Mike Reeves
|
2867a32931
|
Merge pull request #8061 from Security-Onion-Solutions/soup130
soup for 130
|
2022-06-02 10:42:17 -04:00 |
|
Mike Reeves
|
fce43cf390
|
soup for 130
|
2022-06-02 10:33:18 -04:00 |
|
Josh Patterson
|
e5c9b91529
|
Merge pull request #8054 from Security-Onion-Solutions/dmz_receiver
Dmz receiver
|
2022-06-01 15:31:42 -04:00 |
|
m0duspwnens
|
e5b74bcb78
|
remove podman state
|
2022-06-01 15:26:25 -04:00 |
|
Doug Burks
|
91f8d3e5e9
|
Merge pull request #8050 from Security-Onion-Solutions/fix/elastalert-query
FIX: Elastalert query in Hunt #8049
|
2022-05-31 16:54:34 -04:00 |
|
Doug Burks
|
269b16bbfd
|
https://github.com/Security-Onion-Solutions/securityonion/issues/8049
|
2022-05-31 16:51:05 -04:00 |
|
Doug Burks
|
cd382a1b25
|
FIX: Elastalert query in Hunt #8049
|
2022-05-31 16:50:32 -04:00 |
|
Doug Burks
|
e1c9b0d108
|
FIX: Elastalert query in Hunt #8049
|
2022-05-31 16:47:52 -04:00 |
|
Doug Burks
|
9a98667e85
|
FIX: Elastalert query in Hunt #8049
|
2022-05-31 16:47:11 -04:00 |
|
weslambert
|
494ce0756d
|
Merge pull request #8045 from Security-Onion-Solutions/fix/mhr_naming
Fix naming for Malware Hash Registry analyzer
|
2022-05-31 07:52:48 -04:00 |
|
Wes Lambert
|
7f30a364ee
|
Make sure everything is added back after renaming mhr to malwarehashregistry
|
2022-05-31 11:44:35 +00:00 |
|
Wes Lambert
|
c82aa89497
|
Fix Malware Hash Registry naming so it's more descriptive in SOC
|
2022-05-31 11:41:48 +00:00 |
|
Josh Brower
|
025677a1e6
|
Merge pull request #8034 from Security-Onion-Solutions/feature/sigmafp
Feature/SigmaCustomFilters
|
2022-05-31 07:25:44 -04:00 |
|
Josh Brower
|
a5361fb745
|
Change Target_log name
|
2022-05-28 18:07:05 -04:00 |
|
Mike Reeves
|
30d7801ae1
|
Merge pull request #8033 from Security-Onion-Solutions/kilo
|
2022-05-28 11:38:35 -04:00 |
|
Jason Ertel
|
210bc556db
|
Add logscan and suricata variants for cloud tests to move from PM into the cloud and help alleviate disk contention
|
2022-05-28 10:29:04 -04:00 |
|
Jason Ertel
|
e87e672b9e
|
Add logscan and suricata variants for cloud tests to move from PM into the cloud and help alleviate disk contention
|
2022-05-28 10:28:20 -04:00 |
|
Jason Ertel
|
a70da41f20
|
Merge pull request #8032 from Security-Onion-Solutions/kilo
Exclude pkg upgrade retry error logs from failing setup
|
2022-05-28 08:34:40 -04:00 |
|
Jason Ertel
|
8bb02763dc
|
Exclude pkg upgrade retry error logs from failing setup
|
2022-05-28 08:28:10 -04:00 |
|
weslambert
|
a59ada695b
|
Merge pull request #8031 from Security-Onion-Solutions/fix/screenshots
Fix/screenshots
|
2022-05-27 17:05:51 -04:00 |
|
doug
|
b93a108386
|
update Cases screenshot in README
|
2022-05-27 16:33:08 -04:00 |
|
doug
|
6089f3906d
|
update screenshots and README
|
2022-05-27 16:32:00 -04:00 |
|
Josh Brower
|
94ee45ac63
|
Merge pull request #8029 from Security-Onion-Solutions/upgrade/navigator
Upgrade Navigator to 4.6.4
|
2022-05-27 14:46:59 -04:00 |
|
Josh Brower
|
43cb78a6a8
|
Upgrade Navigator
|
2022-05-27 14:21:11 -04:00 |
|
Josh Patterson
|
76bb1fbbcc
|
Merge pull request #8014 from Security-Onion-Solutions/issue/7918
manage suricata classifications.config
|
2022-05-26 13:13:03 -04:00 |
|
m0duspwnens
|
53d6e1d30d
|
