Mike Reeves
|
31f591a098
|
Merge pull request #9635 from Security-Onion-Solutions/mkr24
Ubuntu support changes
|
2023-01-25 13:34:44 -05:00 |
|
Mike Reeves
|
498301b111
|
Salt for Ubuntu
|
2023-01-25 12:00:19 -05:00 |
|
Mike Reeves
|
704d99e757
|
Salt for Ubuntu
|
2023-01-25 11:50:19 -05:00 |
|
Mike Reeves
|
9243b01cbb
|
Salt for Ubuntu
|
2023-01-25 11:44:22 -05:00 |
|
Jason Ertel
|
c9f18891b2
|
Merge pull request #9639 from Security-Onion-Solutions/kilo
auto extract source/dest IP on case related event attachments; improve so-verify stream to console
|
2023-01-25 11:37:16 -05:00 |
|
Jason Ertel
|
31d7e05c45
|
refactor so-verify to ensure output streams to console
|
2023-01-25 10:59:50 -05:00 |
|
weslambert
|
4868bd8f5e
|
Merge pull request #9638 from Security-Onion-Solutions/fix/elastic_agent_integration_kratos_data_stream_rename
Rename Kratos Data Stream
|
2023-01-25 08:45:37 -05:00 |
|
weslambert
|
c9f458e1e2
|
Set event.dataset for all Kratos logs to 'access' for now
|
2023-01-25 08:19:50 -05:00 |
|
weslambert
|
7bf9d77962
|
Rename Kratos data stream
|
2023-01-25 08:18:21 -05:00 |
|
Mike Reeves
|
161881efbb
|
Salt for Ubuntu
|
2023-01-24 16:25:26 -05:00 |
|
Mike Reeves
|
d5f8ea8661
|
Salt for Ubuntu
|
2023-01-24 16:05:16 -05:00 |
|
Mike Reeves
|
53d6823ba7
|
Salt for Ubuntu
|
2023-01-24 16:00:03 -05:00 |
|
Mike Reeves
|
5a223981ca
|
Salt for Ubuntu
|
2023-01-24 15:57:05 -05:00 |
|
Mike Reeves
|
177ddc1183
|
Salt for Ubuntu
|
2023-01-24 15:48:48 -05:00 |
|
Mike Reeves
|
20f7a77886
|
Salt for Ubuntu
|
2023-01-24 15:43:12 -05:00 |
|
Mike Reeves
|
b89e7efeea
|
Salt for Ubuntu
|
2023-01-24 15:30:46 -05:00 |
|
weslambert
|
3f9764d22d
|
Merge pull request #9633 from Security-Onion-Solutions/fix/elastic_agent_more_improvements
More Elastic Agent Integration Improvements
|
2023-01-24 15:16:52 -05:00 |
|
Mike Reeves
|
a048034f16
|
Salt for Ubuntu
|
2023-01-24 13:38:39 -05:00 |
|
Jason Ertel
|
7b1f867ac3
|
Add defaults for auto extracted observables
|
2023-01-24 13:17:50 -05:00 |
|
Wes
|
4b9c92c53d
|
Set RITA event.dataset value explicitly
|
2023-01-24 18:00:34 +00:00 |
|
Wes
|
38ead7cb82
|
Remove import tag for now
|
2023-01-24 17:58:19 +00:00 |
|
Wes
|
44d149b1c3
|
Allow imported data to use a tag of 'import'
|
2023-01-24 17:01:52 +00:00 |
|
Wes
|
1e5377c78a
|
Condense RITA integration policies, add ICS tags, and improve output readability
|
2023-01-24 16:56:20 +00:00 |
|
Jason Ertel
|
b0709e93fa
|
test workflow
|
2023-01-24 10:50:52 -05:00 |
|
Jason Ertel
|
fd7d51a59b
|
Merge pull request #9630 from Security-Onion-Solutions/kilo
Kilo
|
2023-01-24 10:45:12 -05:00 |
|
Jason Ertel
|
0dc5e7e714
|
try paths with wildcard
|
2023-01-24 10:38:59 -05:00 |
|
Jason Ertel
|
62b96c3698
|
rework filter for action
|
2023-01-24 10:31:02 -05:00 |
|
Jason Ertel
|
ec2e923530
|
Add proper spacing between headers and content
|
2023-01-24 10:28:39 -05:00 |
|
Jason Ertel
|
2bffd9b473
|
Merge pull request #9628 from Security-Onion-Solutions/kilo
