100 Commits
Author SHA1 Message Date
Jason ErtelandGitHub 834d18b77c Merge pull request #12603 from Security-Onion-Solutions/jertel/ld
reschedule lock jobs
2024-03-18 09:41:21 -04:00
Jason ErtelandGitHub fbbddc2aaf Merge pull request #12602 from Security-Onion-Solutions/jertel/lock
re-schedule lock jobs
2024-03-18 09:29:04 -04:00
Jason ErtelandGitHub 43f7dce297 Merge pull request #12407 from Security-Onion-Solutions/jertel/mergem
Jertel/mergem
2024-02-21 13:18:08 -05:00
Jason ErtelandGitHub b5f44e48ab Merge pull request #12403 from Security-Onion-Solutions/jertel/disctemplate
add message at top for clickable link
2024-02-21 12:42:04 -05:00
Jason ErtelandGitHub 6245ee9a5b Merge branch 'master' into jertel/disctemplate 2024-02-21 10:43:28 -05:00
Jason ErtelandGitHub f49fb7cbae Merge pull request #12401 from Security-Onion-Solutions/jertel/disctemplate
template improvements
2024-02-21 10:39:03 -05:00
Jason ErtelandGitHub 25ef12cdc5 Merge pull request #12395 from Security-Onion-Solutions/jertel/mergemaster
Jertel/mergemaster
2024-02-21 07:18:22 -05:00
Jason ErtelandGitHub d198458366 Merge pull request #12392 from Security-Onion-Solutions/jertel/glm_master
thread locking
2024-02-20 16:55:16 -05:00
Jason ErtelandGitHub 483bf60ae3 Merge pull request #12233 from Security-Onion-Solutions/jertel/23guidelines
Update 2-4.yml
2024-01-23 10:07:35 -05:00
Jason ErtelandGitHub 3672701dde Merge pull request #11506 from Security-Onion-Solutions/jertel-patch-1
Update VERSION
2023-10-11 09:26:32 -04:00
Jason ErtelandGitHub 07ed2cb3da Update VERSION 2023-10-10 21:35:48 -04:00
Jason ErtelandGitHub 7835cb6a7a Merge pull request #11360 from Security-Onion-Solutions/jertel/vol
Jertel/vol
2023-09-20 08:29:43 -04:00
Jason ErtelandGitHub 4d0d0714a5 Merge pull request #10401 from Security-Onion-Solutions/jertel/fixwhoisit
use the same requests version that's already packaged with the analyzer
2023-05-20 08:45:29 -04:00
Jason ErtelandGitHub aa426244bf Merge pull request #10394 from Security-Onion-Solutions/jertel/fixwhoisit
fix lib dependency issue with whoisit
2023-05-19 14:34:32 -04:00
Jason ErtelandGitHub 208c3d96e9 Merge pull request #10266 from Security-Onion-Solutions/jertel/aws
more detection improvements
2023-05-02 08:17:13 -04:00
Jason ErtelandGitHub f7ae8d449e Merge pull request #10259 from Security-Onion-Solutions/jertel/simplifycd
simplify cloud detection
2023-05-01 11:33:26 -04:00
Jason ErtelandGitHub 195274bb11 Merge branch 'dev' into jertel/simplifycd 2023-05-01 11:29:39 -04:00
Jason ErtelandGitHub 11babd2f1c Merge pull request #10221 from Security-Onion-Solutions/jertel/imdsv2to
timeout more quickly on aws imdsv2 detection
2023-04-26 07:59:13 -04:00
Jason ErtelandGitHub 91d667c3ad Merge pull request #10200 from Security-Onion-Solutions/jertel/imdsv2_23
Detect cloud install on forced imdsv2 instances
2023-04-25 09:46:39 -04:00
Jason ErtelandGitHub f04c01b28c Merge pull request #10204 from Security-Onion-Solutions/jertel/2.3.240_soup
soup update for 2.3.240
