66 Commits

Author	SHA1	Message	Date
Josh Brower	152fdaa7bb	Support Kratos user.name lookup	2025-04-15 11:40:43 -04:00
Josh Brower	4cdfb6e3eb	Fix comma	2025-04-11 07:49:35 -04:00
Josh Brower	f94c81a041	Extract log level and drop INFO level	2025-04-11 07:45:12 -04:00
reyesj2	11dc004811	ES 8.17.3	2025-03-04 14:24:38 -06:00
Jorge Reyes	fc12b1f09b	Merge pull request #14272 from Security-Onion-Solutions/reyesj2-patch-1 ... ES 8.17.2 pipeline version updates	2025-02-20 17:32:20 -06:00
reyesj2	69b559fb26	ES 8.17.2 pipeline version updates	2025-02-20 17:11:28 -06:00
Josh Brower	c6d72d31cb	Update Elastic Defend JSON	2025-02-19 16:16:38 -05:00
reyesj2	21ed1439e2	update udp integration policy	2025-02-18 10:40:18 -06:00
Josh Brower	97a3f130c8	Update Elastic	2025-01-23 15:32:39 -05:00
Josh Brower	9738ef382c	Upgrade Elastic to 8.17.1	2025-01-23 08:12:02 -05:00
Jason Ertel	57a9992a3d	Merge branch '2.4/dev' into jertel/wip	2024-11-11 10:06:44 -05:00
defensivedepth	4c5099d429	Initial support for local lookup	2024-10-29 10:27:54 -04:00
Jason Ertel	523ff66389	connect work	2024-10-16 13:44:01 -04:00
defensivedepth	ef003ffbb5	Refactor	2024-09-23 12:55:07 -04:00
defensivedepth	074cc8e6ff	Initial commit	2024-09-20 11:58:21 -04:00
weslambert	af80a78406	Update pipeline version	2024-08-27 13:08:35 -04:00
DefensiveDepth	0a5725a62e	Refactor for Elastic Upgrade	2024-08-23 11:36:47 -04:00
DefensiveDepth	e3ecc9d4be	Directly manage the Fleet Server integration config	2024-08-20 15:06:16 -04:00
weslambert	3fa6c72620	Fix name change	2024-07-30 15:45:55 -04:00
weslambert	9594e4115c	Elastic 8.14.3	2024-07-30 12:47:56 -04:00
weslambert	201e14f287	Elastic 8.14.3	2024-07-30 12:46:42 -04:00
weslambert	fe1824aedd	Revert "Elastic 8.14.2"	2024-07-15 11:28:59 -04:00
weslambert	4d499be1a8	Change name	2024-07-02 08:47:29 -04:00
weslambert	847638442b	Elastic 8.14.1	2024-06-27 10:48:28 -04:00
weslambert	feee80cad9	Revert back to 8.10.4	2024-06-27 09:01:55 -04:00
weslambert	abdfbba32a	Elastic 8.14.1	2024-06-26 14:06:24 -04:00
DefensiveDepth	3c3ed8b5c5	Add runtime status logs	2024-04-24 16:33:47 -04:00
reyesj2	55cf90f477	merge 2.4/dev ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2024-04-11 14:44:59 -04:00
DefensiveDepth	376efab40c	Ship Defender logs	2024-04-08 14:01:38 -04:00
reyesj2	000d15a53c	Kismet integration: TODO Elasticsearch mappings ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2024-03-29 13:56:01 -04:00
Wes	5542db0aac	Leave package version null	2024-01-22 21:07:46 +00:00
Wes	b08db3e05a	Add RITA policy	2024-01-22 20:16:43 +00:00
Wes	22fcccef1c	Add force option	2023-12-14 16:53:19 +00:00
Jonathan Race	ece3c367b5	Update import-evtx-logs.json ... version updates to match 2.4 release pipelines	2023-11-29 09:20:37 -05:00
Wes	23ee9c2bb0	Sublime Platform integration	2023-11-01 13:41:40 +00:00
weslambert	adcb7840bd	Elastic 8.10.3	2023-10-17 10:38:20 -04:00
defensivedepth	1043315e6b	Manage Elastic Defend Integration manually	2023-10-12 09:22:26 -04:00
Wes	7971d9749a	Assign pipeline to import	2023-08-17 14:08:48 +00:00
Josh Brower	6b5343f582	Update for 8.8.2	2023-08-03 16:25:02 -04:00
Wes	0d5ed2e835	Set version for Elastic Defend and enable updates	2023-08-02 13:21:03 +00:00
Josh Brower	63b4bdcebe	Merge remote-tracking branch 'origin/2.4/dev' into 2.4/heavyrc2	2023-08-01 08:53:07 -04:00
Wes	29b64eadd4	Change log.log to log.logs	2023-08-01 02:20:22 +00:00
Josh Brower	a89508f1ae	Heavy Node fixes	2023-07-31 15:17:24 -04:00
Josh Brower	40294e2762	Update Integration JSON	2023-07-12 08:49:36 -04:00
Josh Brower	2247cafe5f	Change policy name	2023-06-24 17:13:28 -04:00
Josh Brower	85a8da6331	Change policy name	2023-06-24 16:58:36 -04:00
Josh Brower	bb0cfc5253	Create & assign Heavy Node Fleet Policy	2023-06-23 15:49:03 -04:00
Josh Brower	6ddf887342	Refactor EVTX Import	2023-06-21 09:32:42 -04:00
Wes	2bb77251b0	Move Elastic Fleet logging exclusions to the Fleet pillar	2023-05-31 13:38:58 +00:00
Wes	e4b4bbcfdc	Use ZEEKMERGED from zeek/config.map.jinja	2023-05-30 19:51:13 +00:00