try paths filter on both even though docs only mention support for push
|
2023-01-24 10:27:30 -05:00 |
|
Jason Ertel
|
cfc232eafa
|
try paths filter on both even though docs only mention support for push
|
2023-01-24 10:23:42 -05:00 |
|
weslambert
|
7e0e5071d9
|
Merge pull request #9627 from Security-Onion-Solutions/fix/elastic_agent_integration_improvements
Elastic Agent Integration Improvements
|
2023-01-24 10:10:01 -05:00 |
|
Mike Reeves
|
2da30f42d4
|
Check for Ubuntu
|
2023-01-24 10:07:32 -05:00 |
|
Wes
|
7b4d8a47f0
|
Add copyright header to 'so-elastic-fleet-*' scripts
|
2023-01-24 15:07:00 +00:00 |
|
Josh Patterson
|
095ca29aca
|
Merge pull request #9626 from Security-Onion-Solutions/2.4/firewall
change MASTER to MANAGER in so-minion
|
2023-01-24 09:46:17 -05:00 |
|
Wes
|
f19cf75311
|
Change how event.dataset is determined for Suricata events
|
2023-01-24 14:45:00 +00:00 |
|
m0duspwnens
|
ee98e0684e
|
change MASTER to MANAGER
|
2023-01-24 09:44:01 -05:00 |
|
Josh Patterson
|
b797e356b4
|
Merge pull request #9624 from Security-Onion-Solutions/2.4/firewall
remove filebeat and redis(commented out) from telegraf config
|
2023-01-24 09:01:59 -05:00 |
|
m0duspwnens
|
88107fe0df
|
remove filebeat and redis(commented out) from telegraf config
|
2023-01-24 08:59:51 -05:00 |
|
Wes
|
51692ac66c
|
Update index pattern in various template definitions to match new data stream naming convention
|
2023-01-23 21:52:44 +00:00 |
|
Wes
|
40c6b380df
|
Update Import and Zeek integration policies; also update Zeek ingest node pipelines to set event.dataset.
|
2023-01-23 21:44:46 +00:00 |
|
Wes
|
d342f3c4b8
|
Add 'so-elastic-fleet-integration-policy-bulk-delete' to perform bulk deletion of integration policies
|
2023-01-23 21:38:13 +00:00 |
|
Josh Patterson
|
a503632f30
|
Merge pull request #9620 from Security-Onion-Solutions/2.4/firewall
2.4/firewall
|
2023-01-23 15:56:53 -05:00 |
|
m0duspwnens
|
d1ec7c8ace
|
remove to match with 2.4/dev
|
2023-01-23 15:50:53 -05:00 |
|
Jason Ertel
|
5da1b03d9b
|
Merge pull request #9619 from Security-Onion-Solutions/kilo
switch MySQL 8 to use native password for playbook compat; fix so-verify mail inspection
|
2023-01-23 15:14:00 -05:00 |
|
Jason Ertel
|
5a016312f6
|
switch MySQL 8 to use native password to avoid playbook incompatibility
|
2023-01-23 14:53:39 -05:00 |
|
m0duspwnens
|
90a224793e
|
merge with 2.4dev and fix conflict
|
2023-01-23 14:49:32 -05:00 |
|
m0duspwnens
|
22fbb953ea
|
create cronjob to run highstate after setup
|
2023-01-23 14:46:26 -05:00 |
|
Jason Ertel
|
d421aa82a2
|
do not treat all installs as ISO; fix check for non-empty mail files
|
2023-01-23 14:04:26 -05:00 |
|
Josh Patterson
|
1039e77550
|
Merge pull request #9617 from Security-Onion-Solutions/2.4/firewall
allow elastic agent on sensors to connect to managers
|
2023-01-23 13:19:49 -05:00 |
|
Mike Reeves
|
f077b5c96d
|
Remove 18.04
|
2023-01-23 13:11:50 -05:00 |
|