2023-04-25 09:46:28 -04:00
Jason ErtelandGitHub fe6a55b58e Merge pull request #9393 from Security-Onion-Solutions/jertel/soup23200
Move Kratos DB to /nsm
2022-12-14 14:26:19 -05:00
Jason ErtelandGitHub 56019f48ca Merge pull request #9358 from Security-Onion-Solutions/jertel/es853
Upgrade ES to 8.5.3
2022-12-12 13:45:56 -05:00
Jason ErtelandGitHub 1716cb0297 Merge pull request #9333 from Security-Onion-Solutions/jertel/mergedev
Jertel/mergedev
2022-12-08 09:17:20 -05:00
Jason ErtelandGitHub cff5a83ad5 Merge pull request #9324 from Security-Onion-Solutions/jertel/surifilecheck
Use original style due to pgrep conflict with cron
2022-12-07 12:06:26 -05:00
Jason ErtelandGitHub 35ca08ea88 Merge pull request #9315 from Security-Onion-Solutions/jertel/surifilecheck
Suricata support for filecheck; reduce cron noise
2022-12-07 08:17:19 -05:00
Jason ErtelandGitHub dfad5a748c Merge pull request #9303 from Security-Onion-Solutions/jertel/surifilecheck
Jertel/surifilecheck
2022-12-06 11:52:36 -05:00
Jason ErtelandGitHub 5b6182c003 Merge pull request #9289 from Security-Onion-Solutions/jertel/filechek
Update filecheck to support Suricata extracted files
2022-12-05 10:59:44 -05:00
Jason ErtelandGitHub fd34eb3c26 Merge pull request #9150 from Security-Onion-Solutions/kilo
Increase retry count and pause to allow more time for Ubuntu updates
2022-11-16 07:53:04 -05:00
Jason ErtelandGitHub 934ce9ba64 Merge pull request #9114 from Security-Onion-Solutions/kilo
merge master to dev
2022-11-10 16:50:33 -05:00
Jason ErtelandGitHub c23e8e5a7b Update README.txt 2022-11-02 10:23:19 -04:00
Jason ErtelandGitHub b8884b6ac9 Merge pull request #8968 from Security-Onion-Solutions/181soup
update soup for 2.3.181
2022-10-21 12:00:58 -04:00
Jason ErtelandGitHub db67c0ed94 Merge pull request #8577 from Security-Onion-Solutions/kilo
Increment version to 2.3.160
2022-08-23 07:14:05 -04:00
Jason ErtelandGitHub d6e118dcd3 Merge pull request #8403 from Security-Onion-Solutions/kilo
Increment version
2022-07-29 08:28:14 -04:00
Jason ErtelandGitHub 15124b6ad7 Merge pull request #8271 from Security-Onion-Solutions/kilo
Add content-type header to PUT request, now required in Kratos 0.10.1
2022-07-11 13:47:28 -04:00
Jason ErtelandGitHub f28c6d590a Merge pull request #8263 from Security-Onion-Solutions/kilo
Remove Jinja from yaml files before parsing
2022-07-08 20:32:22 -04:00
Jason ErtelandGitHub ac68fa822b Merge pull request #8200 from Security-Onion-Solutions/contrib
Add gh action for contrib check
2022-06-27 11:25:10 -04:00
Jason ErtelandGitHub 2e123b7a4f Merge pull request #8175 from Security-Onion-Solutions/kilo
Avoid failing setup due to retrying while waiting for lock file
2022-06-23 08:16:39 -04:00
Jason ErtelandGitHub e405750d26 Merge pull request #8095 from Security-Onion-Solutions/kilo
Bump version to 2.3.140
2022-06-08 09:07:56 -04:00
Jason ErtelandGitHub a70da41f20 Merge pull request #8032 from Security-Onion-Solutions/kilo
Exclude pkg upgrade retry error logs from failing setup
2022-05-28 08:34:40 -04:00
