  Doug BurksandGitHub
|
19114c1a26
|
Merge pull request #11303 from Security-Onion-Solutions/dougburks-patch-1
FIX: SOC Config pcap doc links should point to steno docs #11302
|
2023-09-13 07:50:43 -04:00 |
|
|
Doug BurksandGitHub
|
11b8e13418
|
FIX: SOC Config pcap doc links should point to steno docs #11302
|
2023-09-13 07:37:54 -04:00 |
|
|
Doug BurksandGitHub
|
8a2fc5d62b
|
Merge pull request #11226 from Security-Onion-Solutions/dougburks-patch-1
Update motd.md
|
2023-08-31 09:18:19 -04:00 |
|
|
Doug BurksandGitHub
|
da56a421e5
|
Update motd.md
|
2023-08-31 09:17:33 -04:00 |
|
|
Doug BurksandGitHub
|
f3a58cd336
|
soup should respect current indentation in soc_global.sls
|
2023-08-13 16:46:32 -04:00 |
|
|
Doug BurksandGitHub
|
3ec3f8bcd8
|
Merge pull request #11011 from Security-Onion-Solutions/dougburks-patch-1
Update motd.md
|
2023-08-10 15:17:20 -04:00 |
|
|
Doug BurksandGitHub
|
4426437ad3
|
Update motd.md
|
2023-08-10 15:04:31 -04:00 |
|
|
Doug BurksandGitHub
|
6ad22edf8e
|
Merge pull request #10987 from Security-Onion-Solutions/dougburks-patch-1
Update soup for 2.4.10
|
2023-08-08 17:18:38 -04:00 |
|
|
Doug BurksandGitHub
|
2f74b69cc3
|
Update soup for 2.4.10
|
2023-08-08 16:27:11 -04:00 |
|
|
Doug BurksandGitHub
|
a13b3f305a
|
Merge pull request #10970 from Security-Onion-Solutions/2.4/dev
2.4.5 RC2
|
2023-08-07 10:21:29 -04:00 |
|
|
Doug BurksandGitHub
|
38089c6662
|
Merge pull request #10971 from Security-Onion-Solutions/2.4/main
2.4/main to 2.4/dev
|
2023-08-07 10:17:51 -04:00 |
|
|
Doug BurksandGitHub
|
2d863f09eb
|
Merge pull request #10969 from Security-Onion-Solutions/dougburks-patch-1
add spaces for proper rendering DOWNLOAD_AND_VERIFY_ISO.md
|
2023-08-07 09:31:33 -04:00 |
|
|
Doug BurksandGitHub
|
37b98ba188
|
add spaces for proper rendering DOWNLOAD_AND_VERIFY_ISO.md
|
2023-08-07 09:29:34 -04:00 |
|
|
Doug BurksandGitHub
|
65d1e57ccd
|
Merge pull request #10968 from Security-Onion-Solutions/dougburks-patch-1
prepare for 2.4.5 ISO image release
|
2023-08-07 09:15:53 -04:00 |
|
|
Doug Burks
|
9ae32e2bd6
|
create sigs directory and add sig for 2.4.5
|
2023-08-07 09:02:52 -04:00 |
|
|
Doug BurksandGitHub
|
6e8f31e083
|
Delete sigs
|
2023-08-07 08:59:24 -04:00 |
|
|
Doug BurksandGitHub
|
3c5cd941c7
|
Update DOWNLOAD_AND_VERIFY_ISO.md for 2.4.5
|
2023-08-07 08:45:30 -04:00 |
|
|
Doug BurksandGitHub
|
2ea2a4d0a7
|
Merge pull request #10964 from Security-Onion-Solutions/dougburks-patch-1
Revert yesterday's change to zeekcaptureloss.sh
|
2023-08-05 09:23:58 -04:00 |
|
|
Doug BurksandGitHub
|
90102b1148
|
Finish reverting yesterday's change to zeekcaptureloss.sh
|
2023-08-05 09:23:27 -04:00 |
|
|
Doug BurksandGitHub
|
ec81cbd70d
|
Revert yesterday's change to zeekcaptureloss.sh
|
2023-08-05 09:11:58 -04:00 |
