Commit Graph

11031 Commits

Author SHA1 Message Date
Jason Ertel
cb0c078955 use the same requests version that's already packaged with the analyzer 2023-05-19 23:56:39 -04:00
Jason Ertel
aa426244bf Merge pull request #10394 from Security-Onion-Solutions/jertel/fixwhoisit
fix lib dependency issue with whoisit
2023-05-19 14:34:32 -04:00
Jason Ertel
97b2ae8d82 fix lib dependency issue with whoisit 2023-05-19 14:23:12 -04:00
Doug Burks
7047125759 Merge pull request #10386 from Security-Onion-Solutions/2.3/elastic-8.7.1
UPGRADE: Elastic 8.7.1 #10269
2023-05-18 15:27:10 -04:00
Doug Burks
43f73abd4d Update so-kibana-config-load 2023-05-18 15:18:27 -04:00
Doug Burks
51a8684850 Update config_saved_objects.ndjson 2023-05-18 15:17:36 -04:00
Doug Burks
b3c5239787 Merge pull request #10333 from Security-Onion-Solutions/dougburks-patch-1
Update soup for 2.3.250
2023-05-11 08:28:53 -04:00
Doug Burks
0f562279ee Update soup for 2.3.250 2023-05-11 07:26:58 -04:00
weslambert
834f45c0f2 Merge pull request #10286 from Security-Onion-Solutions/fix/strelka_ignore_yara_rules
Ignore "expl_outlook_cve_2023_23397.yar" and "gen_mal_3cx_compromise_mar23.yar" since they are causing problems with YARA compilation
2023-05-08 11:58:11 -04:00
weslambert
d4cf9efeca Merge pull request #10303 from Security-Onion-Solutions/fix/kibana_pivot_to_pcap_url
Surround _id field in double quotes to prevent errors associated with values beginning with a hyphen
2023-05-08 11:55:22 -04:00
Doug Burks
c620983b4a Merge pull request #10299 from Security-Onion-Solutions/dougburks-patch-1
FIX: Improve soup's local file modification logic #8972
2023-05-08 09:47:49 -04:00
Wes
ed19c139ea Surround _id field in double quotes to prevent errors associated with values beginning with a hyphen 2023-05-08 13:44:36 +00:00
Doug Burks
af85c6261b FIX: Improve soup's local file modification logic #8972 2023-05-08 09:41:26 -04:00
weslambert
e9f58269cd Ignore "expl_outlook_cve_2023_23397.yar" and "gen_mal_3cx_compromise_mar23.yar" since they are causing problems with YARA compilation 2023-05-04 16:13:59 -04:00
Jason Ertel
208c3d96e9 Merge pull request #10266 from Security-Onion-Solutions/jertel/aws
more detection improvements
2023-05-02 08:17:13 -04:00
Jason Ertel
1e888a5d9e more detection improvements 2023-05-02 07:56:11 -04:00
Jason Ertel
f7ae8d449e Merge pull request #10259 from Security-Onion-Solutions/jertel/simplifycd
simplify cloud detection
2023-05-01 11:33:26 -04:00
Jason Ertel
195274bb11 Merge branch 'dev' into jertel/simplifycd 2023-05-01 11:29:39 -04:00
Jason Ertel
a0ac1d2274 simplify cloud detection 2023-05-01 11:04:43 -04:00
Mike Reeves
3dd39c7f59 Merge pull request #10234 from Security-Onion-Solutions/TOoSmOotH-patch-2
Update VERSION
2023-04-26 14:41:04 -04:00
Mike Reeves
ba846bbf35 Update VERSION 2023-04-26 14:39:31 -04:00
Mike Reeves
0baf8e9471 Merge pull request #10227 from Security-Onion-Solutions/dev
2.3.240
2.3.240-20220426
2023-04-26 14:31:56 -04:00
Mike Reeves
e30fec7af0 Merge pull request #10226 from Security-Onion-Solutions/2.3.240
2.3.240
2023-04-26 09:58:18 -04:00
