jeffbryner
|
987f767823
|
Merge pull request #131 from netantho/averez-banhammer-fixes
Fix banhammer bugs
|
2014-07-01 15:56:57 -07:00 |
Anthony Verez
|
cdbe29d030
|
averez-banhammer-fixes: fix banhammer bugs
|
2014-07-01 15:40:58 -07:00 |
Jeff Bryner
|
10d8de6e5c
|
boolean option for banhammer
|
2014-07-01 14:22:11 -07:00 |
Jeff Bryner
|
ba4b3bf0e0
|
reduce reactive load by only refresh on alerts count change
|
2014-07-01 14:21:51 -07:00 |
Jeff Bryner
|
fd0964ed00
|
sync script for alerts->mongo
|
2014-07-01 13:11:51 -07:00 |
jeffbryner
|
9aa7fce80e
|
Merge pull request #129 from netantho/averez-66-unique-alert-url
Unique URL per alert
|
2014-07-01 12:40:23 -07:00 |
Anthony Verez
|
a751660876
|
averez-66-unique-alert-url: UTC timestamp -> timestamp in alert.html
|
2014-07-01 12:34:36 -07:00 |
Anthony Verez
|
0d11b27435
|
Merge remote branch 'upstream/master' into averez-66-unique-alert-url
Conflicts:
meteor/app/client/alertssummary.html
meteor/app/client/mozdef.js
meteor/app/lib/helpers.js
meteor/app/server/mozdef.js
|
2014-07-01 12:31:38 -07:00 |
jeffbryner
|
a719869b05
|
Merge pull request #128 from netantho/averez-95-meteor-update
Meteor update + mysqldb dep fix
|
2014-07-01 12:30:13 -07:00 |
Anthony Verez
|
9e1c83946e
|
averez-66-unique-alert-url: unique URL per alert in meteor
|
2014-07-01 11:34:16 -07:00 |
Jeff Bryner
|
791231fdea
|
bugfix missing initial field
|
2014-07-01 11:32:14 -07:00 |
Anthony Verez
|
a9aaeb60a8
|
averez-66-unique-alert-url: add kibana links in alerts meteor page
|
2014-06-30 17:57:39 -07:00 |
Jeff Bryner
|
008aa7a6a9
|
update settings for banhammer
|
2014-06-30 17:39:44 -07:00 |
Jeff Bryner
|
275c2d206a
|
add helpers.js
|
2014-06-30 17:37:55 -07:00 |
Anthony Verez
|
66f489af68
|
averez-95-meteor-update: fix installation doc for mysqldb
|
2014-06-30 14:56:28 -07:00 |
Anthony Verez
|
f8afc55703
|
averez-95-meteor-update: fix mysqldb dep
|
2014-06-30 14:55:00 -07:00 |
Anthony Verez
|
c7c76b9449
|
averez-95-meteor-update: install MySQLdb dep
|
2014-06-30 14:13:23 -07:00 |
Anthony Verez
|
d882db858a
|
averez-95-meteor-update: update meteor to 0.8.2
|
2014-06-30 12:38:50 -07:00 |
Jeff Bryner
|
a8609e6348
|
account for netaddr seeing 1,0,etc as valid ipv4 addresses
|
2014-06-30 12:35:46 -07:00 |
Jeff Bryner
|
b6228dbc2e
|
add filter reset, rework date sorting in alerts screen
|
2014-06-30 12:34:56 -07:00 |
Jeff Bryner
|
6bdfd3346c
|
alerts sorted by reverse epoch
|
2014-06-28 07:04:06 -07:00 |
Jeff Bryner
|
b8a3c637c7
|
new alert summary screen
|
2014-06-28 06:35:39 -07:00 |
Jeff Bryner
|
da70b8206b
|
updated bro alert searches
|
2014-06-28 06:32:38 -07:00 |
jeffbryner
|
76b9f4cc8c
|
Merge pull request #127 from netantho/averez-xionox-fixes
fixes for network logs
|
2014-06-27 21:31:20 -07:00 |
Anthony Verez
|
8a3c72d385
|
averez-xionox-fixes: don't analyze details.program
|
2014-06-27 19:30:18 -07:00 |
Anthony Verez
|
24646fae5d
|
averez-xionox-fixes: don't analyze details.sourceipgeolocation.country_name
