Граф коммитов

396 Коммитов

Автор SHA1 Сообщение Дата
jeffbryner 987f767823 Merge pull request #131 from netantho/averez-banhammer-fixes
Fix banhammer bugs
2014-07-01 15:56:57 -07:00
Anthony Verez cdbe29d030 averez-banhammer-fixes: fix banhammer bugs 2014-07-01 15:40:58 -07:00
Jeff Bryner 10d8de6e5c boolean option for banhammer 2014-07-01 14:22:11 -07:00
Jeff Bryner ba4b3bf0e0 reduce reactive load by only refresh on alerts count change 2014-07-01 14:21:51 -07:00
Jeff Bryner fd0964ed00 sync script for alerts->mongo 2014-07-01 13:11:51 -07:00
jeffbryner 9aa7fce80e Merge pull request #129 from netantho/averez-66-unique-alert-url
Unique URL per alert
2014-07-01 12:40:23 -07:00
Anthony Verez a751660876 averez-66-unique-alert-url: UTC timestamp -> timestamp in alert.html 2014-07-01 12:34:36 -07:00
Anthony Verez 0d11b27435 Merge remote branch 'upstream/master' into averez-66-unique-alert-url
Conflicts:
	meteor/app/client/alertssummary.html
	meteor/app/client/mozdef.js
	meteor/app/lib/helpers.js
	meteor/app/server/mozdef.js
2014-07-01 12:31:38 -07:00
jeffbryner a719869b05 Merge pull request #128 from netantho/averez-95-meteor-update
Meteor update + mysqldb dep fix
2014-07-01 12:30:13 -07:00
Anthony Verez 9e1c83946e averez-66-unique-alert-url: unique URL per alert in meteor 2014-07-01 11:34:16 -07:00
Jeff Bryner 791231fdea bugfix missing initial field 2014-07-01 11:32:14 -07:00
Anthony Verez a9aaeb60a8 averez-66-unique-alert-url: add kibana links in alerts meteor page 2014-06-30 17:57:39 -07:00
Jeff Bryner 008aa7a6a9 update settings for banhammer 2014-06-30 17:39:44 -07:00
Jeff Bryner 275c2d206a add helpers.js 2014-06-30 17:37:55 -07:00
Anthony Verez 66f489af68 averez-95-meteor-update: fix installation doc for mysqldb 2014-06-30 14:56:28 -07:00
Anthony Verez f8afc55703 averez-95-meteor-update: fix mysqldb dep 2014-06-30 14:55:00 -07:00
Anthony Verez c7c76b9449 averez-95-meteor-update: install MySQLdb dep 2014-06-30 14:13:23 -07:00
Anthony Verez d882db858a averez-95-meteor-update: update meteor to 0.8.2 2014-06-30 12:38:50 -07:00
Jeff Bryner a8609e6348 account for netaddr seeing 1,0,etc as valid ipv4 addresses 2014-06-30 12:35:46 -07:00
Jeff Bryner b6228dbc2e add filter reset, rework date sorting in alerts screen 2014-06-30 12:34:56 -07:00
Jeff Bryner 6bdfd3346c alerts sorted by reverse epoch 2014-06-28 07:04:06 -07:00
Jeff Bryner b8a3c637c7 new alert summary screen 2014-06-28 06:35:39 -07:00
Jeff Bryner da70b8206b updated bro alert searches 2014-06-28 06:32:38 -07:00
jeffbryner 76b9f4cc8c Merge pull request #127 from netantho/averez-xionox-fixes
fixes for network logs
2014-06-27 21:31:20 -07:00
Anthony Verez 8a3c72d385 averez-xionox-fixes: don't analyze details.program 2014-06-27 19:30:18 -07:00
Anthony Verez 24646fae5d averez-xionox-fixes: don't analyze details.sourceipgeolocation.country_name 2014-06-27 12:26:06 -07:00
Jeff Bryner 7cb8dc105b add support for nxlog windows event log parsing 2014-06-27 11:31:54 -07:00
jeffbryner 0cae4aada1 Merge pull request #126 from netantho/averez-banhammer
averez-banhammer: allow to enable/disable banhammer in rest api
2014-06-27 11:24:22 -07:00
jeffbryner 8a0e6f09db Merge pull request #125 from netantho/averez-banhammer
BanHammer integration
2014-06-27 10:56:25 -07:00
Anthony Verez 598dd80969 averez-banhammer: allow to enable/disable banhammer in rest api 2014-06-27 09:33:57 -07:00
Anthony Verez 9e2c8c95e2 averez-banhammer: allow to disable banhammer in meteor 2014-06-27 09:13:08 -07:00
Anthony Verez f3f4eaef04 averez-banhammer: meteor changes 2014-06-26 23:59:07 -07:00
Anthony Verez 51b58a13d4 averez-banhammer: rest api for banhammer 2014-06-26 23:54:27 -07:00
jeffbryner 6ca4a9644b Merge pull request #124 from netantho/averez-mig-bugfix
averez-mig-bugfix: Reverse list to process old compliance checks first, ...
2014-06-26 15:28:58 -07:00
Anthony Verez 94b9664125 averez-mig-bugfix: Reverse list to process old compliance checks first, older later 2014-06-26 12:14:08 -07:00
jeffbryner 81f3b450b3 Merge pull request #122 from netantho/averez-scripted-dashboards
event and alert scripted kibana dashboards
2014-06-25 20:30:54 -07:00
Jeff Bryner 8d8c82a7f2 sshd event plugin to find ips in the message string 2014-06-25 12:57:54 -07:00
Jeff Bryner 650d600371 correlate and track ssh fingerprints 2014-06-24 16:58:21 -07:00
Jeff Bryner 8bbbf387c5 standardize the field names 2014-06-24 09:13:18 -07:00
Jeff Bryner 23ddf455fb internz mixing tabs and spaces 2014-06-24 08:59:13 -07:00
jeffbryner 506b035b46 Merge pull request #118 from netantho/averez-snmptt-plugin
snmptt plugin
2014-06-24 08:54:51 -07:00
jeffbryner 6f5e8ca23b Merge pull request #117 from netantho/averez-rtflow-plugin
RT_FLOW plugin
2014-06-24 08:54:16 -07:00
jeffbryner e386385f7e Merge pull request #123 from netantho/averez-auditd-long
averez-auditd-long: use long instead of integers
2014-06-24 08:35:15 -07:00
Anthony Verez d719ede4de averez-auditd-long: use long instead of integers 2014-06-23 17:19:02 -07:00
Anthony Verez 7341ecfce4 averez-rtflow-plugin: add action field 2014-06-20 18:01:13 -07:00
Anthony Verez fabc2f2fb8 averez-scripted-dashboards: event and alert sciripted kibana dashboards 2014-06-19 17:20:24 -07:00
Jeff Bryner ae11b8ba66 sync health stats with no ack option 2014-06-18 15:07:35 -07:00
Jeff Bryner c38b022081 add option to run mq in no_ack, transient delivery mode 2014-06-18 14:32:33 -07:00
Jeff Bryner 6a97826b7b formatting changes for health/about screen 2014-06-17 09:02:01 -07:00
Jeff Bryner 191fcdfd7b check requests status 2014-06-17 09:01:24 -07:00