|
|
Doug BurksandGitHub
|
118088c35f
|
Merge pull request #10953 from Security-Onion-Solutions/dougburks-patch-1
FEATURE: soup should rotate its log file #10951
|
2023-08-04 12:38:21 -04:00 |
|
|
Doug BurksandGitHub
|
63373710b4
|
Update soup to rotate log file
|
2023-08-04 12:26:36 -04:00 |
|
|
Doug BurksandGitHub
|
209da766ba
|
Update soup to rotate log file
|
2023-08-04 12:16:14 -04:00 |
|
|
Doug BurksandGitHub
|
560ec9106d
|
Merge pull request #10948 from Security-Onion-Solutions/dougburks-patch-1
Update so-whiptail
|
2023-08-04 09:21:55 -04:00 |
|
|
Doug BurksandGitHub
|
78950ebfbb
|
Update so-whiptail
|
2023-08-04 09:16:58 -04:00 |
|
|
Doug BurksandGitHub
|
b7197bbd16
|
Merge pull request #10939 from Security-Onion-Solutions/dougburks-patch-1
Update soup for airgap
|
2023-08-03 15:28:28 -04:00 |
|
|
Doug BurksandGitHub
|
9319c3f2e1
|
Update soup for airgap
|
2023-08-03 15:27:24 -04:00 |
|
|
Doug BurksandGitHub
|
1907ea805c
|
Merge pull request #10937 from Security-Onion-Solutions/dougburks-patch-1
Update soup for airgap
|
2023-08-03 14:39:53 -04:00 |
|
|
Doug BurksandGitHub
|
80598d7f8d
|
Update soup for airgap
|
2023-08-03 14:36:47 -04:00 |
|
|
Doug BurksandGitHub
|
da51fd59a0
|
Merge pull request #10905 from Security-Onion-Solutions/dougburks-patch-1
Update verbiage and links in soc_sensor.yaml
|
2023-08-01 12:52:22 -04:00 |
|
|
Doug BurksandGitHub
|
3fa0a98830
|
Update verbiage and links in soc_sensor.yaml
|
2023-08-01 12:45:09 -04:00 |
|
|
Doug BurksandGitHub
|
e563d71856
|
Merge pull request #10871 from Security-Onion-Solutions/dougburks-patch-1
Update README.md to 2.4 RC2
|
2023-07-28 16:33:06 -04:00 |
|
|
Doug BurksandGitHub
|
1ca78fd297
|
Update README.md to 2.4 RC2
|
2023-07-28 16:29:46 -04:00 |
|
|
Doug BurksandGitHub
|
d75191d679
|
Merge pull request #10820 from Security-Onion-Solutions/dougburks-patch-1
Update README.md
|
2023-07-24 15:35:34 -04:00 |
|
|
Doug BurksandGitHub
|
ee667a48c9
|
Update README.md
|
2023-07-24 15:33:50 -04:00 |
|
|
Doug BurksandGitHub
|
a59f2ded38
|
Merge pull request #10813 from Security-Onion-Solutions/2.4/fix-packages-sls
Update packages.sls
|
2023-07-24 08:08:11 -04:00 |
|
|
Doug BurksandGitHub
|
e2fe04dadc
|
Update packages.sls
|
2023-07-24 07:10:48 -04:00 |
|
|
Doug BurksandGitHub
|
563bf2ff3a
|
Merge pull request #10812 from Security-Onion-Solutions/fuse
Update packages.sls
|
2023-07-24 06:48:47 -04:00 |
|
|
Doug BurksandGitHub
|
9e42fb927d
|
Add RPM-GPG-KEY-oracle
|
2023-07-14 14:04:36 -04:00 |
|
|
Doug BurksandGitHub
|
437c9cab68
|
Merge pull request #10726 from Security-Onion-Solutions/dougburks-patch-1
Update README.md
|
2023-07-10 09:07:11 -04:00 |
|
|
Doug BurksandGitHub
|
82796370ce
|
Update README.md
|
2023-07-10 09:04:55 -04:00 |
|
|
Doug BurksandGitHub