Mike Reeves
884f5cd3a6 2.3.240 2023-04-26 09:55:19 -04:00
Jason Ertel
11babd2f1c Merge pull request #10221 from Security-Onion-Solutions/jertel/imdsv2to
timeout more quickly on aws imdsv2 detection
2023-04-26 07:59:13 -04:00
Jason Ertel
b440ab5c02 timeout more quickly on aws imdsv2 detection 2023-04-26 07:57:23 -04:00
Jason Ertel
91d667c3ad Merge pull request #10200 from Security-Onion-Solutions/jertel/imdsv2_23
Detect cloud install on forced imdsv2 instances
2023-04-25 09:46:39 -04:00
Jason Ertel
f04c01b28c Merge pull request #10204 from Security-Onion-Solutions/jertel/2.3.240_soup
soup update for 2.3.240
2023-04-25 09:46:28 -04:00
Jason Ertel
71ab8ddf1d soup update for 2.3.240 2023-04-25 09:42:14 -04:00
Jason Ertel
f1f79d55dc Detect cloud install on forced imdsv2 instances 2023-04-24 16:26:23 -04:00
Mike Reeves
db1bd16758 Merge pull request #10142 from Security-Onion-Solutions/TOoSmOotH-patch-1
Update VERSION
2023-04-17 10:56:59 -04:00
Mike Reeves
ef73834d58 Update VERSION 2023-04-17 10:55:38 -04:00
Mike Reeves
3891548d6d Merge pull request #10141 from Security-Onion-Solutions/dev
2.3.230 Release
2.3.230-20230417
2023-04-17 10:47:32 -04:00
Mike Reeves
9d6ed8b9b2 Merge pull request #10140 from Security-Onion-Solutions/2.3.230
2.3.230
2023-04-17 10:26:59 -04:00
Mike Reeves
ef92815a08 2.3.230 2023-04-17 10:22:39 -04:00
Doug Burks
19b5cdcb0e Merge pull request #10119 from Security-Onion-Solutions/2.3/fix-suricata-dns
FIX: Suricata DNS A and CNAME parsing #10117
2023-04-13 11:00:13 -04:00
Doug Burks
272b345892 FIX: Suricata DNS A and CNAME parsing #10117 2023-04-13 10:52:37 -04:00
Mike Reeves
7fad9d60ef Merge pull request #10113 from Security-Onion-Solutions/TOoSmOotH-patch-4
Update init.sls
2023-04-12 10:32:43 -04:00
Mike Reeves
46fc62b8dc Update init.sls 2023-04-12 10:29:54 -04:00
Doug Burks
ca9a93a4b0 Merge pull request #9998 from Security-Onion-Solutions/dougburks-patch-1
Update soup for 2.3.230
2023-03-24 12:38:39 -04:00
Doug Burks
aa2e18fca9 Update soup for 2.3.230 2023-03-24 12:31:51 -04:00
Mike Reeves
7e4ce7b81d Merge pull request #9877 from Security-Onion-Solutions/TOoSmOotH-patch-3
Update HOTFIX
2023-03-01 16:37:14 -05:00
Mike Reeves
e5c0058dd1 Update HOTFIX 2023-03-01 16:36:08 -05:00
Mike Reeves
07c5b541a3 Merge pull request #9876 from Security-Onion-Solutions/master
Master to Dev
2023-03-01 16:35:48 -05:00
Mike Reeves
b756b8ea32 Merge pull request #9873 from Security-Onion-Solutions/hotfix/2.3.220
Hotfix/2.3.220
2.3.220-20230301
2023-03-01 16:32:49 -05:00
Mike Reeves
5b46e57ae1 Merge pull request #9875 from Security-Onion-Solutions/hotfix23220
Hotfix for 2.3.220
2023-03-01 16:14:26 -05:00
Mike Reeves
924009afb8 Hotfix for 2.3.220 2023-03-01 16:11:38 -05:00
Mike Reeves
8f5bacc510 Merge pull request #9874 from Security-Onion-Solutions/TOoSmOotH-patch-3
Update init.sls
2023-03-01 14:52:04 -05:00
Mike Reeves
d5e48a7eca Update init.sls 2023-03-01 14:50:55 -05:00
Mike Reeves
6346a92f0f Merge pull request #9872 from Security-Onion-Solutions/hotfix23220
Hotfix for 2.3.220
2023-03-01 14:20:47 -05:00