From f7d527bb9016f46d5f70914774c3251da429ced1 Mon Sep 17 00:00:00 2001 From: weslambert Date: Thu, 16 Jul 2020 08:14:23 -0400 Subject: [PATCH] Update README.md --- README.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/README.md b/README.md index 8016d2fcc..ca6f12699 100644 --- a/README.md +++ b/README.md @@ -31,6 +31,12 @@ Security Onion 2.0.0 RC1 is here! This will require a fresh install but there is - Once authenticated through SOC, you can now access Playbook with analyst permissions without login - Ingest parsing updates for Windows Eventlogs & Sysmon logs shipped with WinLogbeat & Osquery (ECS) - Kolide Launcher update to include the ability to pass arbitrary flags - new functionality sponsored by SOS +- Fixed issue with Wazuh authd registration service port not being correctly exposed +- Added option for exposure of ES Rest API (port 9200) to so-allow for easier external querying/integration with other tools +- Added option to so-allow for external Strelka file uploads (ex. via `strelka-fileshot`) +- Added default YARA rules for Strelka -- default rules are fmaintained by Florian Roth and pulled from https://github.com/Neo23x0/signature-base +- Added the ability to use custom Zeek scripts +- Improved unification of Zeek and Strelka file data ## Hybrid Hunter Beta 1.4.1 - Beta 3