 Josh BrowerandGitHub
|
3f13f8deae
|
Merge pull request #14543 from Security-Onion-Solutions/2.4/kratos_identity
Support Kratos user.name lookup
|
2025-04-17 16:13:58 -04:00 |
|
Josh Brower
|
5fd7bf311d
|
Add fallback
|
2025-04-15 13:57:55 -04:00 |
|
Josh Brower
|
152fdaa7bb
|
Support Kratos user.name lookup
|
2025-04-15 11:40:43 -04:00 |
|
 Josh BrowerandGitHub
|
240484deea
|
Merge pull request #14537 from Security-Onion-Solutions/2.4/idstoolsfix
Run so-rule-update when it changes
|
2025-04-14 11:20:32 -04:00 |
|
Josh Brower
|
ceabb673e0
|
Refactor for so-rule-update
|
2025-04-14 11:08:35 -04:00 |
|
Josh Brower
|
00029e6f83
|
Run so-rule-update when it changes
|
2025-04-14 08:04:46 -04:00 |
|
 Josh BrowerandGitHub
|
2a43a6f37e
|
Merge pull request #14532 from Security-Onion-Solutions/2.4/saltlogs
Fix comma
|
2025-04-11 07:51:35 -04:00 |
|
Josh Brower
|
4cdfb6e3eb
|
Fix comma
|
2025-04-11 07:49:35 -04:00 |
|
 Josh BrowerandGitHub
|
1edd13523c
|
Merge pull request #14530 from Security-Onion-Solutions/fix/detections
Change timeout to 1s
|
2025-04-11 07:47:38 -04:00 |
|
 Josh BrowerandGitHub
|
4217e23272
|
Merge pull request #14531 from Security-Onion-Solutions/2.4/saltlogs
Extract log level and drop INFO level
|
2025-04-11 07:47:25 -04:00 |
|
Josh Brower
|
f94c81a041
|
Extract log level and drop INFO level
|
2025-04-11 07:45:12 -04:00 |
|
Josh Brower
|
4c3518385b
|
Change timeout to 1s
|
2025-04-11 07:37:09 -04:00 |
|
 Josh BrowerandGitHub
|
14c95a5fe0
|
Merge pull request #14432 from Security-Onion-Solutions/jbfix
Remove pcapoutdir
|
2025-03-22 07:13:44 -04:00 |
|
Josh Brower
|
d0bb86a24f
|
Remove pcapoutdir
|
2025-03-22 07:12:19 -04:00 |
|
 Josh BrowerandGitHub
|
6081c46d7f
|
Merge pull request #14362 from Security-Onion-Solutions/reyesj2-patch-2
fix osquery action_data mapping conflict
|
2025-03-08 10:18:12 -05:00 |
|
 Josh BrowerandGitHub
|
ac841077c2
|
Merge pull request #14281 from Security-Onion-Solutions/2.4/patch3
Remove old defend json
|
2025-02-23 15:03:05 -05:00 |
|
Josh Brower
|
6d0350793d
|
Remove old defend json
|
2025-02-23 14:02:17 -05:00 |
|
 Josh BrowerandGitHub
|
79574b31b0
|
Merge pull request #14275 from Security-Onion-Solutions/2.4/patch
Dont upgrade integrations during pre-phase
|
2025-02-21 09:37:34 -05:00 |
|
Josh Brower
|
22f3865602
|
Dont upgrade integrations during pre-phase
|
2025-02-21 09:32:36 -05:00 |
|
 Josh BrowerandGitHub
|
41147ae7f3
|
Merge pull request #14265 from Security-Onion-Solutions/2.4/elasticfix
Update Elastic Defend JSON
|
2025-02-19 16:22:28 -05:00 |
|
Josh Brower
|
c6d72d31cb
|
Update Elastic Defend JSON
|
2025-02-19 16:16:38 -05:00 |
|
 Josh BrowerandGitHub
|
12a2b491c3
|
Merge pull request #14190 from Security-Onion-Solutions/2.4/fixmsi
Refresh Agent installers
|
2025-02-05 10:22:17 -05:00 |
|
Joshua Brower
|
4636a8d9b1
|
Refresh Agent installers
|
2025-02-05 09:38:33 -05:00 |
|
 Josh BrowerandGitHub
|
abbb0db1ff
|
Merge pull request #14189 from Security-Onion-Solutions/2.4/fixmsi
