8e Logstash Module - Update Version Mike Reeves 2018-12-05 12:43:13 -05:00
  • 1beca2d841 Merge pull request #47 from weslambert/master Mike Reeves 2018-12-05 11:17:59 -05:00
  • 6399889e60 Merge branch 'master' of https://github.com/toosmooth/securityonion-saltstack Wes Lambert 2018-12-05 16:13:40 +00:00
  • 314e35b2be Kibana Module - Added Dustin's dashboard mods Mike Reeves 2018-12-05 11:10:34 -05:00
  • 51ffa32e67 MySQL Module - Change name to socore Mike Reeves 2018-12-05 11:09:40 -05:00
  • 3f645bbdcf Merge pull request #46 from dlee35/master Mike Reeves 2018-12-05 10:59:55 -05:00
  • 88c144a250 Curator - Fix path for master pillar additions Wes Lambert 2018-12-05 15:51:10 +00:00
  • aa32a55b4e Curator - Update Master pillar in setup Wes Lambert 2018-12-05 15:16:14 +00:00
  • 3461c7e226 Curator - Update config for Eval Mode Wes Lambert 2018-12-05 15:14:36 +00:00
  • 7a260a4876 Curator - Move files to /usr/sbin Wes Lambert 2018-12-05 13:24:16 +00:00