Jason ErtelandGitHub 88f17f037e Merge pull request #7982 from Security-Onion-Solutions/kilo
Upgrade to Kratos 0.9.0-alpha.3
2022-05-19 13:28:58 -04:00
Jason ErtelandGitHub c95bafd521 Merge pull request #7969 from Security-Onion-Solutions/fix/helpers-analyzers
Only import yaml module when config is loaded
2022-05-18 07:15:32 -04:00
Jason ErtelandGitHub 685789de33 Merge pull request #7936 from Security-Onion-Solutions/kilo
Improved unit test coverage of new analyzers; Utilize localized summa…
2022-05-12 16:47:18 -04:00
Jason ErtelandGitHub 60b55acd6f Merge pull request #7926 from Security-Onion-Solutions/kilo
Add support for analyzers in airgapped environments
2022-05-10 17:12:18 -04:00
Jason ErtelandGitHub 91a7f25d3a Corrected brand name capitalization 2022-05-10 09:39:19 -04:00
Jason ErtelandGitHub e19635e44a Merge pull request #7920 from Security-Onion-Solutions/kilo
Disable MRU queries on dashboards
2022-05-09 15:08:55 -04:00
Jason ErtelandGitHub dc209a37cd Merge pull request #7916 from Security-Onion-Solutions/kilo
Disable actions on dashboards group-by tables
2022-05-09 11:52:22 -04:00
Jason ErtelandGitHub 0e64a9e5c3 Merge pull request #7912 from Security-Onion-Solutions/kilo
Add dashboard ref to soc.json
2022-05-06 15:18:05 -04:00
Jason ErtelandGitHub 60763c38db Merge pull request #7911 from Security-Onion-Solutions/kilo
Analyzers + Dashboards
2022-05-06 13:50:54 -04:00
Jason ErtelandGitHub 71a86b0a3c Merge pull request #7856 from Security-Onion-Solutions/bumpver
Bump version
2022-04-25 13:01:19 -04:00
Jason ErtelandGitHub 13c9af5a5a Clearing hotfix 2022-04-08 10:23:44 -04:00
Jason ErtelandGitHub cedb23f4bc Merge pull request #7689 from Security-Onion-Solutions/esup
Upgrade to ES 7.17.2
2022-04-01 13:57:04 -04:00
Jason ErtelandGitHub 408f9d6695 Update .gitleaks.toml 2022-03-15 09:53:27 -04:00
Jason ErtelandGitHub b810f14428 Update .gitleaks.toml 2022-03-15 09:53:11 -04:00
Jason ErtelandGitHub cec9cba40e Create .gitleaks.toml 2022-03-15 09:47:57 -04:00
Jason ErtelandGitHub 8ebeeb497f add configuration to override leak detector defaults 2022-03-15 09:43:09 -04:00
Jason ErtelandGitHub 16f673d956 Merge pull request #7541 from Security-Onion-Solutions/kilo
Add assignee field to case list
2022-03-14 08:49:46 -04:00
Jason ErtelandGitHub f64da9632f Merge pull request #7461 from Security-Onion-Solutions/kilo
Gracefully handle situations where another process is using the Kratos DB while so-user executes
2022-03-08 11:02:14 -05:00
Jason ErtelandGitHub 73b2a36e89 Merge pull request #7365 from Security-Onion-Solutions/kilo
Upgrade to ES 7.17.1
2022-02-28 18:26:31 -05:00
Jason ErtelandGitHub 04a99a0adc Merge pull request #7361 from Security-Onion-Solutions/kilo
Clear out hotfix file
2022-02-28 16:04:30 -05:00
Jason ErtelandGitHub 380f0ef93a Merge pull request #7256 from Security-Onion-Solutions/kilo
Update password len requirements; clarify password update help
2022-02-18 15:19:08 -05:00
Jason ErtelandGitHub cb9712aa08 Merge pull request #7217 from Security-Onion-Solutions/kilo
