100 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Josh BrowerandGitHub	f7c3957a43	Merge pull request #13920 from Security-Onion-Solutions/2.4/templaterepos ... Fix permissions	2024-11-08 15:34:56 -05:00
defensivedepth	dcbb0e48d4	make sure its owned by socore	2024-11-08 14:34:29 -05:00
defensivedepth	74b95a0bcc	Merge remote-tracking branch 'origin/2.4/dev' into 2.4/templaterepos	2024-11-08 09:20:11 -05:00
defensivedepth	8b70aa9f0e	Fix socore permissions	2024-11-08 09:19:41 -05:00
Josh BrowerandGitHub	47f9b0021c	Merge pull request #13879 from Security-Onion-Solutions/2.4/templaterepos ... Add local custom template	2024-11-07 15:40:36 -05:00
defensivedepth	f5bd8ab585	Rewrite docs	2024-11-07 15:33:47 -05:00
defensivedepth	28d468dd41	Merge remote-tracking branch 'origin/2.4/dev' into 2.4/templaterepos	2024-11-07 07:25:01 -05:00
Josh BrowerandGitHub	6ab05e7c05	Merge pull request #13890 from Security-Onion-Solutions/2.4/templatefix ... timestamp fix	2024-10-31 10:59:45 -04:00
defensivedepth	7896f951f3	timestamp fix	2024-10-31 10:24:58 -04:00
Josh BrowerandGitHub	01932d873f	Merge pull request #13883 from Security-Onion-Solutions/2.4/lookuprev2 ... 2.4/lookuprev2	2024-10-31 08:46:01 -04:00
Josh BrowerandGitHub	84a8477c5d	Merge pull request #13887 from Security-Onion-Solutions/2.4/soupedite ... rm eaintegration state file	2024-10-30 17:15:07 -04:00
defensivedepth	6b468eaed3	rm eaintegration state file	2024-10-30 16:52:44 -04:00
defensivedepth	c509dab5f1	Use socore user	2024-10-30 11:03:14 -04:00
Josh BrowerandGitHub	1940901386	Merge pull request #13882 from Security-Onion-Solutions/ipmappingses ... add so-ip-mappings index	2024-10-30 10:28:40 -04:00
defensivedepth	5406a263d5	Add local custom template	2024-10-29 19:42:06 -04:00
Josh BrowerandGitHub	ac359839e2	Merge pull request #13877 from Security-Onion-Solutions/2.4/lookuprev2 ... Initial support for local lookup	2024-10-29 11:22:39 -04:00
defensivedepth	4c5099d429	Initial support for local lookup	2024-10-29 10:27:54 -04:00
Josh BrowerandGitHub	6a3e5415cf	Merge pull request #13832 from Security-Onion-Solutions/2.4/sigmapipelines ... Add process and file creation mappings	2024-10-28 18:30:21 -04:00
defensivedepth	f3ca5b1c42	Remove OS-specific mappings	2024-10-28 09:19:51 -04:00
defensivedepth	dcdfaf66f4	Add process and file creation mappings	2024-10-16 15:20:52 -04:00
Josh BrowerandGitHub	8521123d19	Merge pull request #13745 from Security-Onion-Solutions/2.4/agfix ... Move Airgap later in setup	2024-09-26 15:51:31 -04:00
defensivedepth	3567dfc0dc	Move Airgap later in setup	2024-09-26 15:48:50 -04:00
Josh BrowerandGitHub	500811d5ea	Merge pull request #13743 from Security-Onion-Solutions/2.4/agfix ... Fix path	2024-09-26 09:50:16 -04:00
defensivedepth	d86694a01c	Fix path	2024-09-26 09:48:28 -04:00
Josh BrowerandGitHub	421120024a	Merge pull request #13740 from Security-Onion-Solutions/2.4/agfix ... Fix location for airgap	2024-09-26 08:54:58 -04:00
defensivedepth	fe860481c5	Fix location for airgap	2024-09-26 08:52:53 -04:00
Josh BrowerandGitHub	8af086c2a1	Merge pull request #13737 from Security-Onion-Solutions/2.4/summaries ... Change summaries branch	2024-09-25 15:41:59 -04:00
defensivedepth	778d5be407	Change summaries branch	2024-09-25 15:35:08 -04:00
Josh BrowerandGitHub	31d8593c8e	Merge pull request #13733 from Security-Onion-Solutions/2.4/sigma-airgapfix ... Add so repo back in	2024-09-25 10:23:11 -04:00
defensivedepth	445a9679bd	Add so repo back in	2024-09-25 10:18:57 -04:00
Josh BrowerandGitHub	b24c7fbf93	Merge pull request #13729 from Security-Onion-Solutions/2.4/temp-summaries-branch ... Use temp summaries branch	2024-09-24 17:17:00 -04:00
