9983 Commits

Author	SHA1	Message	Date
Jason Ertel	cf47508185	notification updates	2024-08-22 09:02:32 -04:00
weslambert	2a024039bf	Merge pull request #13528 from Security-Onion-Solutions/fix/detections_alerts_ilm ... Create detections.alerts ILM policy with corresponding name	2024-08-21 14:50:10 -04:00
weslambert	212cc478de	Change back to so	2024-08-21 14:39:24 -04:00
weslambert	88ea60df2a	Fix name	2024-08-21 14:38:57 -04:00
weslambert	c1b7232a88	Fix for detections-alerts	2024-08-21 14:38:29 -04:00
Mike Reeves	04577a48be	Merge pull request #13530 from Security-Onion-Solutions/raidtools	2024-08-21 14:33:40 -04:00
weslambert	4108e67178	Check for endpoint package	2024-08-21 14:22:28 -04:00
Mike Reeves	ff479de7bd	Add support for new appliance raid controllers	2024-08-21 14:10:24 -04:00
weslambert	4afac201b9	Change ILM policy name	2024-08-21 13:25:26 -04:00
weslambert	c30537fe6a	Ensure endpoint is installed	2024-08-21 13:00:04 -04:00
m0duspwnens	7fbf448b22	fail if no defaults file	2024-08-21 11:36:06 -04:00
m0duspwnens	cd9c9a25d3	reference elastic versions from defaults	2024-08-21 11:25:56 -04:00
m0duspwnens	da1671fdf1	add get_elastic_agent_vars function	2024-08-21 11:25:33 -04:00
weslambert	1ed73b6f8e	Merge pull request #13526 from Security-Onion-Solutions/feature/tenable_io ... Add Tenable IO	2024-08-21 09:03:33 -04:00
m0duspwnens	3d61897522	ref es version from defaults for kibana	2024-08-21 08:51:35 -04:00
DefensiveDepth	f01825166d	Update Fleet Server policy	2024-08-21 08:31:37 -04:00
DefensiveDepth	07f8bda27e	Update agent	2024-08-20 15:23:31 -04:00
DefensiveDepth	e3ecc9d4be	Directly manage the Fleet Server integration config	2024-08-20 15:06:16 -04:00
DefensiveDepth	ca209ed54c	Disable auto-upgrade	2024-08-20 09:14:08 -04:00
DefensiveDepth	df6ff027b5	Remove unneeded elastic upgrade config	2024-08-19 16:05:27 -04:00
weslambert	205bbd9c61	Use more specific match	2024-08-16 14:31:11 -04:00
weslambert	224bc6b429	Ignore old SOC logs before licenseStatus	2024-08-16 14:15:10 -04:00
weslambert	dc197f6a5c	Add tenable settings	2024-08-15 23:06:53 -04:00
weslambert	f182833a8d	Add tenable_io	2024-08-15 23:03:32 -04:00
weslambert	61ab1f1ef2	Add tenable_io templates	2024-08-15 23:03:07 -04:00
DefensiveDepth	b860bf753a	Add influxdb known error	2024-08-15 11:50:34 -04:00
Mike Reeves	a39ad55578	Update registry version	2024-08-15 09:34:20 -04:00
weslambert	5f74b1b730	Update column number because of changes to API	2024-08-15 08:26:56 -04:00
Doug Burks	ab63d5dbdb	Update so-elasticsearch-cluster-space-used for changes in _cat/allocation API	2024-08-15 08:01:22 -04:00
Josh Patterson	f233f13637	Merge pull request #13478 from Security-Onion-Solutions/fixsurivars ... handle suricata network and port vars as string or list	2024-08-13 15:52:11 -04:00
m0duspwnens	c8a8236401	handle suricata network and port vars as string or list	2024-08-13 15:44:08 -04:00
Jason Ertel	dd2926201d	Merge pull request #13470 from Security-Onion-Solutions/jertel/chgpw ... fix issue with reset pw and mfa	2024-08-12 17:29:50 -04:00
Jason Ertel	ebcef8adbd	fix issue with reset pw and mfa	2024-08-12 13:35:06 -04:00
Doug Burks	46596f01fa	FEATURE: Add warning to soup about ssh #13466	2024-08-12 09:18:29 -04:00
Doug Burks	c1388a68f0	FEATURE: Add warning to soup about ssh #13466	2024-08-12 09:12:49 -04:00
Jason Ertel	caa8d9ecb0	fix repo path	2024-08-09 06:58:40 -04:00
Corey Ogburn	c71b9f6e8f	Fix CopyPasta ... Strelka annotations referenced ElastAlert. Fixed.	2024-08-08 13:31:08 -06:00
Corey Ogburn	8c1feccbe0	Tweak value	2024-08-08 12:53:51 -06:00
Corey Ogburn	5ee15c8b41	Tweak value	2024-08-08 12:00:07 -06:00
Corey Ogburn	5328f55322	Remove new config value	2024-08-08 11:43:15 -06:00
Corey Ogburn	712f904c43	Config for Repo Folder ... The folder we checkout the AI Summary repo into should definitely exist.	2024-08-08 10:57:07 -06:00
Corey Ogburn	ccd7d86302	More AI Summaries Config/Annotations ... Added aiRepoBranch to all 3 detection engines. Added showUnreviewedAiSummaries to client parameters. Added annotations.	2024-08-08 10:46:41 -06:00
Corey Ogburn	fc89604982	New Config Values/Annotations for Ai Summaries ... Each engine pulls the same repo into the same location and shows the summaries. Which repo and where to keep them is advanced, but turning AI summaries on or off is not.	2024-08-06 13:55:54 -06:00
reyesj2	cfd6676583	update kafka firewall annotations config ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2024-08-06 14:40:53 -04:00
m0duspwnens	009c8d55c3	unhold all verions for upgrade	2024-08-06 09:26:58 -04:00
m0duspwnens	c0c01f0d17	lock and unlock salt in soup	2024-08-05 16:50:19 -04:00
m0duspwnens	2fe5dccbb4	fix hold/unhold	2024-08-05 15:25:28 -04:00
m0duspwnens	c83a143eef	apply holds to salt each state run	2024-08-05 15:13:07 -04:00
m0duspwnens	60beaf51bc	fail hard if docker py module upgrade failes	2024-08-01 12:32:24 -04:00
m0duspwnens	9ab17ff79c	change dir name	2024-08-01 11:23:34 -04:00