Commit Graph

10778 Commits

Author SHA1 Message Date
Wes
20b79b7ab0 Add new function to verify list value 2022-12-13 15:56:26 +00:00
Jason Ertel
56019f48ca Merge pull request #9358 from Security-Onion-Solutions/jertel/es853
Upgrade ES to 8.5.3
2022-12-12 13:45:56 -05:00
Jason Ertel
d7dd2d2ef8 Upgrade ES to 8.5.3 2022-12-12 13:43:28 -05:00
weslambert
3d431eaba9 Merge pull request #9341 from Security-Onion-Solutions/fix/analyzers_localfile_file_path
Remove double quotes to fix issue with file path sourcing from 'localfile.py'
2022-12-08 16:49:29 -05:00
weslambert
f85fb5ecf9 Remove double quotes to fix issue with file path sourcing from 'localfile.py' 2022-12-08 16:35:24 -05:00
Jason Ertel
1716cb0297 Merge pull request #9333 from Security-Onion-Solutions/jertel/mergedev
Jertel/mergedev
2022-12-08 09:17:20 -05:00
Jason Ertel
0ec366f075 clear hotfix 2022-12-08 09:15:41 -05:00
Jason Ertel
e9b9e128c6 Merge branch 'master' into jertel/mergedev 2022-12-08 09:14:08 -05:00
Mike Reeves
ef15de130a Merge pull request #9329 from Security-Onion-Solutions/hotfix/2.3.190
Hotfix/2.3.190
2.3.190-20221207
2022-12-08 09:08:18 -05:00
Mike Reeves
e975ee0a8e Merge pull request #9328 from Security-Onion-Solutions/mike4
2.3.190 hotfix
2022-12-07 16:22:05 -05:00
Mike Reeves
da94ddca13 2.3.190 hotfix 2022-12-07 16:17:57 -05:00
Mike Reeves
6e94751c65 Merge pull request #9327 from Security-Onion-Solutions/jertel/surifilecheck
Switch back to older style redirect due to incompatibility with Ub 18
2022-12-07 14:10:30 -05:00
Jason Ertel
d48d473f43 Switch back to older style redirect due to incompatibility with Ub 18 2022-12-07 14:06:24 -05:00
Jason Ertel
cff5a83ad5 Merge pull request #9324 from Security-Onion-Solutions/jertel/surifilecheck
Use original style due to pgrep conflict with cron
2022-12-07 12:06:26 -05:00
Jason Ertel
225b7e359c Use original style due to pgrep conflict with cron 2022-12-07 11:53:42 -05:00
Mike Reeves
9a616caf53 Merge pull request #9322 from Security-Onion-Solutions/mike
2.3.190 hotfix
2022-12-07 11:15:30 -05:00
Mike Reeves
0aab268801 2.3.190 hotfix 2022-12-07 11:12:13 -05:00
Mike Reeves
0bb7f5c5e3 Merge pull request #9320 from Security-Onion-Solutions/TOoSmOotH-patch-3
Update HOTFIX
2022-12-07 09:21:17 -05:00
Mike Reeves
4aff1f0fdb Update HOTFIX 2022-12-07 09:19:51 -05:00
Jason Ertel
35ca08ea88 Merge pull request #9315 from Security-Onion-Solutions/jertel/surifilecheck
Suricata support for filecheck; reduce cron noise
2022-12-07 08:17:19 -05:00
Jason Ertel
7b05627d5c Suricata support for filecheck; reduce cron noise 2022-12-07 07:58:32 -05:00
Mike Reeves
e3c1b6dbba Merge pull request #9306 from Security-Onion-Solutions/TOoSmOotH-patch-2
Update init.sls
2022-12-06 13:38:35 -05:00
Mike Reeves
f0c3b876a9 Update init.sls 2022-12-06 13:35:03 -05:00
Mike Reeves
531423f49a Update init.sls 2022-12-06 13:25:03 -05:00
Jason Ertel
dfad5a748c Merge pull request #9303 from Security-Onion-Solutions/jertel/surifilecheck
Jertel/surifilecheck
2022-12-06 11:52:36 -05:00
Jason Ertel
819b39c0bb Update hotfix 2022-12-06 11:41:00 -05:00
Jason Ertel
0dd2e51e83 Ensure Suricata move events get picked up 2022-12-06 11:39:58 -05:00
Mike Reeves
f7730741c2 Merge pull request #9297 from Security-Onion-Solutions/TOoSmOotH-patch-1
Update VERSION
2022-12-05 16:12:55 -05:00
Mike Reeves
cb2d6b7876 Update VERSION 2022-12-05 16:07:12 -05:00
Mike Reeves
93ca7548f8 Merge pull request #9273 from Security-Onion-Solutions/dev
2.3.190
2.3.190-20221205
2022-12-05 15:17:47 -05:00
Mike Reeves
9cbbed1038 Merge pull request #9294 from Security-Onion-Solutions/2.3.190a
2.3.190
2022-12-05 13:03:23 -05:00
Mike Reeves
967fd30bb1 2.3.190 2022-12-05 13:00:55 -05:00
weslambert
6c8c8a2d8e Merge pull request #9292 from Security-Onion-Solutions/fix/strelka_disable_yara_rules_causing_errors
Disable additional YARA rules that are causing compilation errors
2022-12-05 11:31:23 -05:00
weslambert
8bb3b22993 Disable additional YARA rules there are causing compilation errors 2022-12-05 11:30:22 -05:00
Jason Ertel
5b6182c003 Merge pull request #9289 from Security-Onion-Solutions/jertel/filechek
Update filecheck to support Suricata extracted files
2022-12-05 10:59:44 -05:00
Jason Ertel
69c5a9dd90 ensure tmp files are not processed 2022-12-05 10:31:09 -05:00
Jason Ertel
86c31c129a add suricata to socore group 2022-12-05 10:27:42 -05:00
Jason Ertel
483a9d477f undo filecheck location move 2022-12-05 10:15:15 -05:00
Jason Ertel
d7f60a0e58 only check files on inotify 2022-12-05 10:01:40 -05:00
Jason Ertel
f06443f3dd add suricata to socore group 2022-12-05 09:57:24 -05:00
Jason Ertel
fe798138e3 add suricata to socore group 2022-12-05 09:50:35 -05:00
Jason Ertel
e9bb60dedb fix filecheck for suricata deployments 2022-12-05 09:28:25 -05:00
Jason Ertel
992ced685f fix filecheck for suricata deployments 2022-12-05 09:27:31 -05:00
Jason Ertel
592bbf4217 fix filecheck for suricata deployments 2022-12-05 09:21:08 -05:00
Mike Reeves
eacf6238d8 Merge pull request #9274 from Security-Onion-Solutions/2.3.190
2.3.190
2022-12-02 15:33:53 -05:00
Mike Reeves
0a7ada314d 2.3.190 2022-12-02 15:31:42 -05:00
Mike Reeves
c8edb43748 Merge pull request #9272 from Security-Onion-Solutions/2.3.190
2.3.190
2022-12-02 15:28:02 -05:00
Mike Reeves
f112663a76 2.3.190 2022-12-02 15:21:42 -05:00
weslambert
4311d5135b Merge pull request #9269 from Security-Onion-Solutions/fix/zeek_scripts_bzar_remove_by_default
Don't load BZAR script(s) by default
2022-12-02 11:02:07 -05:00
weslambert
2b2d39c869 Don't load BZAR script(s) by default 2022-12-02 10:46:45 -05:00