10113 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
weslambert	3e6dfcfaca	Merge pull request #7996 from Security-Onion-Solutions/weslambert-patch-2 ... Create Virustotal README	2022-05-23 11:43:43 -04:00
weslambert	a6f1bf3aef	Create Virustotal README	2022-05-23 11:39:44 -04:00
Jason Ertel	88f17f037e	Merge pull request #7982 from Security-Onion-Solutions/kilo ... Upgrade to Kratos 0.9.0-alpha.3	2022-05-19 13:28:58 -04:00
Jason Ertel	c20859f8c3	Upgrade to Kratos 0.9.0-alpha.3	2022-05-18 17:05:21 -04:00
Jason Ertel	c95bafd521	Merge pull request #7969 from Security-Onion-Solutions/fix/helpers-analyzers ... Only import yaml module when config is loaded	2022-05-18 07:15:32 -04:00
Wes Lambert	429ccb2dcc	Only import yaml module when config is loaded	2022-05-18 02:07:39 +00:00
weslambert	94ca3ddbda	Merge pull request #7961 from Security-Onion-Solutions/weslambert-patch-1 ... Add information for MHR and WhoisLookup, and other minor updates	2022-05-17 13:33:24 -04:00
weslambert	d3206a048f	Add information for MHR and WhoisLookup, and other minor updates	2022-05-17 12:49:16 -04:00
weslambert	ff855eb8f7	Merge pull request #7958 from Security-Onion-Solutions/feature/mhr_analyzer ... Add Team Cymru Malware Hash Registry Analyzer	2022-05-17 12:42:01 -04:00
Wes Lambert	8af1f19ac3	Another no_results change	2022-05-17 16:12:43 +00:00
Wes Lambert	e4a7e3cba6	Change 'No results found.' to 'no_results'	2022-05-17 16:11:58 +00:00
weslambert	2688083ff1	Merge pull request #7959 from Security-Onion-Solutions/feature/whoislookup-analyzer ... Add Whoislookup RDAP-based analyzer	2022-05-17 12:09:06 -04:00
Wes Lambert	766e9748c5	Add Whoislookup RDAP-based analyzer	2022-05-17 15:52:12 +00:00
weslambert	3761b491c0	Remove whitespace	2022-05-17 10:50:33 -04:00
Wes Lambert	e8fc3ccdf4	Add Team Cymru Malware Hash Registry Analyzer	2022-05-17 14:44:53 +00:00
Doug Burks	eb9597217c	Merge pull request #7949 from Security-Onion-Solutions/fix/dashboards-hunt-queries ... update dashboards.queries.json and hunt.queries.json	2022-05-16 08:47:06 -04:00
doug	5cbb50a781	update dashboards.queries.json and hunt.queries.json	2022-05-16 08:33:48 -04:00
Jason Ertel	685789de33	Merge pull request #7936 from Security-Onion-Solutions/kilo ... Improved unit test coverage of new analyzers; Utilize localized summa…	2022-05-12 16:47:18 -04:00
Jason Ertel	b45b6b198b	Improved unit test coverage of new analyzers; Utilize localized summaries; Require 100% code coverage on analyzers	2022-05-12 16:32:47 -04:00
weslambert	6c506bbab0	Merge pull request #7935 from Security-Onion-Solutions/fix/pulsedive ... Fix Pulsedive analyzer logic	2022-05-12 15:20:15 -04:00
Wes Lambert	3dc266cfa9	Add test for when indicator is not found	2022-05-12 19:02:41 +00:00
Wes Lambert	a233c08830	Update logic to handle indicators that are not present in database.	2022-05-12 19:02:02 +00:00
Doug Burks	58b049257d	Merge pull request #7932 from Security-Onion-Solutions/dougburks-patch-1 ... remove duplicate showSubtitle from hunt.queries.json	2022-05-12 09:24:18 -04:00
Doug Burks	6ed3f42449	remove duplicate showSubtitle from hunt.queries.json	2022-05-12 09:23:00 -04:00
Jason Ertel	60b55acd6f	Merge pull request #7926 from Security-Onion-Solutions/kilo ... Add support for analyzers in airgapped environments	2022-05-10 17:12:18 -04:00
Jason Ertel	35e47c8c3e	Add support for analyzers in airgapped environments	2022-05-10 16:51:00 -04:00
weslambert	7f797a11f8	Merge pull request #7924 from Security-Onion-Solutions/analyzer-docs ... Update analyzer docs with information about analyzers that require au…	2022-05-10 09:40:50 -04:00
Jason Ertel	91a7f25d3a	Corrected brand name capitalization	2022-05-10 09:39:19 -04:00
weslambert	34d57c386b	Update analyzer docs with information about analyzers that require authentication	2022-05-10 09:32:18 -04:00
weslambert	000e813fbb	Merge pull request #7921 from Security-Onion-Solutions/fix/analyzer-packages ... Update analyzer packages to those downloaded by Alpine and add additional build script option	2022-05-09 16:43:31 -04:00
Wes Lambert	555ca2e277	Update analyzer build/testing script to download necessary Python packages	2022-05-09 20:06:39 +00:00
Wes Lambert	32adba6141	Update analyzer packages with those built from native (Alpine) Docker image	2022-05-09 20:04:41 +00:00
Jason Ertel	e19635e44a	Merge pull request #7920 from Security-Onion-Solutions/kilo ... Disable MRU queries on dashboards	2022-05-09 15:08:55 -04:00
Jason Ertel	31c04aabdd	Disable MRU queries on dashboards	2022-05-09 15:06:43 -04:00
Jason Ertel	dc209a37cd	Merge pull request #7916 from Security-Onion-Solutions/kilo ... Disable actions on dashboards group-by tables	2022-05-09 11:52:22 -04:00
Jason Ertel	3f35dc54d2	Disable actions on dashboards group-by tables	2022-05-09 11:44:39 -04:00
Jason Ertel	0e64a9e5c3	Merge pull request #7912 from Security-Onion-Solutions/kilo ... Add dashboard ref to soc.json	2022-05-06 15:18:05 -04:00
Jason Ertel	0786191fc9	Add dashboard ref to soc.json	2022-05-06 15:16:27 -04:00
Jason Ertel	60763c38db	Merge pull request #7911 from Security-Onion-Solutions/kilo ... Analyzers + Dashboards	2022-05-06 13:50:54 -04:00
weslambert	9800f59ed7	Add Urlscan to observable support matrix	2022-05-06 13:11:43 -04:00
Wes Lambert	ccac71f649	Fix formatting/whitespace	2022-05-06 17:08:40 +00:00
Wes Lambert	1990ba0cf0	Fix formatting/whitespace	2022-05-06 17:08:33 +00:00
Wes Lambert	8ff5778569	Add Urlscan analyzer and tests	2022-05-06 17:01:06 +00:00
Jason Ertel	bee4cf4c52	Fix typo in analyzer desc	2022-05-06 09:20:03 -04:00
Jason Ertel	105c95909c	Dashboard queries	2022-05-04 19:32:06 -04:00
Jason Ertel	890bcd58f9	Merge branch 'dev' into kilo	2022-05-04 19:25:08 -04:00
weslambert	a96c665d04	Change test name for EmailRep	2022-05-03 14:13:25 -04:00
weslambert	f3a91d9fcd	Add EmailRep analyzer to observable support matrix	2022-05-03 10:10:57 -04:00
Wes Lambert	5a9acb3857	Add EmailRep analyzer and tests	2022-05-03 14:06:32 +00:00
Wes Lambert	8b5666b238	Ensure API key is used	2022-05-03 12:48:06 +00:00