CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
5c62fedd12df410ead0ea963b1b07682b54dbf39
securityonion/salt/elasticsearch/files/ingest
History
Mike Reeves 5c62fedd12 Suricata DNS parser
2020-06-04 15:42:51 -04:00
..
common
Ingest pipeline commid fix for conn logs
2020-05-22 17:11:08 -04:00
common_nids
parse Bro logs using Elasticsearch ingest node
2019-09-23 16:04:23 -04:00
osquery.query_result
osquery pipeline fix and fail state if errors
2020-05-26 13:05:56 -04:00
ossec
update wazuh fields and category
2020-03-30 14:24:01 +00:00
ossec.alert
update ingest files
2020-04-05 20:40:00 +00:00
sguild_nids
parse Bro logs using Elasticsearch ingest node
2019-09-23 16:04:23 -04:00
snort
parse Bro logs using Elasticsearch ingest node
2019-09-23 16:04:23 -04:00
strelka
remove agent field for non-Wazuh logs
2020-03-17 15:20:46 +00:00
strelka.file
update ingest files
2020-04-05 20:40:00 +00:00
suricata.alert
Trying to get decoded packet
2020-06-02 15:06:39 -04:00
suricata.common
Suricata DNS parser
2020-06-04 15:42:51 -04:00
suricata.dhcp
Add mor suricata ingest parser types
2020-06-02 14:34:38 -04:00
suricata.dnp3
Add mor suricata ingest parser types
2020-06-02 14:34:38 -04:00
suricata.dns
Suricata DNS parser
2020-06-04 15:42:51 -04:00
suricata.fileinfo
Add mor suricata ingest parser types
2020-06-02 14:34:38 -04:00
suricata.flow
Add Suricata Flow pipeline
2020-06-02 13:40:46 -04:00
suricata.ftp
Add mor suricata ingest parser types
2020-06-02 14:34:38 -04:00
suricata.http
Add mor suricata ingest parser types
2020-06-02 14:34:38 -04:00
suricata.ikev2
Add mor suricata ingest parser types
2020-06-02 14:34:38 -04:00
suricata.krb5
Add mor suricata ingest parser types
2020-06-02 14:34:38 -04:00
suricata.nfs
Add mor suricata ingest parser types
2020-06-02 14:34:38 -04:00
suricata.rdp
Add mor suricata ingest parser types
2020-06-02 14:34:38 -04:00
suricata.sip
Add mor suricata ingest parser types
2020-06-02 14:34:38 -04:00
suricata.smb
Add mor suricata ingest parser types
2020-06-02 14:34:38 -04:00
suricata.smtp
SMTP from fix
2020-06-03 11:52:24 -04:00
suricata.snmp
SNMP for suricata
2020-06-03 11:03:23 -04:00
suricata.ssh
Add mor suricata ingest parser types
2020-06-02 14:34:38 -04:00
suricata.tftp
Add mor suricata ingest parser types
2020-06-02 14:34:38 -04:00
suricata.tls
Add mor suricata ingest parser types
2020-06-02 14:34:38 -04:00
syslog
Clean up some stuff
2020-06-02 15:31:48 -04:00
zeek.common
zeek.common ingest parser fix
2020-05-21 14:35:25 -04:00
zeek.common_ssl
upadte ingest config
2020-03-11 12:13:53 +00:00
zeek.conn
Rename tunnel_parents
2020-06-01 13:51:32 +00:00
zeek.dce_rpc
update DCE/RPC parsing
2020-05-15 18:19:05 +00:00
zeek.dhcp
fix message_types one more time :)
2020-05-16 15:03:27 +00:00
zeek.dnp3
update ingest files
2020-04-05 20:40:00 +00:00
zeek.dns
Only process zeek.dns.tld if dns.query.name contains a dot #734
2020-05-19 10:08:30 -04:00
zeek.dns.tld
fix dns tld failures
2020-05-18 08:32:37 -04:00
zeek.dpd
modify pipelines
2020-03-14 12:03:32 +00:00
zeek.files
update parsing for Zeek files
2020-04-14 13:08:31 +00:00
zeek.ftp
upadte ingest config
2020-03-11 12:13:53 +00:00
zeek.http
Initial support - Ingest community_id
2020-05-21 14:34:00 -04:00
zeek.intel
upadte ingest config
2020-03-11 12:13:53 +00:00
zeek.irc
upadte ingest config
2020-03-11 12:13:53 +00:00
zeek.kerberos
upadte ingest config
2020-03-11 12:13:53 +00:00
zeek.modbus
upadte ingest config
2020-03-11 12:13:53 +00:00
zeek.mysql
upadte ingest config
2020-03-11 12:13:53 +00:00
zeek.notice
Initial support - Ingest community_id
2020-05-21 14:34:00 -04:00
zeek.ntlm
upadte ingest config
2020-03-11 12:13:53 +00:00
zeek.pe
upadte ingest config
2020-03-11 12:13:53 +00:00
zeek.radius
fix framed_addr field
2020-05-29 11:55:18 +00:00
zeek.rdp
upadte ingest config
2020-03-11 12:13:53 +00:00
zeek.rfb
update ingest files
2020-04-05 20:40:00 +00:00
zeek.signatures
upadte ingest config
2020-03-11 12:13:53 +00:00
zeek.sip
upadte ingest config
2020-03-11 12:13:53 +00:00
zeek.smb_files
upadte ingest config
2020-03-11 12:13:53 +00:00
zeek.smb_mapping
upadte ingest config
2020-03-11 12:13:53 +00:00
zeek.smtp
Initial support - Ingest community_id
2020-05-21 14:34:00 -04:00
zeek.snmp
upadte ingest config
2020-03-11 12:13:53 +00:00
zeek.socks
upadte ingest config
2020-03-11 12:13:53 +00:00
zeek.software
upadte ingest config
2020-03-11 12:13:53 +00:00
zeek.ssh
upadte ingest config
2020-03-11 12:13:53 +00:00
zeek.ssl
upadte ingest config
2020-03-11 12:13:53 +00:00
zeek.syslog
upadte ingest config
2020-03-11 12:13:53 +00:00
zeek.tunnel
modify pipelines
2020-03-14 12:03:32 +00:00
zeek.tunnels
fix naming of uid field for tunnel
2020-06-01 12:52:57 +00:00
zeek.weird
Add message rename
2020-04-01 11:31:57 -04:00
zeek.x509
upadte ingest config
2020-03-11 12:13:53 +00:00