15038 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
DefensiveDepth	0d034e7adc	fix rsync	2024-05-29 10:55:56 -04:00
Josh Brower	ca49943a7f	Merge pull request #13085 from Security-Onion-Solutions/2.4/soupchange ... Check to see if local exists	2024-05-28 10:25:46 -04:00
DefensiveDepth	ee4ca0d7a2	Check to see if local exists	2024-05-28 10:24:09 -04:00
Josh Brower	0d634f3b8e	Merge pull request #13084 from Security-Onion-Solutions/2.4/soupchange ... Fix fi	2024-05-28 10:05:33 -04:00
DefensiveDepth	f68ac23f0e	Fix fi ... Signed-off-by: DefensiveDepth <Josh@defensivedepth.com>	2024-05-28 10:03:31 -04:00
Josh Brower	825c4a9adb	Merge pull request #13083 from Security-Onion-Solutions/2.4/soupchange ... Backup .yml files too	2024-05-28 09:45:53 -04:00
DefensiveDepth	2a2b86ebe6	Dont overwrite	2024-05-28 09:43:45 -04:00
DefensiveDepth	74dfc25376	backup local rules	2024-05-28 09:29:10 -04:00
DefensiveDepth	81ee60e658	Backup .yml files too	2024-05-28 06:42:18 -04:00
Josh Brower	49fd84a3a7	Merge pull request #13081 from Security-Onion-Solutions/2.4/soupchange ... Dont bail - just wait for enter	2024-05-24 16:28:40 -04:00
DefensiveDepth	58b565558d	Dont bail - just wait for enter	2024-05-24 16:21:59 -04:00
Josh Brower	185fb38b2d	Merge pull request #13079 from Security-Onion-Solutions/2.4/sigmapipelineupdates ... Add IDH mappings	2024-05-24 14:48:22 -04:00
DefensiveDepth	550b3ee92d	Add IDH mappings	2024-05-24 14:46:24 -04:00
Josh Brower	29a87fd166	Merge pull request #13078 from Security-Onion-Solutions/2.4/socdefaultsdet ... Add instructions for sigma and yara repos	2024-05-24 13:02:01 -04:00
DefensiveDepth	f90d40b471	Fix typo	2024-05-24 12:56:17 -04:00
DefensiveDepth	4344988abe	Add instructions for sigma and yara repos	2024-05-24 12:54:36 -04:00
Josh Brower	979147a111	Merge pull request #13062 from Security-Onion-Solutions/2.4/backupscript ... Detections backup script	2024-05-24 10:06:56 -04:00
DefensiveDepth	66725b11b3	Added unit tests	2024-05-24 09:55:10 -04:00
Jason Ertel	19f9c4e389	Merge pull request #13076 from Security-Onion-Solutions/jertel/eaconfig ... provide default columns when viewing SOC logs	2024-05-24 08:39:17 -04:00
Jason Ertel	bd11d59c15	add event.dataset since there are other datasets in soc logs	2024-05-24 08:38:12 -04:00
Jason Ertel	15155613c3	provide default columns when viewing SOC logs	2024-05-24 08:23:45 -04:00
Josh Patterson	7177392adc	Merge pull request #13071 from Security-Onion-Solutions/telfinwip ... Telfinwip	2024-05-23 10:46:54 -04:00
m0duspwnens	ea7715f729	use waitforstate var instead.	2024-05-23 10:41:10 -04:00
m0duspwnens	0b9ebefdb6	only show telem status in final whiptail if new deployment	2024-05-23 10:08:23 -04:00
Mike Reeves	19e66604d0	Merge pull request #13069 from Security-Onion-Solutions/TOoSmOotH-patch-8 ... Update defaults.yaml	2024-05-23 08:22:05 -04:00
Mike Reeves	1e6161f89c	Update defaults.yaml	2024-05-23 08:19:43 -04:00
Josh Brower	a8c287c491	Merge pull request #13067 from Security-Onion-Solutions/2.4/fixpipeline ... Fix strelka rule.uuid	2024-05-23 07:53:14 -04:00
Doug Burks	2c4f5f0a91	Merge pull request #13066 from Security-Onion-Solutions/dougburks-patch-1 ... Update defaults.yaml to fix order of groupby tables and eliminate dup…	2024-05-23 06:02:49 -04:00
DefensiveDepth	8e7c487cb0	Fix strelka rule.uuid	2024-05-23 05:59:31 -04:00
Doug Burks	3d4f3a04a3	Update defaults.yaml to fix order of groupby tables and eliminate duplicate	2024-05-23 05:56:18 -04:00
Josh Brower	ce063cf435	Merge pull request #13063 from Security-Onion-Solutions/2.4/yarafix ... Fix casing issue	2024-05-22 18:51:54 -04:00
DefensiveDepth	a072e34cfe	Fix casing issue	2024-05-22 17:12:41 -04:00
DefensiveDepth	d19c1a514b	Detections backup script	2024-05-22 15:12:23 -04:00
weslambert	b415810485	Merge pull request #13061 from Security-Onion-Solutions/fix/tab_casing ... Change tab casing to be consistent with other whiptail prompts	2024-05-22 13:44:09 -04:00
weslambert	3cfd710756	Change tab casing to be consistent with other whiptail prompts	2024-05-22 13:41:32 -04:00
Jason Ertel	ca6e2b8e22	Merge pull request #13054 from Security-Onion-Solutions/jertel/eaconfig ... fix elastalert settings	2024-05-21 18:38:03 -04:00
Jason Ertel	8af3158ea7	fix elastalert settings	2024-05-21 18:28:21 -04:00
Josh Brower	8b011b8d7e	Merge pull request #13053 from Security-Onion-Solutions/2.4/alertsefaults ... Add rule.uuid to default groupbys	2024-05-21 17:54:27 -04:00
DefensiveDepth	f9e9b825cf	Removed unneeded groupby	2024-05-21 17:53:20 -04:00
DefensiveDepth	3992ef1082	Add rule.uuid to default groupbys	2024-05-21 17:45:56 -04:00
weslambert	556fdfdcf9	Merge pull request #13052 from Security-Onion-Solutions/fix/add_rule_uuid ... Add rule.uuid for YARA matches	2024-05-21 17:09:49 -04:00
weslambert	f4490fab58	Add rule.uuid for YARA matches	2024-05-21 17:05:39 -04:00
weslambert	5aaf44ebb2	Merge pull request #13049 from Security-Onion-Solutions/fix/detections_alerts_component_template ... Exclude detections from template name matching	2024-05-21 13:45:19 -04:00
weslambert	deb140e38e	Exclude detections from template name matching	2024-05-21 13:38:52 -04:00
Jason Ertel	3de6454d4f	Merge pull request #13047 from Security-Onion-Solutions/jertel/eaconfig ... Jertel/eaconfig	2024-05-21 13:34:20 -04:00
Jason Ertel	d57cc9627f	exclude false positives related to detections	2024-05-21 13:31:50 -04:00
Jason Ertel	8ce19a93b9	exclude false positives related to detections	2024-05-21 13:29:20 -04:00
Jason Ertel	d315b95d77	elastalert settings	2024-05-21 07:15:19 -04:00
Doug Burks	6172816f61	Merge pull request #13044 from Security-Onion-Solutions/dougburks-patch-1 ... Update README.md with new Detections screenshot number	2024-05-21 06:49:35 -04:00
Doug Burks	03826dd32c	Update README.md with new Detections screenshot number	2024-05-21 06:43:07 -04:00