Josh Brower
|
04ffdf9b15
|
Merge pull request #13958 from Security-Onion-Solutions/2.4/autoenablesigma
More flexibility for AutoEnable Sigma rules
|
2024-11-21 09:47:49 -05:00 |
|
defensivedepth
|
f61bf1bd67
|
Remove adv
|
2024-11-21 09:15:29 -05:00 |
|
defensivedepth
|
b1c4e32123
|
Remove duplicate option
|
2024-11-21 09:11:44 -05:00 |
|
defensivedepth
|
8958da83b3
|
Deprecate instead
|
2024-11-20 18:00:26 -05:00 |
|
defensivedepth
|
3fcf197bc1
|
Tweak structure
|
2024-11-19 11:54:15 -05:00 |
|
Jason Ertel
|
532dfd7f5a
|
Merge pull request #13966 from Security-Onion-Solutions/jertel/wip
MFA issuer name shouldn't be an advanced setting
|
2024-11-19 09:35:26 -05:00 |
|
Jason Ertel
|
92ddf2ec6c
|
MFA issuer name shouldn't be an advanced setting
|
2024-11-19 09:27:26 -05:00 |
|
coreyogburn
|
a703f46a0a
|
Merge pull request #13961 from Security-Onion-Solutions/cogburn/engine-update-config
Add Annotations to Existing Detections Options
|
2024-11-18 14:46:04 -07:00 |
|
Corey Ogburn
|
d86c009f55
|
Add Annotations to Existing Detections Options
The autoUpdateEnabled setting has been present for awhile and now have annotations.
|
2024-11-18 14:35:55 -07:00 |
|
defensivedepth
|
56d6857cd6
|
Addl customization for autoenable sigma
|
2024-11-18 09:03:17 -05:00 |
|
Jason Ertel
|
52bc9be6b6
|
Merge pull request #13956 from Security-Onion-Solutions/jertel/wip
ignore fp from hydra
|
2024-11-17 18:23:54 -05:00 |
|
Jason Ertel
|
918f26962a
|
ignore fp from hydra
|
2024-11-17 12:21:06 -05:00 |
|
Jason Ertel
|
3bf7870729
|
Merge pull request #13955 from Security-Onion-Solutions/jertel/wip
soup corrections
|
2024-11-16 21:31:08 -05:00 |
|
Jason Ertel
|
0eebe48492
|
soup corrections
|
2024-11-16 21:20:24 -05:00 |
|
Jason Ertel
|
cc44558f40
|
Merge pull request #13954 from Security-Onion-Solutions/jertel/wip
revert prev commit
|
2024-11-16 12:08:49 -05:00 |
|
Jason Ertel
|
73521dd7a7
|
revert prev commit
|
2024-11-16 11:09:44 -05:00 |
|
Jorge Reyes
|
3041d7d2b1
|
Merge pull request #13951 from Security-Onion-Solutions/reyesj2/integ
additional integrations
|
2024-11-15 15:02:04 -06:00 |
|
Jason Ertel
|
b6ab5249f1
|
Merge pull request #13953 from Security-Onion-Solutions/jertel/wip
Connect API upgrades
|
2024-11-15 14:32:37 -05:00 |
|
Jason Ertel
|
dc838e7148
|
connect
|
2024-11-15 14:25:52 -05:00 |
|
Jason Ertel
|
f290e52fbd
|
connect
|
2024-11-15 14:25:11 -05:00 |
|
Jason Ertel
|
e4de376394
|
connect api
|
2024-11-15 13:42:02 -05:00 |
|
reyesj2
|
44ec237447
|
additional integration support - cisco secure email gateway - rapid7 threat command
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-11-15 11:39:01 -06:00 |
|
Jorge Reyes
|
ec5a6aec41
|
Merge pull request #13946 from Security-Onion-Solutions/foxtrot
Zeek 7 w/ http2
|
2024-11-14 14:52:48 -06:00 |
|
Josh Patterson
|
7f96d20eb4
|
Merge pull request #13944 from Security-Onion-Solutions/saltbootstrap
update bootstrap-salt
|
2024-11-14 10:25:16 -05:00 |
|
Jorge Reyes
|
dfd9108f39
|
Merge pull request #13945 from Security-Onion-Solutions/2.4/dev
2.4/dev
|
2024-11-14 09:13:00 -06:00 |
|
Jorge Reyes
|
e07c1e6958
|
Merge pull request #13943 from Security-Onion-Solutions/zeek7
add http2
|
2024-11-14 09:11:08 -06:00 |
|
reyesj2
|
1113c3924f
|
zeek http2
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-11-14 09:09:23 -06:00 |
|
m0duspwnens
|
b1ddaa7211
|
support installing specified version for rhel variants. remove bootstrap -x python3 since not needed
|
2024-11-14 09:07:41 -05:00 |
|
Jorge Reyes
|
ff00ddeb3c
|
Merge pull request #13935 from Security-Onion-Solutions/ilm-detection
|
2024-11-13 15:07:29 -06:00 |
|
reyesj2
|
ba7a6dbbf0
|
Remove tuning/defaults "Remove in v7.1 The policy/tuning/defaults package is deprecated. The options set here are now the defaults for Zeek in general."
