315 Commits

Author	SHA1	Message	Date
Corey Ogburn	1b7095fa81	Improved import-file url regex ... sed doesn't remove ALL whitespace, only newlines. It's better to stop at the first whitespace than to stop at a particular, maybe-not-last query string parameter.	2023-06-20 09:41:14 -06:00
Corey Ogburn	49055e260f	salt-relay import-file reporting ... On successful import, return dashboard URL	2023-06-20 09:41:14 -06:00
Corey Ogburn	a465039887	2 new capabilities: send-file and import-file	2023-06-20 09:41:14 -06:00
Jason Ertel	ba0ec18a33	Ignore Synchronize button clicks when an active salt job is running and another is already in queue	2023-05-22 14:52:07 -04:00
Jason Ertel	4930ae4ba6	add missing var for local dev	2023-05-17 18:14:21 -04:00
m0duspwnens	8e18986671	enabled/disable soc in ui	2023-05-11 15:33:16 -04:00
Doug Burks	4dcc79d245	FIX: Overview Customization link #10173	2023-04-20 16:26:51 -04:00
Jason Ertel	7f28cdd2a3	provide means for using salt-relay with local development against remove VMs	2023-04-10 14:04:03 -04:00
Jason Ertel	7f7e5474ed	Add more logging for filecheck monitoring, and ensure scripts are accessible to salt-relay	2022-11-17 10:43:05 -05:00
Jason Ertel	0ffef75d7b	Move background jobs to cron	2022-11-17 09:50:41 -05:00
Jason Ertel	35fab05bdd	Retry so-user commands if another process is currently using so-user	2022-10-27 15:25:08 -04:00
Jason Ertel	981371c72f	log salt-relay responses for troubleshooting assistance	2022-09-27 16:48:47 -04:00
Jason Ertel	53b4f01921	replace quotes on minion arg	2022-09-27 10:54:08 -04:00
Jason Ertel	7f7f2c15d0	add support for querying active salt jobs (future use)	2022-09-27 10:29:21 -04:00
Jason Ertel	556ddc2ee4	sync in background	2022-09-27 09:24:34 -04:00
Jason Ertel	8e175b2d3f	add manual sync	2022-09-27 07:05:04 -04:00
Jason Ertel	0ad1a1a262	so-user and salt-relay updates for user management	2022-09-26 14:57:33 -04:00
Doug Burks	530c497800	Update motd.md	2022-09-20 15:16:04 -04:00
Jason Ertel	d12ff79af0	Remove comments to avoid confusing config viewers within SOC	2022-09-13 12:08:19 -04:00
Jason Ertel	21c7f940d7	Update copyrights	2022-09-13 11:48:25 -04:00
m0duspwnens	5bb001281b	soc defaults changes - client child of server	2022-09-08 15:57:18 -04:00
Jason Ertel	b7bbe7d69f	Add copyright notice	2022-09-08 10:27:56 -04:00
Jason Ertel	df6ba5cbe9	initial salt relay script for comms with soc	2022-09-07 16:19:16 -04:00
Mike Reeves	2bd9dd80e2	Move In Day	2022-09-07 09:06:25 -04:00
Doug Burks	94c637449d	FIX: Improve default dashboards #8136	2022-06-21 12:53:06 -04:00
Doug Burks	dce415297c	improve readability in motd.md	2022-06-04 06:59:09 -04:00
Doug Burks	de126647f8	Update motd.md to include links to Dashboards and Cases	2022-06-04 06:55:08 -04:00
Doug Burks	83bff5ee87	add bar and pie examples to overview dashboard in dashboards.queries.json	2022-06-03 15:02:40 -04:00
Doug Burks	4a886338c8	fix description field for default dashboard in dashboards.queries.json	2022-06-03 11:10:01 -04:00
Doug Burks	7da1802eae	Add sankey diagram to default dashboard in dashboards.queries.json	2022-06-03 11:03:48 -04:00
Doug Burks	269b16bbfd	https://github.com/Security-Onion-Solutions/securityonion/issues/8049	2022-05-31 16:51:05 -04:00
Doug Burks	cd382a1b25	FIX: Elastalert query in Hunt #8049	2022-05-31 16:50:32 -04:00
Doug Burks	e1c9b0d108	FIX: Elastalert query in Hunt #8049	2022-05-31 16:47:52 -04:00
Doug Burks	9a98667e85	FIX: Elastalert query in Hunt #8049	2022-05-31 16:47:11 -04:00
doug	5cbb50a781	update dashboards.queries.json and hunt.queries.json	2022-05-16 08:33:48 -04:00
Doug Burks	6ed3f42449	remove duplicate showSubtitle from hunt.queries.json	2022-05-12 09:23:00 -04:00
Jason Ertel	31c04aabdd	Disable MRU queries on dashboards	2022-05-09 15:06:43 -04:00
Jason Ertel	3f35dc54d2	Disable actions on dashboards group-by tables	2022-05-09 11:44:39 -04:00
Jason Ertel	0786191fc9	Add dashboard ref to soc.json	2022-05-06 15:16:27 -04:00
Jason Ertel	105c95909c	Dashboard queries	2022-05-04 19:32:06 -04:00
Jason Ertel	deb9b0e5ef	Add analyze feature	2022-03-28 15:53:24 -04:00
Doug Burks	9bf0265cea	Merge pull request #7566 from Security-Onion-Solutions/feature/hunt-soc-auth ... FEATURE: Add new Hunt query for SOC logins #7327	2022-03-15 10:58:40 -04:00
Doug Burks	eec44a6b02	Add a SOC Auth query to hunt.queries.json	2022-03-15 10:38:46 -04:00
Doug Burks	d1e1887e36	Add support for Kratos audit logs in hunt.eventfields.json	2022-03-15 10:37:58 -04:00
Mike Reeves	9c80ff4f65	Remove hive from more files	2022-03-15 09:37:58 -04:00
Jason Ertel	5a28725def	Add assignee to case list	2022-03-14 08:45:28 -04:00
weslambert	65f998d6f7	Remove process.name.keyword for future-proofing	2022-03-08 12:44:51 -05:00
weslambert	f71ccadb8a	Change to label fields for Zeek syslog	2022-03-04 16:29:55 -05:00
Jason Ertel	14c587fca2	Add new abbreviated result limit param	2022-01-27 15:51:02 -05:00
Jason Ertel	eefcc929c2	Update copyright pattern to match other repos	2022-01-24 10:09:23 -05:00