defensivedepth	48aff374a3	Use temp summaries branch	2024-09-24 15:37:43 -04:00
Josh BrowerandGitHub	0ff9153d1a	Merge pull request #13727 from Security-Onion-Solutions/2.4/filter-tweaks ... Disable by default & Airgap	2024-09-24 13:06:41 -04:00
defensivedepth	d2397c3c1c	Refactor cron logic	2024-09-24 13:03:51 -04:00
defensivedepth	0a74a53254	Remove cron if disabled	2024-09-24 12:38:49 -04:00
defensivedepth	01f87218de	Airgap support	2024-09-24 12:04:24 -04:00
defensivedepth	5286739414	Disable by default	2024-09-24 10:51:52 -04:00
Josh BrowerandGitHub	da3be8d8be	Merge pull request #13709 from Security-Onion-Solutions/2.4/defend-filters ... Initial Support for managing Elastic Defend Filters	2024-09-23 17:00:10 -04:00
defensivedepth	5cc8198302	Fix permissions	2024-09-23 16:32:42 -04:00
defensivedepth	2a890a35a0	Update format	2024-09-23 13:48:12 -04:00
defensivedepth	219cb5e044	Merge remote-tracking branch 'origin/2.4/dev' into 2.4/defend-filters	2024-09-23 13:03:32 -04:00
defensivedepth	ef003ffbb5	Refactor	2024-09-23 12:55:07 -04:00
defensivedepth	074cc8e6ff	Initial commit	2024-09-20 11:58:21 -04:00
Josh BrowerandGitHub	7311773c20	Merge pull request #13598 from Security-Onion-Solutions/2.4/main ... Hotfix-2.4.100.20240903	2024-09-03 13:13:16 -04:00
Josh BrowerandGitHub	5472d2586c	Merge pull request #13596 from Security-Onion-Solutions/hotfix/2.4.100 ... Hotfix 2.4.100	2024-09-03 13:07:49 -04:00
Josh BrowerandGitHub	9746f6e5e2	Merge pull request #13570 from Security-Onion-Solutions/2.4/ignore-logstash-err ... Exclude logstash startup errors	2024-08-28 16:51:35 -04:00
DefensiveDepth	89a1e2500e	Exclude logstash startup errors	2024-08-28 16:50:11 -04:00
Josh BrowerandGitHub	75086bac7f	Merge pull request #13556 from Security-Onion-Solutions/2.4/fixpolicyload ... Fix policy load	2024-08-26 16:49:54 -04:00
DefensiveDepth	726df310ee	Add context	2024-08-26 16:15:56 -04:00
DefensiveDepth	b952728b2c	Fix policy load	2024-08-26 15:57:21 -04:00
Josh BrowerandGitHub	29f996de66	Merge pull request #13547 from Security-Onion-Solutions/2.4/soupchanges ... Elastic Fleet refactoring	2024-08-23 13:56:05 -04:00
DefensiveDepth	c575e02fbb	Use correct name	2024-08-23 13:52:20 -04:00
DefensiveDepth	e86fce692c	Merge remote-tracking branch 'origin/2.4/dev' into 2.4/soupchanges	2024-08-23 11:44:39 -04:00
DefensiveDepth	8d35c7c139	Merge branch '2.4/soupchanges' of https://github.com/Security-Onion-Solutions/securityonion into 2.4/soupchanges	2024-08-23 11:37:16 -04:00
DefensiveDepth	0a5725a62e	Refactor for Elastic Upgrade	2024-08-23 11:36:47 -04:00
DefensiveDepth	f01825166d	Update Fleet Server policy	2024-08-21 08:31:37 -04:00
DefensiveDepth	07f8bda27e	Update agent	2024-08-20 15:23:31 -04:00
DefensiveDepth	e3ecc9d4be	Directly manage the Fleet Server integration config	2024-08-20 15:06:16 -04:00
DefensiveDepth	ca209ed54c	Disable auto-upgrade	2024-08-20 09:14:08 -04:00
DefensiveDepth	df6ff027b5	Remove unneeded elastic upgrade config	2024-08-19 16:05:27 -04:00
Josh BrowerandGitHub	dea582f24a	Merge pull request #13487 from Security-Onion-Solutions/2.4/logcheck ... Add influxdb known error	2024-08-15 11:57:59 -04:00
DefensiveDepth	b860bf753a	Add influxdb known error	2024-08-15 11:50:34 -04:00
DefensiveDepth	92a847e3bd	Fix Fleet setup	2024-06-27 11:48:54 -04:00
DefensiveDepth	75bbc41d38	Merge remote-tracking branch 'refs/remotes/origin/foxtrot' into foxtrot	2024-06-27 11:48:05 -04:00
Josh BrowerandGitHub	3fbab7c3af	Merge pull request #13223 from Security-Onion-Solutions/2.4/timeout ... Update defaults	2024-06-18 08:55:30 -04:00
DefensiveDepth	521cccaed6	Update defaults	2024-06-18 08:43:00 -04:00