MFA
2022-02-16 16:47:40 -05:00
Jason ErtelandGitHub 1bac031975 Merge pull request #7058 from Security-Onion-Solutions/kilo
Bump to 2.3.110
2022-02-01 15:04:48 -05:00
Jason ErtelandGitHub ac21bd1e29 Merge pull request #7009 from Security-Onion-Solutions/kilo
Add new abbreviated result limit param
2022-01-27 15:55:42 -05:00
Jason ErtelandGitHub c2636036ee Merge pull request #6995 from Security-Onion-Solutions/kilo
store related event data as a flattened object blob
2022-01-26 12:21:02 -05:00
Jason ErtelandGitHub 4ab7a6a079 Merge pull request #6967 from Security-Onion-Solutions/kilo
Copyright year and format update
2022-01-24 10:39:31 -05:00
Jason ErtelandGitHub e984b0b9c4 Merge pull request #6921 from Security-Onion-Solutions/kilo
remove unused fields object from related case schema
2022-01-19 14:42:05 -05:00
Jason ErtelandGitHub a63787daba Merge pull request #6864 from Security-Onion-Solutions/kilo
Add default queries for cases to show user's assigned cases
2022-01-13 17:15:02 -05:00
Jason ErtelandGitHub db04646735 Merge pull request #6794 from Security-Onion-Solutions/kilo
Update field mappings based on Wes' feedback
2022-01-07 16:03:05 -05:00
Jason ErtelandGitHub a4f01d4412 Merge pull request #6792 from Security-Onion-Solutions/kilo
Add case exclusion toggle to Hunt to avoid hunt results getting case …
2022-01-07 13:02:27 -05:00
Jason ErtelandGitHub 8cf7ea8b87 Merge pull request #6772 from Security-Onion-Solutions/kilo
Prevent PCAP action from showing up outside of hunt/alerts
2022-01-05 19:15:02 -05:00
Jason ErtelandGitHub 89415b12ce Merge pull request #6762 from Security-Onion-Solutions/kilo
Switch soc.json to use lowercase labels in default queries; Also enab…
2022-01-05 09:59:39 -05:00
Jason ErtelandGitHub 1d136b611a Merge pull request #6723 from Security-Onion-Solutions/kilo
Uniform presets
2021-12-29 16:49:41 -05:00
Jason ErtelandGitHub 74dbc4bf67 Merge pull request #6720 from Security-Onion-Solutions/kilo
Add case template to eval install types; also improve clarity of case queries
2021-12-29 11:41:06 -05:00
Jason ErtelandGitHub d4f3615cae Merge pull request #6717 from Security-Onion-Solutions/kilo
Support CCS in CM
2021-12-29 09:12:13 -05:00
Jason ErtelandGitHub 0072ae253b Merge pull request #6705 from Security-Onion-Solutions/kilo
Initial CM Impl; Improve so-user script
2021-12-28 08:36:59 -05:00
Jason ErtelandGitHub 2f88f08be2 Merge pull request #6649 from Security-Onion-Solutions/2.3.91-merge
2.3.91 merge
2021-12-21 09:39:14 -05:00
Jason ErtelandGitHub 8ec671422f Merge pull request #6593 from Security-Onion-Solutions/esup
Finish upgrade of ES to 7.16.1
2021-12-16 07:59:34 -05:00
Jason ErtelandGitHub ffa8ca57a7 Merge pull request #6579 from Security-Onion-Solutions/unhotfix
Remove some previous hotfix code
2021-12-15 12:34:00 -05:00
Jason ErtelandGitHub 83fab42b6e Merge pull request #6433 from Security-Onion-Solutions/kilo
Reign in the Wazuh port check to only complain if a non-Docker process is listening on 55000.
