├── .gitignore ├── LICENSE ├── README.md ├── configs └── suricata.yaml ├── docker ├── logstash │ ├── Dockerfile │ └── beats_to_elastic.conf └── suricata │ ├── Dockerfile │ ├── filebeat.yml │ └── suricata.yaml ├── docs ├── elastic_stack.md ├── hardware_and_os.md ├── images │ ├── configure_index_pattern.PNG │ ├── dashboard_alert_exploration.PNG │ ├── discover_magnify.PNG │ ├── index_pattern.PNG │ ├── overview_dash.PNG │ ├── quick_count.PNG │ ├── quick_filters.PNG │ ├── saved_alerts.png │ ├── toggle_column_in_table.PNG │ └── visualization_event_count.PNG ├── kibana.md ├── pulledpork_setup.md ├── setup.md └── suricata_configuration.md ├── kibana_exports ├── all_exported_visualizations.json ├── exported_dashboards.json └── exported_searches.json └── scripts ├── rule_tuner ├── requirements.txt └── rule_tuner.py └── update_rules.sh /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/gradiuscypher/grIDS/HEAD/.gitignore -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/gradiuscypher/grIDS/HEAD/LICENSE -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/gradiuscypher/grIDS/HEAD/README.md -------------------------------------------------------------------------------- /configs/suricata.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/gradiuscypher/grIDS/HEAD/configs/suricata.yaml -------------------------------------------------------------------------------- /docker/logstash/Dockerfile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/gradiuscypher/grIDS/HEAD/docker/logstash/Dockerfile -------------------------------------------------------------------------------- /docker/logstash/beats_to_elastic.conf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/gradiuscypher/grIDS/HEAD/docker/logstash/beats_to_elastic.conf -------------------------------------------------------------------------------- /docker/suricata/Dockerfile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/gradiuscypher/grIDS/HEAD/docker/suricata/Dockerfile -------------------------------------------------------------------------------- /docker/suricata/filebeat.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/gradiuscypher/grIDS/HEAD/docker/suricata/filebeat.yml -------------------------------------------------------------------------------- /docker/suricata/suricata.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/gradiuscypher/grIDS/HEAD/docker/suricata/suricata.yaml -------------------------------------------------------------------------------- /docs/elastic_stack.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/gradiuscypher/grIDS/HEAD/docs/elastic_stack.md -------------------------------------------------------------------------------- /docs/hardware_and_os.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/gradiuscypher/grIDS/HEAD/docs/hardware_and_os.md -------------------------------------------------------------------------------- /docs/images/configure_index_pattern.PNG: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/gradiuscypher/grIDS/HEAD/docs/images/configure_index_pattern.PNG -------------------------------------------------------------------------------- /docs/images/dashboard_alert_exploration.PNG: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/gradiuscypher/grIDS/HEAD/docs/images/dashboard_alert_exploration.PNG -------------------------------------------------------------------------------- /docs/images/discover_magnify.PNG: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/gradiuscypher/grIDS/HEAD/docs/images/discover_magnify.PNG -------------------------------------------------------------------------------- /docs/images/index_pattern.PNG: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/gradiuscypher/grIDS/HEAD/docs/images/index_pattern.PNG -------------------------------------------------------------------------------- /docs/images/overview_dash.PNG: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/gradiuscypher/grIDS/HEAD/docs/images/overview_dash.PNG -------------------------------------------------------------------------------- /docs/images/quick_count.PNG: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/gradiuscypher/grIDS/HEAD/docs/images/quick_count.PNG -------------------------------------------------------------------------------- /docs/images/quick_filters.PNG: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/gradiuscypher/grIDS/HEAD/docs/images/quick_filters.PNG -------------------------------------------------------------------------------- /docs/images/saved_alerts.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/gradiuscypher/grIDS/HEAD/docs/images/saved_alerts.png -------------------------------------------------------------------------------- /docs/images/toggle_column_in_table.PNG: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/gradiuscypher/grIDS/HEAD/docs/images/toggle_column_in_table.PNG -------------------------------------------------------------------------------- /docs/images/visualization_event_count.PNG: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/gradiuscypher/grIDS/HEAD/docs/images/visualization_event_count.PNG -------------------------------------------------------------------------------- /docs/kibana.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/gradiuscypher/grIDS/HEAD/docs/kibana.md -------------------------------------------------------------------------------- /docs/pulledpork_setup.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/gradiuscypher/grIDS/HEAD/docs/pulledpork_setup.md -------------------------------------------------------------------------------- /docs/setup.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/gradiuscypher/grIDS/HEAD/docs/setup.md -------------------------------------------------------------------------------- /docs/suricata_configuration.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/gradiuscypher/grIDS/HEAD/docs/suricata_configuration.md -------------------------------------------------------------------------------- /kibana_exports/all_exported_visualizations.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/gradiuscypher/grIDS/HEAD/kibana_exports/all_exported_visualizations.json -------------------------------------------------------------------------------- /kibana_exports/exported_dashboards.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/gradiuscypher/grIDS/HEAD/kibana_exports/exported_dashboards.json -------------------------------------------------------------------------------- /kibana_exports/exported_searches.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/gradiuscypher/grIDS/HEAD/kibana_exports/exported_searches.json -------------------------------------------------------------------------------- /scripts/rule_tuner/requirements.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/gradiuscypher/grIDS/HEAD/scripts/rule_tuner/requirements.txt -------------------------------------------------------------------------------- /scripts/rule_tuner/rule_tuner.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/gradiuscypher/grIDS/HEAD/scripts/rule_tuner/rule_tuner.py -------------------------------------------------------------------------------- /scripts/update_rules.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/gradiuscypher/grIDS/HEAD/scripts/update_rules.sh --------------------------------------------------------------------------------