Rework for MSI
|
2025-02-05 09:35:37 -05:00 |
|
Joshua Brower
|
95fe212202
|
Rework for MSI
|
2025-02-05 09:29:45 -05:00 |
|
 Josh BrowerandGitHub
|
7a0309cdf4
|
Merge pull request #14179 from Security-Onion-Solutions/2.4/fixilmpolicy
Fix ip-mappings ILM
|
2025-02-03 09:35:55 -05:00 |
|
Joshua Brower
|
b874619f0d
|
Fix ip-mappings ILM
|
2025-02-03 09:31:08 -05:00 |
|
Joshua Brower
|
49ab0751c0
|
Remove uneeded import
|
2025-01-27 15:01:21 -05:00 |
|
Joshua Brower
|
e994f3a220
|
Fix commits
|
2025-01-27 14:48:50 -05:00 |
|
Josh Brower
|
97a3f130c8
|
Update Elastic
|
2025-01-23 15:32:39 -05:00 |
|
Josh Brower
|
9738ef382c
|
Upgrade Elastic to 8.17.1
|
2025-01-23 08:12:02 -05:00 |
|
 Josh BrowerandGitHub
|
5ec2006c9e
|
Merge pull request #14102 from Security-Onion-Solutions/2.4/nav-airgap
Fix folder perm
|
2025-01-10 16:20:18 -05:00 |
|
Joshua Brower
|
dcdf31eee8
|
Fix folder perm
|
2025-01-10 16:15:17 -05:00 |
|
 Josh BrowerandGitHub
|
2de1f0464f
|
Merge pull request #14091 from Security-Onion-Solutions/2.4/nav-airgap
Refactor Navigator Airgap
|
2025-01-09 11:59:50 -05:00 |
|
Joshua Brower
|
bcb92b63e3
|
Move json files to container image
|
2025-01-09 10:58:40 -05:00 |
|
 Josh BrowerandGitHub
|
71f4150c27
|
Merge pull request #14013 from Security-Onion-Solutions/2.4/navigator
Refactor Navigator for Detections
|
2025-01-07 13:34:19 -05:00 |
|
Joshua Brower
|
a2caf7425d
|
Add config options
|
2025-01-07 13:22:14 -05:00 |
|
Joshua Brower
|
6fa11a38ef
|
Update defaults
|
2025-01-07 13:14:50 -05:00 |
|
Joshua Brower
|
e3f75215b6
|
Merge remote-tracking branch 'origin/2.4/dev' into 2.4/navigator
|
2025-01-07 13:06:49 -05:00 |
|
Josh Brower
|
8408a53b82
|
Merge remote-tracking branch 'origin/2.4/dev' into 2.4/navigator
|
2025-01-02 16:13:34 -05:00 |
|
 Josh BrowerandGitHub
|
8f5634d958
|
Merge pull request #14048 from Security-Onion-Solutions/2.4/sigmaHashes
Refactor pipeline for hash changes
|
2024-12-23 15:49:35 -05:00 |
|
defensivedepth
|
7237b8971e
|
Refactor pipeline for hash changes
|
2024-12-23 15:41:13 -05:00 |
|
 Josh BrowerandGitHub
|
c6ebebc4d0
|
Merge pull request #14033 from Security-Onion-Solutions/patchfix
Delete uneeded files
|
2024-12-17 16:05:13 -05:00 |
|
defensivedepth
|
17405b849a
|
Delete uneeded files
|
2024-12-17 16:01:31 -05:00 |
|
defensivedepth
|
9475211417
|
Refactor Navigator for Detections
|
2024-12-09 16:31:51 -05:00 |
|
 Josh BrowerandGitHub
|
726bdd8735
|
Merge pull request #13995 from Security-Onion-Solutions/feature/msi
fix path
|
2024-12-02 14:49:22 -05:00 |
|
defensivedepth
|
5b9f6b2d52
|
fix path
|
2024-12-02 14:42:56 -05:00 |
|
 Josh BrowerandGitHub
|
aabff98bea
|
Merge pull request #13989 from Security-Onion-Solutions/feature/msi
Generate MSI
|
2024-12-02 09:17:45 -05:00 |
|
defensivedepth
|
aade3db80d
|
Generate MSI
|
2024-11-28 07:00:23 -05:00 |
|
 Josh BrowerandGitHub
|
04ffdf9b15
|
Merge pull request #13958 from Security-Onion-Solutions/2.4/autoenablesigma
