10626 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Doug Burks	2c5038aa9c	Merge pull request #8879 from Security-Onion-Solutions/2.4/improve-sysmon-dashboards ... improve sysmon dashboards	2022-10-07 16:46:51 +00:00
doug	d65fde9536	improve sysmon dashboards	2022-10-07 12:23:40 -04:00
weslambert	8437592bb5	Merge pull request #8869 from Security-Onion-Solutions/feature/elastic-8.4.3 ... Elastic 8.4.3	2022-10-06 16:03:36 -04:00
weslambert	bee1b06f76	Update to Kibana 8.4.3	2022-10-06 15:14:43 -04:00
weslambert	985e1728d7	Update to Kibana 8.4.3	2022-10-06 15:13:27 -04:00
Mike Reeves	46bdd1acad	Merge pull request #8837 from Security-Onion-Solutions/config ... Add SOC annotations	2022-10-03 08:46:46 -04:00
Jason Ertel	0fdec03fa9	use yaml anchor to avoid duplicated annotations	2022-09-30 15:15:35 -04:00
Jason Ertel	30a23a4cd0	Add SOC annotations	2022-09-30 15:00:08 -04:00
Jason Ertel	fe62744c05	Merge pull request #8825 from Security-Onion-Solutions/config ... resolve inode issue with soc_users_roles when deleting a user; other minor improvements	2022-09-27 17:38:20 -04:00
Jason Ertel	5708f3595e	Avoid overwriting the file inode since it's mapped into a running container	2022-09-27 17:27:28 -04:00
Jason Ertel	e519548557	add logLevel default and annotation for quick access to enabling debug logs	2022-09-27 16:55:28 -04:00
Jason Ertel	981371c72f	log salt-relay responses for troubleshooting assistance	2022-09-27 16:48:47 -04:00
Jason Ertel	16d24d4bc9	Merge pull request #8822 from Security-Onion-Solutions/config ... user management / sync	2022-09-27 11:14:32 -04:00
Jason Ertel	53b4f01921	replace quotes on minion arg	2022-09-27 10:54:08 -04:00
Jason Ertel	851e44e5fa	ensure salt-relay is restarted when SOC is manually restarted	2022-09-27 10:31:14 -04:00
Jason Ertel	7f7f2c15d0	add support for querying active salt jobs (future use)	2022-09-27 10:29:21 -04:00
Josh Patterson	004fa8167e	Merge pull request #8821 from Security-Onion-Solutions/fix/soc2.4 ... Fix/soc2.4	2022-09-27 10:15:04 -04:00
m0duspwnens	6bd4860f19	fix path	2022-09-27 09:57:01 -04:00
m0duspwnens	42b03ca6df	add missing soc things	2022-09-27 09:53:48 -04:00
Jason Ertel	556ddc2ee4	sync in background	2022-09-27 09:24:34 -04:00
Jason Ertel	8e175b2d3f	add manual sync	2022-09-27 07:05:04 -04:00
Mike Reeves	e032a9f449	Merge pull request #8816 from Security-Onion-Solutions/funstuff	2022-09-26 18:15:14 -04:00
Mike Reeves	2066efcabf	Add Rules to sync	2022-09-26 17:18:28 -04:00
Mike Reeves	37c98c14cd	Fix zeek logs in filebeat	2022-09-26 17:11:10 -04:00
Mike Reeves	aa7dd47b00	Fix zeek logs in filebeat	2022-09-26 17:01:44 -04:00
Doug Burks	ea8d9362ae	Merge pull request #8813 from Security-Onion-Solutions/dougburks-patch-1 ... Change managing-rules.html to rules.html in soc_idstools.yaml	2022-09-26 19:00:41 +00:00
Doug Burks	80201f1465	Change managing-rules.html to rules.html in soc_idstools.yaml	2022-09-26 14:58:51 -04:00
Jason Ertel	0ad1a1a262	so-user and salt-relay updates for user management	2022-09-26 14:57:33 -04:00
Doug Burks	1b13e454f8	Merge pull request #8812 from Security-Onion-Solutions/2.4/dev-fix-screenshots ... fix screenshots in README.md	2022-09-26 17:49:10 +00:00
doug	97a6b3c2f3	fix screenshots	2022-09-26 13:46:46 -04:00
Josh Brower	97f42dcce5	Merge pull request #8811 from Security-Onion-Solutions/2.4/elastic-fleet ... Live Query - View in Hunt fix	2022-09-26 09:35:12 -04:00
Josh Brower	a0b579019f	Live Query - View in Hunt fix	2022-09-26 09:27:09 -04:00
Doug Burks	4e5eb1cbb8	Merge pull request #8807 from Security-Onion-Solutions/2.4/dev-ocd ... initial quick OCD pass	2022-09-23 20:39:54 +00:00
doug	fee5a7bea9	initial quick OCD pass	2022-09-23 16:29:55 -04:00
Josh Brower	d698238ed1	Merge pull request #8799 from Security-Onion-Solutions/2.4/elastic-fleet ... Live Query - View in Hunt link	2022-09-23 15:00:32 -04:00
Mike Reeves	e3f4a58989	Merge pull request #8804 from Security-Onion-Solutions/funstuff ... Firewall and More	2022-09-23 14:00:51 -04:00
Mike Reeves	d26be44df1	update soc_firewall.yaml	2022-09-23 13:09:46 -04:00
Mike Reeves	3e2be096be	update soc_firewall.yaml	2022-09-23 13:08:03 -04:00
Mike Reeves	2b9322b823	Helps if you add the IP address	2022-09-23 08:52:58 -04:00
Josh Patterson	02f1d24ea6	remove minion hg	2022-09-23 08:40:25 -04:00
Josh Patterson	975c7fabcc	remove minion hg	2022-09-23 08:39:48 -04:00
Josh Patterson	5e32e333c4	remove minion hg	2022-09-23 08:37:59 -04:00
Josh Brower	c7eccfd0c5	Live Query - View in Hunt link	2022-09-22 20:17:57 -04:00
Mike Reeves	a7872234ab	Remove NTP from setup	2022-09-22 17:07:00 -04:00
Mike Reeves	4b059ce7fb	Firewall Changes	2022-09-22 17:04:18 -04:00
Mike Reeves	75b058c37f	Firewall Changes	2022-09-22 17:03:03 -04:00
Mike Reeves	f9c77900ae	Firewall Changes	2022-09-22 16:54:57 -04:00
Mike Reeves	81f79c3a02	Firewall Changes	2022-09-22 16:33:08 -04:00
Josh Patterson	3100efc954	fix syntax	2022-09-22 16:03:12 -04:00
Mike Reeves	4eebd855ac	Firewall Changes	2022-09-22 15:47:16 -04:00