|
77e6ee3c36
|
Merge pull request #10669 from Security-Onion-Solutions/dougburks-patch-1
Update so-desktop-install
|
2023-06-27 09:26:44 -04:00 |
|
|
Doug BurksandGitHub
|
3e71663669
|
Update so-desktop-install
|
2023-06-27 09:24:47 -04:00 |
|
|
Doug BurksandGitHub
|
e83afa3e30
|
Merge pull request #10660 from Security-Onion-Solutions/dougburks-patch-1
Update README.md
|
2023-06-26 08:33:22 -04:00 |
|
|
Doug BurksandGitHub
|
70fb28a8b3
|
Update README.md
|
2023-06-26 08:31:41 -04:00 |
|
|
Doug BurksandGitHub
|
b60cf29598
|
Merge pull request #10618 from Security-Onion-Solutions/dougburks-patch-1
Resolve conflicts with dataset PR
|
2023-06-20 07:42:30 -04:00 |
|
|
Doug BurksandGitHub
|
0e09d73aa0
|
Resolve conflicts with dataset PR
|
2023-06-20 07:40:10 -04:00 |
|
|
Doug BurksandGitHub
|
520a5671ca
|
Merge pull request #10617 from Security-Onion-Solutions/dougburks-patch-1
Fix SOC Auth queries in Dashboards and Hunt
|
2023-06-20 07:32:46 -04:00 |
|
|
Doug BurksandGitHub
|
fc824359ed
|
Update default fields for kratos.audit
|
2023-06-20 07:30:56 -04:00 |
|
|
Doug BurksandGitHub
|
7caa7cec6b
|
Fix SOC Auth queries in Dashboards and Hunt
Change `event.dataset:audit` to `event.dataset:kratos.audit`.
|
2023-06-20 07:13:33 -04:00 |
|
|
Doug BurksandGitHub
|
251bc6f45e
|
Merge pull request #10597 from Security-Onion-Solutions/dougburks-patch-1
Update so_motd.jinja
|
2023-06-15 09:59:25 -04:00 |
|
|
Doug BurksandGitHub
|
b84d997f87
|
Update so_motd.jinja
|
2023-06-15 09:54:23 -04:00 |
|
|
Doug BurksandGitHub
|
bbdf7bb5a7
|
Merge pull request #10580 from Security-Onion-Solutions/dougburks-patch-1
Set START and END variables earlier in so-import-pcap
|
2023-06-13 13:31:16 -04:00 |
|
|
Doug BurksandGitHub
|
fb8ad71b27
|
Set START and END variables earlier in so-import-pcap
|
2023-06-13 13:19:18 -04:00 |
|
|
Doug BurksandGitHub
|
8e0d895afb
|
Merge pull request #10572 from Security-Onion-Solutions/dougburks-patch-1
FIX: Add more Zeek logs to excluded list #10569
|
2023-06-12 09:33:13 -04:00 |
|
|
Doug BurksandGitHub
|
998c85e3f8
|
Update defaults.yaml
|
2023-06-12 09:31:19 -04:00 |
|
|
Doug BurksandGitHub
|
a90aed25fb
|
Merge pull request #10570 from Security-Onion-Solutions/dougburks-patch-1
FIX: Add Zeek ocsp.log to excluded list #10569
|
2023-06-12 08:46:49 -04:00 |
|
|
Doug BurksandGitHub
|
ae14e4870d
|
Add ocsp to logging.zeek.exclued in defaults.yaml
|
2023-06-12 08:44:46 -04:00 |
|
|
Doug BurksandGitHub
|
273a1d7e9c
|
Merge pull request #10568 from Security-Onion-Solutions/2.4/fix-suricata-dhcp
FIX: Suricata DHCP logs not ingesting #10565
|
2023-06-12 07:50:44 -04:00 |
|
|
Doug Burks
|
b3f8ed7dcd
|
FIX: Suricata DHCP logs not ingesting #10565
|
2023-06-10 11:42:41 -04:00 |
|
|
Doug BurksandGitHub
|
81dd951064
|
