CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-07-14 04:43:09 +02:00
Code Issues Packages Projects Releases Wiki Activity
14,237 Commits 40 Branches 127 Tags
2e026b637d046bc8444bb5e4db9843f87709ec00
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
weslambertandGitHub cbdaf2e9a1 Merge pull request #12242 from Security-Onion-Solutions/upgrade/strelka_0.24.01.18 
Fix quote
 2024-01-23 14:02:35 -05:00
weslambertandGitHub 4d7af21dd5 Fix quote 2024-01-23 13:55:37 -05:00
weslambertandGitHub 8348506acc Merge pull request #12240 from Security-Onion-Solutions/upgrade/strelka_0.24.01.18 
UPGRADE: Strelka 0.24.01.18
 2024-01-23 13:50:15 -05:00
weslambertandGitHub 1698d95efe Use PLACEHOLDER for key values 2024-01-23 13:45:26 -05:00
weslambertandGitHub b1052ddcce Merge pull request #12241 from Security-Onion-Solutions/fix/leak_test 
Exclude specific Strelka key values
 2024-01-23 13:43:18 -05:00
weslambertandGitHub 0cb36bb0aa Exclude StrelkaHexDump and PLACEHOLDER values 2024-01-23 13:39:59 -05:00
weslambertandGitHub 0ccdfcb07c Exclude only offset_meta_key 2024-01-23 13:11:43 -05:00
weslambertandGitHub 63ba97306c Exclude Strelka defaults 2024-01-23 13:05:58 -05:00
weslambertandGitHub 72319e33db Avoid leak test triggering 2024-01-23 12:38:09 -05:00
weslambertandGitHub 34bb37e415 Merge pull request #12227 from Security-Onion-Solutions/feature/rita_logs 
RITA Logs
 2024-01-23 12:32:32 -05:00
Wes 3bcb0bc132 Update defaults 2024-01-23 17:18:54 +00:00
Wes 5542db0aac Leave package version null 2024-01-22 21:07:46 +00:00
Wes b08db3e05a Add RITA policy 2024-01-22 20:16:43 +00:00
Wes 80a3942245 Rename RITA pipelines 2024-01-22 20:15:48 +00:00
weslambertandGitHub de6151fbe2 Merge pull request #12221 from Security-Onion-Solutions/feature/additional_integrations_4 
Additional integrations #4 - Part 1
 2024-01-19 17:32:37 -05:00
Wes 7118cc8dee Add additional integration SOC configuration 2024-01-19 22:04:07 +00:00
Wes 05aa8b013a Add additional integration to templates 2024-01-19 22:02:39 +00:00
Wes d0457cb61e Add additional integrations to defaults 2024-01-19 22:00:38 +00:00
weslambertandGitHub 33d74098bd Merge pull request #12201 from Security-Onion-Solutions/fix/suricata_ike 
Add Suricata IKE pipeline
 2024-01-17 16:50:19 -05:00
Wes e70ce50912 Change description 2024-01-17 14:06:16 +00:00
Wes f6590ac0bf Remove Suricata IKEv2 pipeline 2024-01-16 18:10:00 +00:00
Wes ea64ce92d3 Add Suricata IKE pipeline 2024-01-16 18:09:46 +00:00
Wes 8a92b023b2 Add interface name 2024-01-16 18:09:16 +00:00
weslambertandGitHub 790f5171a6 Merge pull request #12176 from Security-Onion-Solutions/fix/otx_pulses_template 
FIX: OTX pulses template
 2024-01-12 16:55:58 -05:00
weslambertandGitHub 252c51dafb Change order of names 2024-01-12 16:45:18 -05:00
weslambertandGitHub a07e6e1058 OTX pulses 2024-01-12 16:43:33 -05:00
weslambertandGitHub 3f9678056d OTX pulses template 2024-01-12 16:42:32 -05:00
weslambertandGitHub c895b6a274 Merge pull request #12173 from Security-Onion-Solutions/fix/endpoint_metrics_templates 
Add endpoint metrics templates
 2024-01-12 11:26:09 -05:00
Wes 418f41c7e4 Add SOC configuration for metrics 2024-01-12 15:03:18 +00:00
weslambertandGitHub 05679e79fc Merge pull request #12171 from Security-Onion-Solutions/2.4/dev 