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-11-12 18:37:46 -06:00 |
|
reyesj2
|
f3a88de0c3
|
so-(case/detection)history uses same ilm policy as so-(case/detection)
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-11-12 16:28:01 -06:00 |
|
Jorge Reyes
|
4e0b5569dc
|
Merge pull request #13933 from Security-Onion-Solutions/ilm-detection
add ilm and update managed index settings
|
2024-11-12 15:22:05 -06:00 |
|
reyesj2
|
a4d763c1e5
|
use curl vs es query to force PUT request
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-11-12 14:50:04 -06:00 |
|
m0duspwnens
|
33fdc23965
|
remove salt repo files created by saltbootstrap
|
2024-11-12 11:31:42 -05:00 |
|
reyesj2
|
aaf9f53695
|
update soup; check for index before applying new index setting
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-11-11 22:40:06 -06:00 |
|
Jason Ertel
|
59cf049a06
|
Merge pull request #13930 from Security-Onion-Solutions/jertel/wip
ensure roles file exists since no longer syncing clients to es
|
2024-11-11 18:53:46 -05:00 |
|
Jason Ertel
|
5b74a55c3c
|
ensure roles file exists since no longer syncing clients to es
|
2024-11-11 17:21:42 -05:00 |
|
Josh Patterson
|
f2ce070833
|
Merge pull request #13927 from Security-Onion-Solutions/saltbootstrap
upodate saltbootstrap
|
2024-11-11 16:17:23 -05:00 |
|
reyesj2
|
ce9bd18947
|
no error when versionlock dir exists after re-running soup
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-11-11 14:59:42 -06:00 |
|
m0duspwnens
|
9e5d0e88de
|
fix soversion path
|
2024-11-11 15:56:01 -05:00 |
|
reyesj2
|
43f7989d73
|
()
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-11-11 14:47:17 -06:00 |
|
m0duspwnens
|
69245e4fad
|
have soup_scripts remove old salt repo file
|
2024-11-11 15:31:57 -05:00 |
|
Jason Ertel
|
f8f496da73
|
Merge pull request #13923 from Security-Onion-Solutions/jertel/wip
Connect API
|
2024-11-11 15:04:34 -05:00 |
|
reyesj2
|
6dbe0645e5
|
use auto_expand_replica, configure ilm for so-case* & so-detection*
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-11-11 13:51:48 -06:00 |
|
Jason Ertel
|
d4ed34d0ea
|
connect
|
2024-11-11 11:56:19 -05:00 |
|
m0duspwnens
|
7875406da1
|
update bootstrap-salt for broadcom changes
|
2024-11-11 10:54:51 -05:00 |
|
Jason Ertel
|
57a9992a3d
|
Merge branch '2.4/dev' into jertel/wip
|
2024-11-11 10:06:44 -05:00 |
|
Josh Patterson
|
b3ce624fff
|
Merge pull request #13921 from Security-Onion-Solutions/reposynccron
only enable repo sync cron if OEL
|
2024-11-08 16:16:48 -05:00 |
|
m0duspwnens
|
ee4405e75e
|
only enable repo sync cron if OEL
|
2024-11-08 16:13:44 -05:00 |
|
Josh Brower
|
f7c3957a43
|
Merge pull request #13920 from Security-Onion-Solutions/2.4/templaterepos
Fix permissions
|
2024-11-08 15:34:56 -05:00 |
|