2021-12-02 09:39:14 -05:00
Jason ErtelandGitHub 1272de3058 Merge pull request #6378 from Security-Onion-Solutions/TOoSmOotH-patch-2
bump version to 2.3.100
2021-11-29 09:57:29 -05:00
Jason ErtelandGitHub 31ffd6c4ec Merge pull request #6339 from Security-Onion-Solutions/kilo
Merge 2.3.90 WAZUH hotfix into dev
2021-11-23 19:33:18 -05:00
Jason ErtelandGitHub 273842eb43 Merge pull request #6328 from Security-Onion-Solutions/kilo
WAZUH hotfix
2021-11-23 12:06:34 -05:00
Jason ErtelandGitHub 9737a4088c Merge pull request #6327 from Security-Onion-Solutions/TOoSmOotH-patch-1
Update HOTFIX
2021-11-23 09:25:43 -05:00
Jason ErtelandGitHub 9c0e8cedba Merge pull request #6279 from Security-Onion-Solutions/syncesusers_so-kratos
restart kratos if failure
2021-11-18 10:49:12 -05:00
Jason ErtelandGitHub 96f1f0174b Merge pull request #6275 from Security-Onion-Solutions/syncesusers_so-kratos
break kratos state out from soc state
2021-11-18 09:13:10 -05:00
Jason ErtelandGitHub 83bd314a63 Merge pull request #6186 from Security-Onion-Solutions/kilo
Upgrade to ES 7.15.2
2021-11-10 14:06:08 -05:00
Jason ErtelandGitHub c469d12a49 Merge pull request #6002 from Security-Onion-Solutions/kilo
Update whiptail links to use latest docs
2021-10-25 15:08:31 -04:00
Jason ErtelandGitHub e9a44c6e1b Merge pull request #5662 from Security-Onion-Solutions/TOoSmOotH-patch-1
Update README.md
2021-09-27 09:28:46 -04:00
Jason ErtelandGitHub 9eb6f5942e Merge pull request #5623 from Security-Onion-Solutions/kilo
Prevent email addresses from having uppercase characters
2021-09-22 09:10:38 -04:00
Jason ErtelandGitHub 3924b8f5db Merge pull request #5586 from Security-Onion-Solutions/kilo
Ensure identity ID parm is quoted now that it doesn't have embedded quotes in the value
2021-09-20 13:56:30 -04:00
Jason ErtelandGitHub a3f62c81c3 Merge pull request #5577 from Security-Onion-Solutions/kilo
Continuation of auth enhancements
2021-09-20 06:30:36 -04:00
Jason ErtelandGitHub 4e2d5018a2 Merge pull request #5455 from Security-Onion-Solutions/kilo
Consolidate whiptail screens
2021-09-09 14:57:28 -04:00
Jason ErtelandGitHub 19a02baa7c Merge pull request #5425 from Security-Onion-Solutions/kilo
Auth enhancements
2021-09-07 13:10:36 -04:00
Jason ErtelandGitHub 6dfc943e8c Merge pull request #5382 from Security-Onion-Solutions/kilo
Correct invalid password message
2021-09-02 07:15:09 -04:00
Jason ErtelandGitHub e39de8c7bc Merge pull request #5089 from Ron89/feature/thehive-userupdate
add user password update command
2021-08-15 09:36:35 -04:00
Jason ErtelandGitHub 84fdc1e690 Merge pull request #5057 from Security-Onion-Solutions/bravo
Several Suricata things
2021-08-04 12:26:11 -04:00
Jason ErtelandGitHub 724f7d4f3d Merge pull request #5036 from Security-Onion-Solutions/kilo
Condense cloud automations
2021-08-02 18:04:05 -04:00
Jason ErtelandGitHub c524b54af1 Merge pull request #4988 from Security-Onion-Solutions/mkr2361
2.3.61-MSEARCH
2021-07-29 11:10:41 -04:00
Jason ErtelandGitHub 28c5c02ef1 Merge pull request #4958 from Security-Onion-Solutions/issue/4024
https://github.com/Security-Onion-Solutions/securityonion/issues/4024
2021-07-27 16:21:13 -04:00
Jason ErtelandGitHub 356b623148 Merge pull request #4937 from Security-Onion-Solutions/kilo
Add Azure automations
2021-07-26 16:13:57 -04:00