Merge 2.4 dev
 2024-01-12 08:50:15 -05:00
Wes 5eae349938 Add endpoint metrics templates 2024-01-12 13:47:35 +00:00
weslambertandGitHub 71c5e34e03 Merge pull request #12164 from Security-Onion-Solutions/fix/optional_integration_pillar_merge 
Make sure optional integration pillar values are merged with defaults
 2024-01-11 16:14:46 -05:00
weslambertandGitHub 880300d644 Move ELASTICFLEETMERGED import under allowed states 2024-01-11 14:58:21 -05:00
weslambertandGitHub f5b59cacec Move ELASTICFLEETMERGED import 2024-01-11 14:56:01 -05:00
weslambertandGitHub ea5097f1b4 Add back curly brace 2024-01-11 14:51:01 -05:00
weslambertandGitHub cc66daba1a Make sure optional integration pillar values are merged with defaults 2024-01-11 14:49:39 -05:00
weslambertandGitHub 7bdc306ad4 Merge pull request #12160 from Security-Onion-Solutions/feature/additional_integrations_3 
Additional Supported Integrations #3
 2024-01-11 12:26:14 -05:00
weslambertandGitHub 5e1e685ce0 Exclude Cisco failed_attempts pipeline 2024-01-11 10:52:30 -05:00
Wes c89d674a92 Add settings for integrations 2024-01-11 14:18:06 +00:00
Wes 9b1ddcacb4 Add additional templates for integrations 2024-01-11 14:00:09 +00:00
Wes 5703023008 Add additional packages 2024-01-11 13:59:38 +00:00
weslambertandGitHub cfb5c1c9d2 Merge pull request #12063 from Security-Onion-Solutions/fix/curator_log_check 
Ignore Curator logs
 2023-12-20 17:47:17 -05:00
weslambertandGitHub 244968ce23 Remove unnecessary blank lines 2023-12-20 17:30:15 -05:00
weslambertandGitHub 65f89b22b2 Ignore Curator logs 2023-12-20 17:28:55 -05:00
weslambertandGitHub 7684aadb87 Merge pull request #12062 from Security-Onion-Solutions/fix/curator_remove 
Curator Remove Changes
 2023-12-20 15:16:47 -05:00
Wes 188744357f Remove post since function doesn't exist 2023-12-20 19:14:14 +00:00
Wes 4baf4657f6 Curator cleanup 2023-12-20 19:10:22 +00:00
Wes 1006710226 Change Curator disable config 2023-12-20 18:26:27 +00:00
weslambertandGitHub cd661027a6 Remove post for 2.4.40 2023-12-20 12:23:20 -05:00
weslambertandGitHub ba2c51bee2 Merge pull request #12052 from Security-Onion-Solutions/fix/analyzer_images 
Fix analyzer images
 2023-12-19 14:30:19 -05:00
Wes 62708ac97d Add new image 2023-12-19 18:58:17 +00:00
Wes f8fdc6d14e Remove old image 2023-12-19 18:57:54 +00:00
Wes 15773bae34 Fix analyzer image links 2023-12-19 18:42:59 +00:00
Wes c06de33318 Test EchoTrail image 2023-12-19 18:36:55 +00:00
Wes 41dc9df7cd Add images for analyzers 2023-12-19 18:35:10 +00:00
weslambertandGitHub 69472e70b4 Merge pull request #12003 from HoangLongVu/2.4/dev 
2.4/dev Analyzers for Threatfox, MalwareBazaar, Echotrail, Elasticsearch
 2023-12-19 12:09:16 -05:00
Wes 85242651b2 Add Sublime image to assets and change link 2023-12-19 15:49:57 +00:00
Wes 6ab12ceec4 Add Elasticsearch image to assets and change link 2023-12-19 15:46:02 +00:00
Wes bfcf7d4668 Add EchoTrail image to assets and change link 2023-12-19 15:42:23 +00:00
Wes 4a23832267 Don't require advanced options for required values 2023-12-19 15:14:33 +00:00
Wes 614589153b Update Malwarebazaar test and comply with flake8 2023-12-19 02:57:35 +00:00
Wes 8f6b1a07b7 Don't use soup for removing Curator files 2023-12-18 20:54:24 +00:00
Wes 6c92672566 Remove Curator configuration and scripts 2023-12-18 20:53:56 +00:00