Josh BrowerandGitHub	c540a4f257	Merge pull request #13208 from Security-Onion-Solutions/2.4/ruletemplates ... Update rule templates	2024-06-14 16:01:26 -04:00
DefensiveDepth	7af94c172f	Change spelling	2024-06-14 16:00:22 -04:00
DefensiveDepth	7556587e35	Update rule templates	2024-06-14 15:47:57 -04:00
Josh BrowerandGitHub	af11879545	Merge pull request #13205 from Security-Onion-Solutions/2.4/customsuricatasources ... Initial support for custom suricata urls and local rulesets	2024-06-14 13:50:06 -04:00
DefensiveDepth	c89f1c9d95	remove multiline	2024-06-14 13:48:55 -04:00
DefensiveDepth	b7ac599a42	set to empty	2024-06-14 13:21:36 -04:00
DefensiveDepth	8363877c66	move to custom rules	2024-06-14 12:41:44 -04:00
DefensiveDepth	4bcb4b5b9c	removed unneeded import	2024-06-14 09:32:34 -04:00
DefensiveDepth	68302e14b9	add to defaults and tweaks	2024-06-14 09:28:23 -04:00
DefensiveDepth	c1abc7a7f1	Update description	2024-06-14 08:51:34 -04:00
DefensiveDepth	484717d57d	initial support for custom suricata urls and local rulesets	2024-06-14 08:42:10 -04:00
Josh BrowerandGitHub	e90557d7dc	Merge pull request #13179 from Security-Onion-Solutions/2.4/fixintegritycheck ... Add new bind - suricata all.rules	2024-06-11 13:08:40 -04:00
DefensiveDepth	08d2a6242d	Add new bind - suricata all.rules	2024-06-11 10:03:33 -04:00
Josh BrowerandGitHub	ef10794e3b	Merge pull request #13089 from Security-Onion-Solutions/2.4/realert ... fix rsync	2024-05-29 11:12:45 -04:00
DefensiveDepth	0d034e7adc	fix rsync	2024-05-29 10:55:56 -04:00
Josh BrowerandGitHub	ca49943a7f	Merge pull request #13085 from Security-Onion-Solutions/2.4/soupchange ... Check to see if local exists	2024-05-28 10:25:46 -04:00
DefensiveDepth	ee4ca0d7a2	Check to see if local exists	2024-05-28 10:24:09 -04:00
Josh BrowerandGitHub	0d634f3b8e	Merge pull request #13084 from Security-Onion-Solutions/2.4/soupchange ... Fix fi	2024-05-28 10:05:33 -04:00
DefensiveDepth	f68ac23f0e	Fix fi ... Signed-off-by: DefensiveDepth <Josh@defensivedepth.com>	2024-05-28 10:03:31 -04:00
Josh BrowerandGitHub	825c4a9adb	Merge pull request #13083 from Security-Onion-Solutions/2.4/soupchange ... Backup .yml files too	2024-05-28 09:45:53 -04:00
DefensiveDepth	2a2b86ebe6	Dont overwrite	2024-05-28 09:43:45 -04:00
DefensiveDepth	74dfc25376	backup local rules	2024-05-28 09:29:10 -04:00
DefensiveDepth	81ee60e658	Backup .yml files too	2024-05-28 06:42:18 -04:00
Josh BrowerandGitHub	49fd84a3a7	Merge pull request #13081 from Security-Onion-Solutions/2.4/soupchange ... Dont bail - just wait for enter	2024-05-24 16:28:40 -04:00
DefensiveDepth	58b565558d	Dont bail - just wait for enter	2024-05-24 16:21:59 -04:00
Josh BrowerandGitHub	185fb38b2d	Merge pull request #13079 from Security-Onion-Solutions/2.4/sigmapipelineupdates ... Add IDH mappings	2024-05-24 14:48:22 -04:00
DefensiveDepth	550b3ee92d	Add IDH mappings	2024-05-24 14:46:24 -04:00
Josh BrowerandGitHub	29a87fd166	Merge pull request #13078 from Security-Onion-Solutions/2.4/socdefaultsdet ... Add instructions for sigma and yara repos	2024-05-24 13:02:01 -04:00
DefensiveDepth	f90d40b471	Fix typo	2024-05-24 12:56:17 -04:00
DefensiveDepth	4344988abe	Add instructions for sigma and yara repos	2024-05-24 12:54:36 -04:00
Josh BrowerandGitHub	979147a111	Merge pull request #13062 from Security-Onion-Solutions/2.4/backupscript ... Detections backup script	2024-05-24 10:06:56 -04:00
DefensiveDepth	66725b11b3	Added unit tests	2024-05-24 09:55:10 -04:00
Josh BrowerandGitHub	a8c287c491	Merge pull request #13067 from Security-Onion-Solutions/2.4/fixpipeline ... Fix strelka rule.uuid	2024-05-23 07:53:14 -04:00
DefensiveDepth	8e7c487cb0	Fix strelka rule.uuid	2024-05-23 05:59:31 -04:00