simplfy
|
2022-05-26 11:51:17 -04:00 |
|
m0duspwnens
|
1bfde852f5
|
manage suricata classifications.config https://github.com/Security-Onion-Solutions/securityonion/issues/7918
|
2022-05-26 11:43:31 -04:00 |
|
m0duspwnens
|
53883e4ade
|
manage suricata classifications.config https://github.com/Security-Onion-Solutions/securityonion/issues/7918
|
2022-05-26 11:40:33 -04:00 |
|
weslambert
|
1a0ac4d253
|
Merge pull request #8007 from Security-Onion-Solutions/fix/filestream-id
Add filestream input ID for RITA logs
|
2022-05-25 10:11:36 -04:00 |
|
weslambert
|
44622350ea
|
Add ID for RITA filestream inputs
|
2022-05-25 10:09:01 -04:00 |
|
weslambert
|
99864f4787
|
Merge pull request #8001 from Security-Onion-Solutions/feature/analyzer_readme
Add configuration requirements for various analyzers
|
2022-05-25 09:33:07 -04:00 |
|
Doug Burks
|
6bd02c0b99
|
Merge pull request #8003 from Security-Onion-Solutions/feature/elastic-7.17.4
UPGRADE: Elastic 7.17.4 #8002
|
2022-05-24 13:24:13 -04:00 |
|
Doug Burks
|
1d0bb21908
|
UPGRADE: Elastic 7.17.4 #8002
|
2022-05-24 13:19:30 -04:00 |
|
Doug Burks
|
bde06e7ec5
|
UPGRADE: Elastic 7.17.4 #8002
|
2022-05-24 13:19:01 -04:00 |
|
Wes Lambert
|
b93512eb01
|
Adjust verbiage around pillar configuration
|
2022-05-24 12:36:32 +00:00 |
|
Wes Lambert
|
92dee14ee8
|
Add configuration requirements for various analyzers
|
2022-05-24 12:29:14 +00:00 |
|
weslambert
|
3e6dfcfaca
|
Merge pull request #7996 from Security-Onion-Solutions/weslambert-patch-2
Create Virustotal README
|
2022-05-23 11:43:43 -04:00 |
|
weslambert
|
a6f1bf3aef
|
Create Virustotal README
|
2022-05-23 11:39:44 -04:00 |
|
Jason Ertel
|
88f17f037e
|
Merge pull request #7982 from Security-Onion-Solutions/kilo
Upgrade to Kratos 0.9.0-alpha.3
|
2022-05-19 13:28:58 -04:00 |
|
Jason Ertel
|
c20859f8c3
|
Upgrade to Kratos 0.9.0-alpha.3
|
2022-05-18 17:05:21 -04:00 |
|
Jason Ertel
|
c95bafd521
|
Merge pull request #7969 from Security-Onion-Solutions/fix/helpers-analyzers
Only import yaml module when config is loaded
|
2022-05-18 07:15:32 -04:00 |
|
Wes Lambert
|
429ccb2dcc
|
Only import yaml module when config is loaded
|
2022-05-18 02:07:39 +00:00 |
|
weslambert
|
94ca3ddbda
|
Merge pull request #7961 from Security-Onion-Solutions/weslambert-patch-1
Add information for MHR and WhoisLookup, and other minor updates
|
2022-05-17 13:33:24 -04:00 |
|
weslambert
|
d3206a048f
|
Add information for MHR and WhoisLookup, and other minor updates
|
2022-05-17 12:49:16 -04:00 |
|
weslambert
|
ff855eb8f7
|
Merge pull request #7958 from Security-Onion-Solutions/feature/mhr_analyzer
Add Team Cymru Malware Hash Registry Analyzer
|
2022-05-17 12:42:01 -04:00 |
|
Wes Lambert
|
8af1f19ac3
|
Another no_results change
|
2022-05-17 16:12:43 +00:00 |
|
Wes Lambert
|
e4a7e3cba6
|
Change 'No results found.' to 'no_results'
|
2022-05-17 16:11:58 +00:00 |
|
weslambert
|
2688083ff1
|
Merge pull request #7959 from Security-Onion-Solutions/feature/whoislookup-analyzer
Add Whoislookup RDAP-based analyzer
|
2022-05-17 12:09:06 -04:00 |
|
Wes Lambert
|
766e9748c5
|
Add Whoislookup RDAP-based analyzer
|
2022-05-17 15:52:12 +00:00 |
|
weslambert
|
3761b491c0
|
Remove whitespace
|
2022-05-17 10:50:33 -04:00 |
|