Wes aba5893965 Add disabled state for Curator 2023-12-18 20:50:49 +00:00
Wes 6a4e05d60f Remove control characters 2023-12-15 20:53:51 +00:00
Wes 981f3642a0 Update tests 2023-12-15 20:53:19 +00:00
Wes 020472085b ThreatFox test 2023-12-15 15:16:44 +00:00
Wes 8aaeee20b9 Fix import 2023-12-15 14:40:25 +00:00
Wes e32de6893b Remove control characters 2023-12-15 14:27:27 +00:00
Wes f05eb742dd Fix patch 2023-12-15 14:26:33 +00:00
Wes cd3a661dd6 Set malwarebazaar.py to be executable 2023-12-15 14:17:33 +00:00
weslambertandGitHub 55c957170d Reduce complexity 2023-12-15 09:00:31 -05:00
weslambertandGitHub d0d671a828 Merge pull request #12020 from Security-Onion-Solutions/fix/integration_force 
Add force option to integrations
 2023-12-14 13:44:32 -05:00
Wes 22fcccef1c Add force option 2023-12-14 16:53:19 +00:00
weslambertandGitHub 5d3f2298b6 Merge pull request #12000 from Security-Onion-Solutions/feature/additional_integrations 
Additional Integrations #2
 2023-12-13 13:23:34 -05:00
weslambertandGitHub 8cf5d9c1a6 Annotations 2023-12-13 11:55:40 -05:00
weslambertandGitHub cdac2bfa16 Add Anomali, Cybersixgill, Snort, and ThreatQuotient 2023-12-13 11:03:25 -05:00
weslambertandGitHub b0a69d30c9 Add Anomali, Cybersixgill, Snort, and ThreatQuotient packages 2023-12-13 10:44:03 -05:00
weslambertandGitHub e95932f28c Merge pull request #11990 from Security-Onion-Solutions/fix/remove_curator 
Remove Curator
 2023-12-12 12:31:16 -05:00
Wes bbe091fa14 Fix accidental change 2023-12-12 15:08:47 +00:00
Wes 54c3167b10 Delete data streams when necessary 2023-12-12 05:25:50 +00:00
Wes b1721b6467 Fix directory 2023-12-11 21:43:25 +00:00
Wes f7373ed79c Stop Curator, remove scripts and status 2023-12-11 19:20:52 +00:00
Wes d203aec44a Remove Curator 2023-12-08 19:37:06 +00:00
weslambertandGitHub b80d7fd610 Merge pull request #11967 from Security-Onion-Solutions/fix/close_remove 
Remove Curator close configuration
 2023-12-07 15:05:38 -05:00
Wes 849e9e14ad Change soup to remove delete actions and run post_to_2.4.40 2023-12-07 16:49:44 +00:00
Wes 0ebc8c7beb Change path 2023-12-07 15:17:51 +00:00
Wes e0801282eb Remove files 2023-12-07 14:07:26 +00:00
Wes bdf4b2c68d Remove settings 2023-12-07 14:03:45 +00:00
Wes e49fc0dd27 Remove more settings 2023-12-07 14:03:09 +00:00
Wes f52da4a933 Remove close settings and cron 2023-12-07 13:58:39 +00:00
Wes f38758a9c7 Remove close scripts 2023-12-07 13:52:25 +00:00
Wes 1ac3a2d2f1 Remove delete files and allow deletion of indices managed by ILM 2023-12-07 13:51:24 +00:00
Wes 965ced94c4 Remove close files 2023-12-07 13:48:08 +00:00
weslambertandGitHub fea5a3026d Merge pull request #11955 from Security-Onion-Solutions/fix/sublime_analyzer_documentation 
Sublime Analyzer Documentation
 2023-12-06 13:27:03 -05:00
weslambertandGitHub 7f21bee0d4 Add README 2023-12-06 13:14:17 -05:00
weslambertandGitHub ade3a46a9a Add LocalFile link 2023-12-06 12:58:44 -05:00
weslambertandGitHub e6a2e49d37 Add Sublime Platform 2023-12-06 12:57:59 -05:00
weslambertandGitHub 1438913f6a Merge pull request #11954 from Security-Onion-Solutions/fix/sublime_analyzer_indentation 
Fix indentation for rule_results
 2023-12-06 12:50:44 -05:00
Wes 51fa4922b9 Fix indentation for rule_results 2023-12-06 17:37:07 +00:00