CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 09:12:45 +01:00
Code Issues Packages Projects Releases Wiki Activity
6,410 Commits 24 Branches 119 Tags
141fbaced18d649f53b52389a0b3cade2973e44c
Commit Graph

6410 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
m0duspwnens
141fbaced1 add eps graph to standalone 2021-02-23 09:40:21 -05:00
Jason Ertel
943cbdbf1f Merge pull request #3073 from Security-Onion-Solutions/delta 
Apply action on PR only now that PRs are mandatory
 2021-02-22 12:50:38 -05:00
Jason Ertel
43e0c3a60b Apply action on PR only now that PRs are mandatory 2021-02-22 12:35:17 -05:00
Mike Reeves
d5069d12cf Merge pull request #3071 from Security-Onion-Solutions/delta 
Add acng to import installs for consistency
 2021-02-22 11:34:23 -05:00
Jason Ertel
747d62dae5 Add acng to import installs for consistency 2021-02-22 09:44:24 -05:00
Josh Brower
5ca3dc492c Merge pull request #3061 from Security-Onion-Solutions/foxtrot 
Fix Playbook Fields & Mappings
 2021-02-21 09:40:59 -05:00
Mike Reeves
40780f192e Merge pull request #3062 from Security-Onion-Solutions/delta 
fix merge issue
 2021-02-20 19:15:16 -05:00
Jason Ertel
7222f1faa5 fix merge issue 2021-02-20 16:41:12 -05:00
Mike Reeves
e07e0b201d Merge pull request #3058 from Security-Onion-Solutions/delta 
Fix intermittent Suricata rules load issue
 2021-02-20 10:27:13 -05:00
Jason Ertel
9d3c82a589 Disable unused features for import installations 2021-02-19 20:14:55 -05:00
Jason Ertel
04b3a20e22 Merge branch 'dev' into delta 2021-02-19 20:12:07 -05:00
Mike Reeves
cb6fe75ddb Merge pull request #3055 from Security-Onion-Solutions/TOoSmOotH-patch-1 
Rename filter.rules to filters.rules
 2021-02-19 15:36:01 -05:00
Mike Reeves
8ab12c71a1 Rename filter.rules to filters.rules 2021-02-19 15:34:45 -05:00
Josh Brower
046cc0fbb0 Merge pull request #3052 from Security-Onion-Solutions/feature/sigma-tweaks 
Feature/sigma tweaks
 2021-02-19 15:16:34 -05:00
Josh Brower
8c69e19419 Add sigma refresh script 2021-02-19 15:14:37 -05:00
Josh Brower
2a324eac32 Add sigma refresh script 2021-02-19 15:12:55 -05:00
Mike Reeves
8db3602679 Merge pull request #3049 from Security-Onion-Solutions/TOoSmOotH-patch-1 
Fix name and update examples
 2021-02-19 15:01:04 -05:00
Mike Reeves
08abad747d Fix name and update examples 2021-02-19 14:59:27 -05:00
Mike Reeves
0ea29144a8 Merge pull request #3047 from Security-Onion-Solutions/surifile2 
Suricata as Meta Data, File Extraction, And Parsing changes
 2021-02-19 14:09:38 -05:00
Doug Burks
3ea1ec99d5 Merge pull request #3048 from Security-Onion-Solutions/kilo 
Update syslog ingest parser to accomodate pfSense filterlog changes #3033
 2021-02-19 11:02:56 -08:00
Jason Ertel
9302b9302b Clear salt fileserver cache to ensure the new local.rules file gets picked up on the filesync 2021-02-19 11:13:31 -05:00
Mike Reeves
b4b449aa14 Pull in Suricata changes 2021-02-19 11:01:15 -05:00
doug
88eb5b1d61 Update syslog ingest parser to accomodate pfSense filterlog changes #3033 2021-02-19 08:02:32 -05:00
Doug Burks
5493b3ef91 Merge pull request #3032 from Security-Onion-Solutions/dev 
Update kilo to latest dev
 2021-02-19 04:53:23 -08:00
