8270 Commits

Author	SHA1	Message	Date
Wes	0bba68769b	Make scan.pe.image_version type of 'float'	2023-09-26 14:05:12 +00:00
weslambert	7cb9b5f257	Add the blank line that was removed from the previous commit	2023-09-25 14:41:20 -04:00
weslambert	c95af6b992	Add a note about testing analyzers outside of the Sensoroni Docker container	2023-09-25 14:39:33 -04:00
weslambert	2fc4d2923d	Merge pull request #11289 from Security-Onion-Solutions/fix/elastic_agent_404 ... /app/dashboards to /kibana/app/dashboards	2023-09-25 09:11:50 -04:00
Wes	eeeae08ec8	/app/ to /app/dashboards/	2023-09-21 18:39:06 +00:00
Jason Ertel	fa3a79a787	Update soup to prune in background	2023-09-21 09:41:44 -04:00
Doug Burks	3fa3f83007	Update soc_sensoroni.yaml	2023-09-20 08:22:52 -04:00
Wes	2e0ea3f374	Set final pipeline	2023-09-19 13:33:12 +00:00
Wes	508260bd46	Use event.created for timestamp	2023-09-19 13:32:03 +00:00
Wes	a1e963f834	Reverse timestamps where necessary	2023-09-19 13:28:20 +00:00
Wes	5bac1e4d15	Show correct dates and Kibana URL for already processed EVTX files	2023-09-18 21:31:15 +00:00
Jason Ertel	ad025b9683	Merge pull request #11345 from Security-Onion-Solutions/jertel/auto ... ensure all binds are present to avoid volume sprawl	2023-09-18 15:34:57 -04:00
m0duspwnens	151e8bfc4e	fix idstool extra_env for container	2023-09-18 15:21:45 -04:00
Jason Ertel	a914a02273	prune unused volumes during upgrade	2023-09-18 14:43:02 -04:00
Jason Ertel	bb3632d1b2	fix bind if statement	2023-09-18 14:38:15 -04:00
Jason Ertel	66bb1272ae	avoid volume sprawl	2023-09-18 13:39:56 -04:00
Jason Ertel	bbef96ac25	use unique name	2023-09-18 12:12:57 -04:00
Jason Ertel	f9cbde10a6	avoid volume sprawl	2023-09-18 11:19:21 -04:00
weslambert	fe1bae96ed	Merge pull request #11297 from Security-Onion-Solutions/fix/soc_idh ... Change description to indicate that opencanary modules only apply to IDH nodes	2023-09-15 11:16:06 -04:00
Wes	98499c3963	Clean component template directory	2023-09-15 13:51:46 +00:00
defensivedepth	0c11a9b733	Add transform role	2023-09-14 09:33:17 -04:00
defensivedepth	59d077f3ff	Fix regex	2023-09-14 08:32:17 -04:00
Mike Reeves	33d68478b6	Update so-minion	2023-09-13 11:48:16 -04:00
Mike Reeves	22c0323bda	Update so-minion	2023-09-13 10:57:45 -04:00
Doug Burks	11b8e13418	FIX: SOC Config pcap doc links should point to steno docs #11302	2023-09-13 07:37:54 -04:00
m0duspwnens	30c3255cb2	dont manage sorules	2023-09-12 08:39:42 -04:00
Wes	35ebbc974c	Change description to indicate that opencanary modules only apply to IDH nodes	2023-09-11 13:52:16 +00:00
Wes	f1d0db8171	/app to /kibana/app	2023-09-11 13:30:11 +00:00
m0duspwnens	e814a3409f	fix rule location for rulecat.conf. run so-rule-update if rules change in /opt/so/rules/nids	2023-09-08 15:28:24 -04:00
m0duspwnens	8d269fee30	Merge remote-tracking branch 'origin/2.4/dev' into issue/11210	2023-09-07 15:46:25 -04:00
m0duspwnens	35157f2e8b	add comment	2023-09-07 15:46:04 -04:00
m0duspwnens	60f1947eb4	prevent endgame_dict from being added to standard_actions if it is already present	2023-09-07 14:01:19 -04:00
m0duspwnens	ffaab4a1b4	only add endgame to action if it is populated	2023-09-06 14:19:53 -04:00
weslambert	70e1309c9f	Merge pull request #11261 from Security-Onion-Solutions/fix/remove_default_templates ... Remove templates	2023-09-06 10:57:09 -04:00
Jason Ertel	5c0045f9f8	Merge pull request #11256 from Security-Onion-Solutions/jertel/sod ... only ingest pfsense on sensor nodes	2023-09-05 12:50:47 -04:00
Jason Ertel	b66be9c226	only ingest pfsense on sensor nodes	2023-09-05 12:46:49 -04:00
Josh Patterson	651393988a	Merge pull request #11255 from Security-Onion-Solutions/issue/10975 ... Issue/10975	2023-09-05 11:57:58 -04:00
Wes	cf19c8f8c2	Remove templates	2023-09-05 13:43:41 +00:00
Mike Reeves	d2dcf7e7c1	Merge pull request #11241 from Security-Onion-Solutions/jertel/sod	2023-09-01 18:22:38 -04:00
m0duspwnens	07ed93de19	add elastic agent to desktop	2023-09-01 14:33:32 -04:00
Jason Ertel	8093e5ce7c	use IP to avoid host issues	2023-09-01 13:01:17 -04:00
m0duspwnens	aebfb19ab7	add sostatus.sh to desktop for telegraf scripts	2023-09-01 12:05:28 -04:00
m0duspwnens	490669d378	add ssl to desktop for allowed_states	2023-09-01 12:03:01 -04:00
m0duspwnens	3434d0f200	add sensoroni and telegraf back to individual nodes. add seperate block for desktop	2023-09-01 12:02:30 -04:00
weslambert	765a22e6f0	Add so-elastic-agent	2023-09-01 11:31:23 -04:00
Jason Ertel	546c562ef0	expose standard relay timeout in config UI; up default to 45s to accommodate sluggish pillar.get calls	2023-09-01 10:31:02 -04:00
m0duspwnens	b64d4e3658	add telegraf pillar to desktop	2023-09-01 09:53:26 -04:00
m0duspwnens	0fb00d569e	allow states for desktop. give all nodes docker_clean, order it last	2023-09-01 09:39:39 -04:00
m0duspwnens	b64fa51268	give desktop docker state and pillars	2023-09-01 09:16:24 -04:00
m0duspwnens	b010919099	add sensoroni, telegraf, common states to desktop. allow docker_registry connection to managers for desktop	2023-08-31 13:21:32 -04:00