Commit Graph

10838 Commits

Author SHA1 Message Date
Doug Burks
2d48ae7bca Merge pull request #9656 from Security-Onion-Solutions/2.3/elastic-8.6.1
UPGRADE: Elastic 8.6.1 #9594 (2.3)
2023-01-26 16:24:33 -05:00
Doug Burks
0ff519ed2f Update to Elastic 8.6.1 2023-01-26 16:09:13 -05:00
Doug Burks
127533492f Update to Elastic 8.6.1 2023-01-26 16:08:15 -05:00
Mike Reeves
7d4b4a8bd4 Merge pull request #9585 from Security-Onion-Solutions/TOoSmOotH-patch-1
Update VERSION
2023-01-17 09:40:46 -05:00
Mike Reeves
e9fa84d71b Update VERSION 2023-01-17 09:39:35 -05:00
Mike Reeves
9718e61a6a Merge pull request #9576 from Security-Onion-Solutions/2.3.200
2.3.200
2023-01-13 16:12:20 -05:00
Mike Reeves
22ec638e85 2.3.200 2023-01-13 16:08:27 -05:00
Doug Burks
7b0c22f967 Merge pull request #9568 from Security-Onion-Solutions/fix/soup-thehive-errors
soup should continue even if thehive errors
2023-01-12 13:28:41 -05:00
Doug Burks
672cab858e Continue even if thehive errors 2023-01-12 12:48:16 -05:00
Josh Brower
29312d595b Merge pull request #9559 from Security-Onion-Solutions/idh-skins
Fix mispelling
2023-01-11 11:04:29 -05:00
Josh Brower
b54f2e8752 Fix mispelling 2023-01-11 10:59:50 -05:00
Josh Brower
1470e120ef Merge pull request #9540 from Security-Onion-Solutions/idhskins
bug fix - idh skins
2023-01-09 15:49:04 -05:00
Josh Brower
2c747ec837 make sure dir is created 2023-01-09 13:46:10 -05:00
Josh Brower
8cb5cd5fee Merge pull request #9214 from Security-Onion-Solutions/idhskins
Custom IDH HTTP Skins
2023-01-06 15:14:14 -05:00
Doug Burks
a4bae77973 Merge pull request #9271 from Njinx/dev
so-status runs some code before checking for root privileges
2023-01-04 16:05:34 -05:00
Doug Burks
96a568f57f Merge pull request #9515 from Security-Onion-Solutions/fix/so-common-references-2.3
fix so-common references
2023-01-04 14:31:57 -05:00
doug
7dcdcc18a5 fix so-common references 2023-01-04 14:28:47 -05:00
Doug Burks
10fc8de9f9 Merge pull request #9513 from Security-Onion-Solutions/fix/jinja-whitespace-2.3
fix jinja whitespace 2.3
2023-01-04 13:56:17 -05:00
doug
3482df5ee1 fix jinja whitespace 2023-01-04 13:33:51 -05:00
Doug Burks
9ea3d6bb1f Merge pull request #9512 from Security-Onion-Solutions/fix/copyright-year-2023
Update Copyright year
2023-01-04 12:50:30 -05:00
doug
a67a254edc update Copyright year 2023-01-04 12:44:18 -05:00
Doug Burks
08a5a9ab31 Merge pull request #9510 from Security-Onion-Solutions/fix/sysmon-fields-2.3
Improve default sysmon fields and add new network_connection fields
2023-01-04 07:58:04 -05:00
Doug Burks
e3d32c7871 Improve default sysmon fields and add new network_connection fields 2023-01-04 07:38:18 -05:00
weslambert
20d6ce1ce9 Merge pull request #9501 from Security-Onion-Solutions/fix/elasticsearch_ingest_pipeline_rita_beacon
Update RITA beacon parsing
2023-01-03 11:13:55 -05:00
Wes
bd114eb1c4 Update RITA beacon parsing 2023-01-03 16:01:35 +00:00
Doug Burks
55c6fc422b Merge pull request #9497 from Security-Onion-Solutions/fix/sysmon-parsing-2.3
FIX: Sysmon logs are missing event.category and event.dataset #8194
2023-01-03 08:56:16 -05:00
doug
5d060f9832 update Sysmon File dashboard 2022-12-31 14:10:02 -05:00
doug
edcbfd17f5 update sysmon parser 2022-12-30 16:20:06 -05:00
Doug Burks
ff4850d9ce Merge pull request #9452 from Security-Onion-Solutions/feature/improve-dashboards-2.3
FEATURE: Improve SOC Dashboards #9450 2.3
2022-12-21 15:46:21 -05:00
Doug Burks
3e1a5b6329 Improve Strelka dashboard 2022-12-21 15:34:06 -05:00
Doug Burks
b1709f3ea3 Improve Firewall dashboard 2022-12-21 15:28:41 -05:00
Doug Burks
76a73ea35c Improve Software dashboard 2022-12-21 15:25:19 -05:00
Doug Burks
991a6ec43c Improve Intel dashboard 2022-12-21 15:19:54 -05:00
Doug Burks
e2c0607249 Improve FTP dashboard 2022-12-21 14:36:44 -05:00
Doug Burks
82c61e6bc9 improve NIDS Alerts dashboard 2022-12-21 14:32:05 -05:00
Doug Burks
37aa779095 Minor improvements 2022-12-21 13:14:38 -05:00
Doug Burks
9e631ad63d Improve SOC dashboards 2022-12-21 13:04:12 -05:00
Jason Ertel
fe6a55b58e Merge pull request #9393 from Security-Onion-Solutions/jertel/soup23200
Move Kratos DB to /nsm
2022-12-14 14:26:19 -05:00
Jason Ertel
87cebedc85 Backup the new Kratos location 2022-12-14 14:12:47 -05:00
Jason Ertel
e66c995b1f remove apparently unused reactor reference 2022-12-14 13:50:20 -05:00
Jason Ertel
e8a8f65ddc fix typo 2022-12-14 12:56:25 -05:00
Jason Ertel
a7a15117f0 Improve soup wording when the script itself needs updated 2022-12-14 12:03:47 -05:00
Jason Ertel
865ba4264b Stop backing up kratos since it now lives in /nsm. Ensure kratos is removed when re-installing. 2022-12-14 10:57:24 -05:00
Jason Ertel
6985b0ab27 Move kratos DB to /nsm 2022-12-14 10:50:24 -05:00
Mike Reeves
6e4912f759 Merge pull request #9385 from Security-Onion-Solutions/TOoSmOotH-patch-1
Fix Highlander Config for Kibana
2022-12-13 13:54:30 -05:00
Mike Reeves
b0d934daf7 Update config.map.jinja 2022-12-13 13:52:13 -05:00
Doug Burks
8e50868abd Merge pull request #9383 from Security-Onion-Solutions/fix/import-hyperlink
FIX: so-import utilities should hyperlink to dashboards #9373
2022-12-13 13:36:22 -05:00
Doug Burks
aa08803f03 FIX: so-import utilities should hyperlink to dashboards #9373 2022-12-13 13:23:27 -05:00
Doug Burks
bb346d531d FIX: so-import utilities should hyperlink to dashboards #9373 2022-12-13 13:22:53 -05:00
Doug Burks
6c057d0b0a FIX: so-import utilities should hyperlink to dashboards #9373 2022-12-13 12:43:54 -05:00