Граф коммитов

22 Коммитов

Автор SHA1 Сообщение Дата
Brandon Myers e42517a35c
Remove unnecessary pyes import 2017-06-21 11:30:51 -05:00
Brandon Myers 4ca0a41c53
Fix sample data examples 2017-06-21 10:53:30 -05:00
Brandon Myers f87c94a088
Unencrypt config files
Signed-off-by: Brandon Myers <bmyers@mozilla.com>
2017-06-15 15:05:55 -05:00
Brandon Myers 6caaad320d
Remove duplicate definitions of toUTC
Signed-off-by: Brandon Myers <bmyers@mozilla.com>
2017-06-15 15:02:46 -05:00
Brandon Myers 1d8c59b93f
Setup codebase for merge of two repos 2017-06-15 14:56:47 -05:00
Jeff Bryner 1ae54e25f6 Merge pull request #348 from pwnbus/standardize_bro_intel
Standardize other bro_* categories
2016-06-28 12:24:34 -07:00
Brandon Myers 08a08f5e03 Standardize category bro_intel to brointel
Signed-off-by: Brandon Myers <bmyers@mozilla.com>
2016-06-28 13:33:30 -05:00
Brandon Myers 0669b6594d Update bro_notice category to bronotice
Signed-off-by: Brandon Myers <bmyers@mozilla.com>
2016-06-28 13:26:33 -05:00
Rick Rankin 61ed443fc3 Update, correct installation instructions and fix errors in config files 2015-05-05 15:42:45 -07:00
Jeff Bryner 43d22324a8 simple sample script for generating and posing an event directly to rabbit..plus severity 2014-11-24 10:02:20 -08:00
Jeff Bryner 779205e322 simple sample script for generating and posing an event directly to rabbit 2014-11-24 09:59:35 -08:00
Jeff Bryner 080596bd47 add defaults for demo alert/attacker creation 2014-10-03 16:18:13 -07:00
Jeff Bryner 119703f226 logging to INFO, create alerts/attackers less frequently by default 2014-08-06 08:45:51 -07:00
Jeff Bryner 46ecc6f020 reorg demo data into events/alerts/attackers to allow for constant stream of all 2014-08-05 21:42:21 -07:00
Jeff Bryner 5f1fa17d50 update demo event pool 2014-08-04 13:44:34 -07:00
Jeff Bryner 053b2bca53 refactor demo events to include <randomipaddress> tag to trigger a generated IP 2014-08-04 11:12:21 -07:00
Jeff Bryner 2e7b7e6207 use the same random IP, gen moar data 2014-08-03 08:49:48 -07:00
Jeff Bryner 673ebbb21f add syncalerts.sh script..doh 2014-08-02 16:55:03 -07:00
Jeff Bryner 5012ac9081 tighter sample IPs to hopefully create some demo attackers 2014-08-02 07:49:56 -07:00
Jeff Bryner 413c5008c6 create purposely specific IPs sometimes so alerts get created, and create more events each time 2014-08-01 17:12:12 -07:00
Jeff Bryner d4e834b3b9 demo helpers for docker 2014-08-01 15:19:18 -07:00
Jeff Bryner 334761777b add supervisord and supporting files for constant stream of demo/health events 2014-08-01 10:53:15 -07:00