|
2014-06-27 12:26:06 -07:00 |
Jeff Bryner
|
7cb8dc105b
|
add support for nxlog windows event log parsing
|
2014-06-27 11:31:54 -07:00 |
jeffbryner
|
0cae4aada1
|
Merge pull request #126 from netantho/averez-banhammer
averez-banhammer: allow to enable/disable banhammer in rest api
|
2014-06-27 11:24:22 -07:00 |
jeffbryner
|
8a0e6f09db
|
Merge pull request #125 from netantho/averez-banhammer
BanHammer integration
|
2014-06-27 10:56:25 -07:00 |
Anthony Verez
|
598dd80969
|
averez-banhammer: allow to enable/disable banhammer in rest api
|
2014-06-27 09:33:57 -07:00 |
Anthony Verez
|
9e2c8c95e2
|
averez-banhammer: allow to disable banhammer in meteor
|
2014-06-27 09:13:08 -07:00 |
Anthony Verez
|
f3f4eaef04
|
averez-banhammer: meteor changes
|
2014-06-26 23:59:07 -07:00 |
Anthony Verez
|
51b58a13d4
|
averez-banhammer: rest api for banhammer
|
2014-06-26 23:54:27 -07:00 |
jeffbryner
|
6ca4a9644b
|
Merge pull request #124 from netantho/averez-mig-bugfix
averez-mig-bugfix: Reverse list to process old compliance checks first, ...
|
2014-06-26 15:28:58 -07:00 |
Anthony Verez
|
94b9664125
|
averez-mig-bugfix: Reverse list to process old compliance checks first, older later
|
2014-06-26 12:14:08 -07:00 |
jeffbryner
|
81f3b450b3
|
Merge pull request #122 from netantho/averez-scripted-dashboards
event and alert scripted kibana dashboards
|
2014-06-25 20:30:54 -07:00 |
Jeff Bryner
|
8d8c82a7f2
|
sshd event plugin to find ips in the message string
|
2014-06-25 12:57:54 -07:00 |
Jeff Bryner
|
650d600371
|
correlate and track ssh fingerprints
|
2014-06-24 16:58:21 -07:00 |
Jeff Bryner
|
8bbbf387c5
|
standardize the field names
|
2014-06-24 09:13:18 -07:00 |
Jeff Bryner
|
23ddf455fb
|
internz mixing tabs and spaces
|
2014-06-24 08:59:13 -07:00 |
jeffbryner
|
506b035b46
|
Merge pull request #118 from netantho/averez-snmptt-plugin
snmptt plugin
|
2014-06-24 08:54:51 -07:00 |
jeffbryner
|
6f5e8ca23b
|
Merge pull request #117 from netantho/averez-rtflow-plugin
RT_FLOW plugin
|
2014-06-24 08:54:16 -07:00 |
jeffbryner
|
e386385f7e
|
Merge pull request #123 from netantho/averez-auditd-long
averez-auditd-long: use long instead of integers
|
2014-06-24 08:35:15 -07:00 |
Anthony Verez
|
d719ede4de
|
averez-auditd-long: use long instead of integers
|
2014-06-23 17:19:02 -07:00 |
Anthony Verez
|
7341ecfce4
|
averez-rtflow-plugin: add action field
|
2014-06-20 18:01:13 -07:00 |
Anthony Verez
|
fabc2f2fb8
|
averez-scripted-dashboards: event and alert sciripted kibana dashboards
|
2014-06-19 17:20:24 -07:00 |
Jeff Bryner
|
ae11b8ba66
|
sync health stats with no ack option
|
2014-06-18 15:07:35 -07:00 |
Jeff Bryner
|
c38b022081
|
add option to run mq in no_ack, transient delivery mode
|
2014-06-18 14:32:33 -07:00 |
Jeff Bryner
|
6a97826b7b
|
formatting changes for health/about screen
|
2014-06-17 09:02:01 -07:00 |
Jeff Bryner
|
191fcdfd7b
|
check requests status
|
2014-06-17 09:01:24 -07:00 |