Merge pull request #10560 from Security-Onion-Solutions/dougburks-patch-1
FIX: Setup re-runs when SSH'ing into a successfully installed minion …
|
2023-06-09 11:49:54 -04:00 |
|
|
Doug BurksandGitHub
|
c12f138899
|
FIX: Setup re-runs when SSH'ing into a successfully installed minion node #10498
|
2023-06-09 11:20:54 -04:00 |
|
|
Doug BurksandGitHub
|
1fde2e2755
|
Merge pull request #10553 from Security-Onion-Solutions/2.4/update-readme
2.4/update readme
|
2023-06-08 13:44:39 -04:00 |
|
|
Doug BurksandGitHub
|
1aad9d1b2f
|
Update README.md
|
2023-06-08 13:41:08 -04:00 |
|
|
Doug BurksandGitHub
|
9703e70163
|
Update README.md
|
2023-06-08 13:38:11 -04:00 |
|
|
Doug BurksandGitHub
|
f6735207d7
|
Merge pull request #10552 from Security-Onion-Solutions/2.4/fix-suricata-dataset
FIX: Suricata dataset values for certain types of metadata#10551
|
2023-06-08 13:33:53 -04:00 |
|
|
Doug Burks
|
e5f76a9c6e
|
change suricata parsers from dataset to event.dataset
|
2023-06-08 12:31:31 -04:00 |
|
|
Doug BurksandGitHub
|
32dc26f2e7
|
Merge pull request #10514 from Security-Onion-Solutions/2.4/fix-VERIFY_ISO
Rename VERIFY_ISO.md to DOWNLOAD_AND_VERIFY_ISO.md
|
2023-06-05 10:12:43 -04:00 |
|
|
Doug BurksandGitHub
|
1b14142e4c
|
Rename VERIFY_ISO.md to DOWNLOAD_AND_VERIFY_ISO.md
|
2023-06-05 10:08:20 -04:00 |
|
|
Doug BurksandGitHub
|
d3e5be78fd
|
Merge pull request #10500 from Security-Onion-Solutions/dougburks-patch-1
Update soc_zeek.yaml
|
2023-06-02 07:54:11 -04:00 |
|
|
Doug BurksandGitHub
|
09e005127e
|
Update soc_zeek.yaml
|
2023-06-02 07:41:55 -04:00 |
|
|
Doug BurksandGitHub
|
36ddcfa4e5
|
Merge pull request #10431 from Security-Onion-Solutions/dougburks-patch-1
Update README.md for Beta 3
|
2023-05-25 08:36:14 -04:00 |
|
|
Doug BurksandGitHub
|
fcc1337e1a
|
Update README.md for Beta 3
|
2023-05-25 07:51:08 -04:00 |
|
|
Doug BurksandGitHub
|
f0c4cebaca
|
Merge pull request #10391 from Security-Onion-Solutions/2.4/elastic-8.7.1
UPGRADE: Elastic 8.7.1 #10269
|
2023-05-19 12:29:01 -04:00 |
|
|
Doug BurksandGitHub
|
87c42ece00
|
Update so-kibana-config-load
|
2023-05-19 12:21:09 -04:00 |
|
|
Doug BurksandGitHub
|
4f8fcd3369
|
Update config_saved_objects.ndjson
|
2023-05-19 12:19:44 -04:00 |
|
|
Doug BurksandGitHub
|
9a3c997779
|
Merge pull request #10351 from Security-Onion-Solutions/dougburks-patch-1
Update install_agent_grid.sls
|
2023-05-15 10:13:55 -04:00 |
|
|
Doug BurksandGitHub
|
53ed4d49c2
|
Update install_agent_grid.sls
|
2023-05-15 10:10:27 -04:00 |
|
|
Doug BurksandGitHub
|
f8f6a1433a
|
Merge pull request #10350 from Security-Onion-Solutions/2.4/fix-agent-iso
2.4/fix agent iso
|
2023-05-15 08:47:05 -04:00 |
|
|
Doug Burks
|
83188401c5
|
update status messages
|
2023-05-15 08:43:53 -04:00 |
|
|
Doug Burks
|
b01367a294