More flexibility for AutoEnable Sigma rules
|
2024-11-21 09:47:49 -05:00 |
|
defensivedepth
|
f61bf1bd67
|
Remove adv
|
2024-11-21 09:15:29 -05:00 |
|
defensivedepth
|
b1c4e32123
|
Remove duplicate option
|
2024-11-21 09:11:44 -05:00 |
|
defensivedepth
|
8958da83b3
|
Deprecate instead
|
2024-11-20 18:00:26 -05:00 |
|
defensivedepth
|
3fcf197bc1
|
Tweak structure
|
2024-11-19 11:54:15 -05:00 |
|
defensivedepth
|
56d6857cd6
|
Addl customization for autoenable sigma
|
2024-11-18 09:03:17 -05:00 |
|
 Josh BrowerandGitHub
|
f7c3957a43
|
Merge pull request #13920 from Security-Onion-Solutions/2.4/templaterepos
Fix permissions
|
2024-11-08 15:34:56 -05:00 |
|
defensivedepth
|
dcbb0e48d4
|
make sure its owned by socore
|
2024-11-08 14:34:29 -05:00 |
|
defensivedepth
|
74b95a0bcc
|
Merge remote-tracking branch 'origin/2.4/dev' into 2.4/templaterepos
|
2024-11-08 09:20:11 -05:00 |
|
defensivedepth
|
8b70aa9f0e
|
Fix socore permissions
|
2024-11-08 09:19:41 -05:00 |
|
 Josh BrowerandGitHub
|
47f9b0021c
|
Merge pull request #13879 from Security-Onion-Solutions/2.4/templaterepos
Add local custom template
|
2024-11-07 15:40:36 -05:00 |
|
defensivedepth
|
f5bd8ab585
|
Rewrite docs
|
2024-11-07 15:33:47 -05:00 |
|
defensivedepth
|
28d468dd41
|
Merge remote-tracking branch 'origin/2.4/dev' into 2.4/templaterepos
|
2024-11-07 07:25:01 -05:00 |
|
 Josh BrowerandGitHub
|
6ab05e7c05
|
Merge pull request #13890 from Security-Onion-Solutions/2.4/templatefix
timestamp fix
|
2024-10-31 10:59:45 -04:00 |
|
defensivedepth
|
7896f951f3
|
timestamp fix
|
2024-10-31 10:24:58 -04:00 |
|
 Josh BrowerandGitHub
|
01932d873f
|
Merge pull request #13883 from Security-Onion-Solutions/2.4/lookuprev2
2.4/lookuprev2
|
2024-10-31 08:46:01 -04:00 |
|
 Josh BrowerandGitHub
|
84a8477c5d
|
Merge pull request #13887 from Security-Onion-Solutions/2.4/soupedite
rm eaintegration state file
|
2024-10-30 17:15:07 -04:00 |
|
defensivedepth
|
6b468eaed3
|
rm eaintegration state file
|
2024-10-30 16:52:44 -04:00 |
|
defensivedepth
|
c509dab5f1
|
Use socore user
|
2024-10-30 11:03:14 -04:00 |
|
 Josh BrowerandGitHub
|
1940901386
|
Merge pull request #13882 from Security-Onion-Solutions/ipmappingses
add so-ip-mappings index
|
2024-10-30 10:28:40 -04:00 |
|
defensivedepth
|
5406a263d5
|
Add local custom template
|
2024-10-29 19:42:06 -04:00 |
|
 Josh BrowerandGitHub
|
ac359839e2
|
Merge pull request #13877 from Security-Onion-Solutions/2.4/lookuprev2
Initial support for local lookup
|
2024-10-29 11:22:39 -04:00 |
|
defensivedepth
|
4c5099d429
|
Initial support for local lookup
|
2024-10-29 10:27:54 -04:00 |
|
 Josh BrowerandGitHub
|
6a3e5415cf
|
Merge pull request #13832 from Security-Onion-Solutions/2.4/sigmapipelines
Add process and file creation mappings
|
2024-10-28 18:30:21 -04:00 |
|
defensivedepth
|
f3ca5b1c42
|
Remove OS-specific mappings
|
2024-10-28 09:19:51 -04:00 |
|
defensivedepth
|
dcdfaf66f4
|
Add process and file creation mappings
|
