Update README.md

This commit is contained in:
weslambert
2020-07-16 08:14:23 -04:00
committed by GitHub
parent 350d2fbeda
commit f7d527bb90

View File

@@ -31,6 +31,12 @@ Security Onion 2.0.0 RC1 is here! This will require a fresh install but there is
- Once authenticated through SOC, you can now access Playbook with analyst permissions without login - Once authenticated through SOC, you can now access Playbook with analyst permissions without login
- Ingest parsing updates for Windows Eventlogs & Sysmon logs shipped with WinLogbeat & Osquery (ECS) - Ingest parsing updates for Windows Eventlogs & Sysmon logs shipped with WinLogbeat & Osquery (ECS)
- Kolide Launcher update to include the ability to pass arbitrary flags - new functionality sponsored by SOS - Kolide Launcher update to include the ability to pass arbitrary flags - new functionality sponsored by SOS
- Fixed issue with Wazuh authd registration service port not being correctly exposed
- Added option for exposure of ES Rest API (port 9200) to so-allow for easier external querying/integration with other tools
- Added option to so-allow for external Strelka file uploads (ex. via `strelka-fileshot`)
- Added default YARA rules for Strelka -- default rules are fmaintained by Florian Roth and pulled from https://github.com/Neo23x0/signature-base
- Added the ability to use custom Zeek scripts
- Improved unification of Zeek and Strelka file data
## Hybrid Hunter Beta 1.4.1 - Beta 3 ## Hybrid Hunter Beta 1.4.1 - Beta 3