9036 Commits

Author	SHA1	Message	Date
Jorge Reyes	2ca96c7f4c	Merge pull request #12555 from Security-Onion-Solutions/reyesj2-patch-osc ... Create local salt directory	2024-03-11 09:40:20 -04:00
reyesj2	a8403c63c7	Create local salt dir for stig ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2024-03-11 09:35:54 -04:00
Jorge Reyes	f4725bf6d4	Merge pull request #12553 from Security-Onion-Solutions/reyesj2-patch-osc ... Run scan against default scap security guide so that resulting score is accurate	2024-03-11 07:52:07 -04:00
Doug Burks	a892352b61	Update soc_pcap.yaml	2024-03-08 16:43:29 -05:00
Corey Ogburn	6f05c3976b	Updated RulesRepo for New Strelka Structure	2024-03-08 11:29:46 -07:00
Doug Burks	b6b6fc45e7	Merge pull request #12527 from Security-Onion-Solutions/TOoSmOotH-patch-7 ... Fix Space Free for Steno	2024-03-08 12:40:15 -05:00
Doug Burks	6680e023e4	Update soc_pcap.yaml	2024-03-08 12:16:59 -05:00
Josh Patterson	7ec887a327	Merge pull request #12537 from Security-Onion-Solutions/issue/12535 ... allow managersearch to receiver redis and 5644	2024-03-08 10:13:27 -05:00
m0duspwnens	3eb6fe2df9	allow managersearch to receiver redis and 5644	2024-03-08 09:52:12 -05:00
Mike Reeves	06257b9c4a	Update so-minion	2024-03-07 14:32:46 -05:00
Jason Ertel	40574982e4	unswap files	2024-03-07 14:25:43 -05:00
Jason Ertel	fffef9b621	gracefully handle status check failure on ubuntu	2024-03-07 12:31:51 -05:00
Wes	005930f7fd	Add error.message mapping for system.syslog	2024-03-07 15:41:23 +00:00
Mike Reeves	b5f1733e97	Merge pull request #12513 from Security-Onion-Solutions/newsuripcap ... Change Factoring for so-minion pcap disk space	2024-03-07 10:14:34 -05:00
m0duspwnens	70f3ce0536	change how maxfiles is calculated	2024-03-06 17:32:06 -05:00
reyesj2	17a75d5bd2	Run stig post remediate scan against default ol9 scap-security-guide. ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2024-03-06 17:19:01 -05:00
m0duspwnens	583227290f	fix max-files calc	2024-03-06 15:18:22 -05:00
m0duspwnens	cf232534ca	move suricata.pcap to suricata.config.outputs.pcap-log	2024-03-06 14:42:07 -05:00
Mike Reeves	7f1e786e3d	Consolidate PCAP settings	2024-03-06 12:56:09 -05:00
Jason Ertel	8f36a8a4b6	Merge pull request #12514 from Security-Onion-Solutions/jertel/annotations ... detections annotations	2024-03-06 11:10:21 -05:00
Jason Ertel	1cbac11fae	detections annotations	2024-03-06 11:08:03 -05:00
Mike Reeves	ad12093429	Fix percent calc	2024-03-06 11:05:06 -05:00
Jason Ertel	167aff24f6	detections annotations	2024-03-06 11:03:52 -05:00
Josh Brower	9e671621db	Merge pull request #12510 from Security-Onion-Solutions/2.4/excludedetections ... Add Exclusion toggle	2024-03-06 10:56:29 -05:00
Mike Reeves	4dfa1a5626	Move Suricata around	2024-03-06 10:35:10 -05:00
Mike Reeves	a63fca727c	Update soc_suricata.yaml	2024-03-06 10:02:06 -05:00
Mike Reeves	f58c104d89	Update so-minion	2024-03-06 09:51:56 -05:00
Jason Ertel	5acefb5d18	Merge pull request #12511 from Security-Onion-Solutions/jertel/annotations ... PCAP annotations	2024-03-06 08:40:24 -05:00
Jason Ertel	0f12297f50	add new pcap annotations	2024-03-06 08:19:42 -05:00
Jason Ertel	12653eec8c	add new pcap annotations	2024-03-06 08:14:33 -05:00
Josh Brower	1b47537a3f	Add Exclusion toggle	2024-03-06 07:16:50 -05:00
Josh Patterson	eaef076eba	Update so-minion	2024-03-05 17:52:24 -05:00
Josh Patterson	ac9db8a392	Merge branch '2.4/dev' into jppsensoroni	2024-03-05 17:51:32 -05:00
m0duspwnens	5687fdcf57	fix pcapspace function	2024-03-05 17:46:43 -05:00
Jason Ertel	4b5f00cef4	fix oinkcodes with leading zeros	2024-03-05 16:42:20 -05:00
weslambert	185a160df0	Merge pull request #12500 from Security-Onion-Solutions/feature/additional_integrations_5 ... Additional Integrations #5	2024-03-05 16:12:05 -05:00
Mike Reeves	a686d46322	Update so-minion	2024-03-05 15:09:02 -05:00
Mike Reeves	6eb608c3f5	Update so-minion	2024-03-05 15:05:03 -05:00
m0duspwnens	c0d19e11b9	fix } placement	2024-03-05 10:07:32 -05:00
m0duspwnens	1a58aa61a0	only import pcap and suricata if sensor	2024-03-05 09:54:40 -05:00
m0duspwnens	08f2b8251b	add GLOBALS.is_sensor	2024-03-05 09:53:35 -05:00
weslambert	bed42208b1	Add journald integration	2024-03-05 09:49:55 -05:00
weslambert	d8e8933ea0	Add AWS Security Hub template	2024-03-05 09:25:41 -05:00
weslambert	d85ac39e28	Add AWS Inspector template	2024-03-05 09:23:17 -05:00
weslambert	1514f1291e	Add AWS GuardDuty template	2024-03-05 09:21:48 -05:00
weslambert	b64d61065a	Add AWS Cloudfront template	2024-03-05 09:19:43 -05:00
Mike Reeves	58d222284e	Merge pull request #12271 from Security-Onion-Solutions/suripcap ... Suricata PCAP	2024-03-04 17:27:38 -05:00
Mike Reeves	fe238755e9	Fix df	2024-03-04 16:52:51 -05:00
Mike Reeves	018e099111	Modify setup	2024-03-04 14:53:15 -05:00
Josh Brower	f28f269bb1	Fix FIM	2024-03-04 07:38:32 -05:00