2024-10-16 15:20:52 -04:00 |
|
 Josh BrowerandGitHub
|
8521123d19
|
Merge pull request #13745 from Security-Onion-Solutions/2.4/agfix
Move Airgap later in setup
|
2024-09-26 15:51:31 -04:00 |
|
defensivedepth
|
3567dfc0dc
|
Move Airgap later in setup
|
2024-09-26 15:48:50 -04:00 |
|
 Josh BrowerandGitHub
|
500811d5ea
|
Merge pull request #13743 from Security-Onion-Solutions/2.4/agfix
Fix path
|
2024-09-26 09:50:16 -04:00 |
|
defensivedepth
|
d86694a01c
|
Fix path
|
2024-09-26 09:48:28 -04:00 |
|
 Josh BrowerandGitHub
|
421120024a
|
Merge pull request #13740 from Security-Onion-Solutions/2.4/agfix
Fix location for airgap
|
2024-09-26 08:54:58 -04:00 |
|
defensivedepth
|
fe860481c5
|
Fix location for airgap
|
2024-09-26 08:52:53 -04:00 |
|
 Josh BrowerandGitHub
|
8af086c2a1
|
Merge pull request #13737 from Security-Onion-Solutions/2.4/summaries
Change summaries branch
|
2024-09-25 15:41:59 -04:00 |
|
defensivedepth
|
778d5be407
|
Change summaries branch
|
2024-09-25 15:35:08 -04:00 |
|
 Josh BrowerandGitHub
|
31d8593c8e
|
Merge pull request #13733 from Security-Onion-Solutions/2.4/sigma-airgapfix
Add so repo back in
|
2024-09-25 10:23:11 -04:00 |
|
defensivedepth
|
445a9679bd
|
Add so repo back in
|
2024-09-25 10:18:57 -04:00 |
|
 Josh BrowerandGitHub
|
b24c7fbf93
|
Merge pull request #13729 from Security-Onion-Solutions/2.4/temp-summaries-branch
Use temp summaries branch
|
2024-09-24 17:17:00 -04:00 |
|
defensivedepth
|
48aff374a3
|
Use temp summaries branch
|
2024-09-24 15:37:43 -04:00 |
|
 Josh BrowerandGitHub
|
0ff9153d1a
|
Merge pull request #13727 from Security-Onion-Solutions/2.4/filter-tweaks
Disable by default & Airgap
|
2024-09-24 13:06:41 -04:00 |
|
defensivedepth
|
d2397c3c1c
|
Refactor cron logic
|
2024-09-24 13:03:51 -04:00 |
|
defensivedepth
|
0a74a53254
|
Remove cron if disabled
|
2024-09-24 12:38:49 -04:00 |
|
defensivedepth
|
01f87218de
|
Airgap support
|
2024-09-24 12:04:24 -04:00 |
|
defensivedepth
|
5286739414
|
Disable by default
|
2024-09-24 10:51:52 -04:00 |
|
 Josh BrowerandGitHub
|
da3be8d8be
|
Merge pull request #13709 from Security-Onion-Solutions/2.4/defend-filters
Initial Support for managing Elastic Defend Filters
|
2024-09-23 17:00:10 -04:00 |
|
defensivedepth
|
5cc8198302
|
Fix permissions
|
2024-09-23 16:32:42 -04:00 |
|
defensivedepth
|
2a890a35a0
|
Update format
|
2024-09-23 13:48:12 -04:00 |
|
defensivedepth
|
219cb5e044
|
Merge remote-tracking branch 'origin/2.4/dev' into 2.4/defend-filters
|
2024-09-23 13:03:32 -04:00 |
|
defensivedepth
|
ef003ffbb5
|
Refactor
|
2024-09-23 12:55:07 -04:00 |
|
defensivedepth
|
074cc8e6ff
|
Initial commit
|
2024-09-20 11:58:21 -04:00 |
|
 Josh BrowerandGitHub
|
7311773c20
|
Merge pull request #13598 from Security-Onion-Solutions/2.4/main
Hotfix-2.4.100.20240903
|
2024-09-03 13:13:16 -04:00 |
|
 Josh BrowerandGitHub
|
5472d2586c
|
Merge pull request #13596 from Security-Onion-Solutions/hotfix/2.4.100
Hotfix 2.4.100
|
2024-09-03 13:07:49 -04:00 |
|