Josh Patterson
4a510df205 Merge pull request #3026 from Security-Onion-Solutions/delta 
Delta
 2021-02-18 16:31:18 -05:00
Jason Ertel
faa78c0e26 Salt doesn't like a name starting with a non alpha-numeric char. Switch back to long if/then format 2021-02-18 14:51:09 -05:00
Josh Patterson
79e7b1da4d Merge pull request #3021 from Security-Onion-Solutions/issue/2989 
change suricata clean cron to run once a day
 2021-02-18 14:07:40 -05:00
m0duspwnens
03487c2a31 change suricata clean cron to run once a day 2021-02-18 14:06:45 -05:00
Jason Ertel
e912b2fd96 Move idstools to run after nginx runs 2021-02-18 12:50:00 -05:00
Josh Patterson
0ab9577863 Merge pull request #3018 from Security-Onion-Solutions/all_rules_dont_show_changes 
dont show changes since file can be large
 2021-02-18 12:23:54 -05:00
m0duspwnens
bf100a2310 dont show changes since file can be large 2021-02-18 12:23:22 -05:00
Josh Patterson
2092044335 Merge pull request #3017 from Security-Onion-Solutions/issue/1237 
load templates all the time
 2021-02-18 12:13:49 -05:00
m0duspwnens
e730efb4ec load templates all the time 2021-02-18 12:12:18 -05:00
Josh Patterson
76cdc45fad Merge pull request #3016 from Security-Onion-Solutions/all_rules_dont_show_changes 
Don't show changes because all.rules can be large
 2021-02-18 12:00:08 -05:00
m0duspwnens
069997a65c Don't show changes because all.rules can be large 2021-02-18 11:56:25 -05:00
Jason Ertel
6f7bc650a0 Apply reserved ports if the existing file is 0 bytes 2021-02-18 11:20:13 -05:00
Josh Patterson
a9da761fab Merge pull request #3012 from Security-Onion-Solutions/issue/2989 
Issue/2989
 2021-02-18 10:52:23 -05:00
m0duspwnens
95df18c545 limit eve logs and gz files based on days 2021-02-18 10:45:20 -05:00
m0duspwnens
a4d5f58256 fix surilogcompress 2021-02-18 10:33:47 -05:00
Josh Patterson
3f7cdb933f Merge pull request #3010 from Security-Onion-Solutions/issue/2989 
Issue/2989
 2021-02-18 09:58:35 -05:00
m0duspwnens
74ca4487de ensure at least 2 eve files are kept https://github.com/Security-Onion-Solutions/securityonion/issues/2989 2021-02-18 09:51:40 -05:00
m0duspwnens
4b07d5e457 add identifier to eve clean cron 2021-02-18 09:39:54 -05:00
m0duspwnens
041d193f2d fix brackets 2021-02-18 09:37:37 -05:00
m0duspwnens
0bef8b6662 limit number of eve.json files for suricata https://github.com/Security-Onion-Solutions/securityonion/issues/2989 2021-02-18 09:26:59 -05:00
Josh Brower
b5087b815a Merge pull request #3002 from Security-Onion-Solutions/feature/sigma-tweaks 
Update .security analyzer
 2021-02-17 16:38:22 -05:00
Josh Brower
d2a74c80e2 Update .security analyzer 2021-02-17 16:37:31 -05:00
Josh Brower
741f674a4c Merge pull request #3001 from Security-Onion-Solutions/dev 
Dev
 2021-02-17 16:36:49 -05:00
Josh Patterson
174ed84750 Merge pull request #2993 from Security-Onion-Solutions/issue/2736 
logrotate strelka
 2021-02-17 11:47:52 -05:00
m0duspwnens
7a595df5b6 strelka logrotate - https://github.com/Security-Onion-Solutions/securityonion/issues/2736 2021-02-17 11:17:41 -05:00
m0duspwnens
2b07d89b5a error: /opt/so/conf/sensor-rotate.conf:8 unknown option 'endscript' -- ignoring line 2021-02-17 11:01:18 -05:00