|
remove the temp directory when finished
|
2023-05-15 08:41:05 -04:00 |
|
|
Doug Burks
|
d8e0e320f4
|
so-elastic-agent-gen-installers should use /nsm to avoid filling /tmp
|
2023-05-15 07:31:32 -04:00 |
|
|
Doug BurksandGitHub
|
3db34a3346
|
Merge pull request #10341 from Security-Onion-Solutions/dougburks-patch-1
revert last change to so-verify
|
2023-05-11 16:47:50 -04:00 |
|
|
Doug BurksandGitHub
|
f9890778ad
|
revert last change to so-verify
|
2023-05-11 16:45:46 -04:00 |
|
|
Doug BurksandGitHub
|
9f85b3cb4f
|
Merge pull request #10339 from Security-Onion-Solutions/dougburks-patch-1
add another error exclusion to so-verify
|
2023-05-11 15:59:14 -04:00 |
|
|
Doug BurksandGitHub
|
e9fd7d8b8b
|
add another error exclusion to so-verify
|
2023-05-11 15:38:57 -04:00 |
|
|
Doug BurksandGitHub
|
634dd9907d
|
Merge pull request #10338 from Security-Onion-Solutions/dougburks-patch-1
fix typo in so-elastic-fleet-setup
|
2023-05-11 13:40:15 -04:00 |
|
|
Doug BurksandGitHub
|
1d12dcd243
|
fix typo in so-elastic-fleet-setup
|
2023-05-11 13:39:07 -04:00 |
|
|
Doug BurksandGitHub
|
24140c4cda
|
Merge pull request #10319 from Security-Onion-Solutions/dougburks-patch-1
Update soc_idstools.yaml
|
2023-05-09 12:18:36 -04:00 |
|
|
Doug BurksandGitHub
|
cf5feafb1e
|
Update soc_idstools.yaml
|
2023-05-09 12:11:42 -04:00 |
|
|
Doug BurksandGitHub
|
52cfc59113
|
Merge pull request #10300 from Security-Onion-Solutions/dougburks-patch-2
FIX: Improve soup's local file modification logic #8972
|
2023-05-08 09:47:57 -04:00 |
|
|
Doug BurksandGitHub
|
ed712477d6
|
FIX: Improve soup's local file modification logic #8972
|
2023-05-08 09:43:20 -04:00 |
|
|
Doug BurksandGitHub
|
fcdb02d61e
|
Merge pull request #10174 from Security-Onion-Solutions/dougburks-patch-1
FIX: Overview Customization link #10173
|
2023-04-20 16:28:01 -04:00 |
|
|
Doug BurksandGitHub
|
4dcc79d245
|
FIX: Overview Customization link #10173
|
2023-04-20 16:26:51 -04:00 |
|
|
Doug BurksandGitHub
|
148ef5833e
|
Merge pull request #10120 from Security-Onion-Solutions/2.4/fix-suricata-dns
FIX: Suricata DNS A and CNAME parsing #10117
|
2023-04-13 11:00:24 -04:00 |
|
|
Doug Burks
|
a67cbb3276
|
FIX: Suricata DNS A and CNAME parsing #10117
|
2023-04-13 10:56:17 -04:00 |
|
|
Doug BurksandGitHub
|
5b2e39f80d
|
Merge pull request #10078 from Security-Onion-Solutions/2.4/fix-elasticsearch-roles
FIX: SOC only displaying data for users assigned the superuser role #10068
|
2023-03-31 09:26:58 -04:00 |
|
|
Doug BurksandGitHub
|
a8b6470a14
|
Update limited-auditor.json
|
2023-03-31 09:22:42 -04:00 |
|
|
Doug BurksandGitHub
|
e945f1c38f
|
Update limited-analyst.json
|
2023-03-31 09:22:28 -04:00 |
|
|
Doug BurksandGitHub
|
d0dff9572d
|
Update auditor.json
|
2023-03-31 09:22:15 -04:00 |
|