Jason Ertel
|
8f36a8a4b6
|
Merge pull request #12514 from Security-Onion-Solutions/jertel/annotations
detections annotations
|
2024-03-06 11:10:21 -05:00 |
|
Jason Ertel
|
1cbac11fae
|
detections annotations
|
2024-03-06 11:08:03 -05:00 |
|
Mike Reeves
|
ad12093429
|
Fix percent calc
|
2024-03-06 11:05:06 -05:00 |
|
Jason Ertel
|
167aff24f6
|
detections annotations
|
2024-03-06 11:03:52 -05:00 |
|
Josh Brower
|
9e671621db
|
Merge pull request #12510 from Security-Onion-Solutions/2.4/excludedetections
Add Exclusion toggle
|
2024-03-06 10:56:29 -05:00 |
|
Mike Reeves
|
4dfa1a5626
|
Move Suricata around
|
2024-03-06 10:35:10 -05:00 |
|
Mike Reeves
|
f836d6a61d
|
Update so-minion
|
2024-03-06 10:06:17 -05:00 |
|
Mike Reeves
|
a63fca727c
|
Update soc_suricata.yaml
|
2024-03-06 10:02:06 -05:00 |
|
Mike Reeves
|
f58c104d89
|
Update so-minion
|
2024-03-06 09:51:56 -05:00 |
|
Jason Ertel
|
5acefb5d18
|
Merge pull request #12511 from Security-Onion-Solutions/jertel/annotations
PCAP annotations
|
2024-03-06 08:40:24 -05:00 |
|
Jason Ertel
|
0f12297f50
|
add new pcap annotations
|
2024-03-06 08:19:42 -05:00 |
|
Jason Ertel
|
12653eec8c
|
add new pcap annotations
|
2024-03-06 08:14:33 -05:00 |
|
Josh Brower
|
1b47537a3f
|
Add Exclusion toggle
|
2024-03-06 07:16:50 -05:00 |
|
Josh Patterson
|
73b45cfaf8
|
Merge pull request #12508 from Security-Onion-Solutions/jppsensoroni
fix pcapspace function
|
2024-03-05 17:53:28 -05:00 |
|
Josh Patterson
|
eaef076eba
|
Update so-minion
|
2024-03-05 17:52:24 -05:00 |
|
Josh Patterson
|
ac9db8a392
|
Merge branch '2.4/dev' into jppsensoroni
|
2024-03-05 17:51:32 -05:00 |
|
m0duspwnens
|
5687fdcf57
|
fix pcapspace function
|
2024-03-05 17:46:43 -05:00 |
|
Jason Ertel
|
d5b08142a0
|
Merge pull request #12507 from Security-Onion-Solutions/jertel/annotations
fix oinkcodes with leading zeros
|
2024-03-05 16:44:56 -05:00 |
|
Jason Ertel
|
4b5f00cef4
|
fix oinkcodes with leading zeros
|
2024-03-05 16:42:20 -05:00 |
|
weslambert
|
185a160df0
|
Merge pull request #12500 from Security-Onion-Solutions/feature/additional_integrations_5
Additional Integrations #5
|
2024-03-05 16:12:05 -05:00 |
|
Mike Reeves
|
b9707fc8ea
|
Merge pull request #12502 from Security-Onion-Solutions/TOoSmOotH-patch-5
Update so-minion
|
2024-03-05 15:10:02 -05:00 |
|
Mike Reeves
|
a686d46322
|
Update so-minion
|
2024-03-05 15:09:02 -05:00 |
|
Mike Reeves
|
6eb608c3f5
|
Update so-minion
|
2024-03-05 15:05:03 -05:00 |
|
weslambert
|
b9ebe6c40b
|
Update VERSION
|
2024-03-05 12:58:34 -05:00 |
|
Josh Patterson
|
781f96a74e
|
Merge pull request #12497 from Security-Onion-Solutions/jppsensoroni
fix sensoroni for non sensor
|
2024-03-05 10:36:12 -05:00 |
|
m0duspwnens
|
c0d19e11b9
|
fix } placement
|
2024-03-05 10:07:32 -05:00 |
|
m0duspwnens
|
1a58aa61a0
|
only import pcap and suricata if sensor
|
2024-03-05 09:54:40 -05:00 |
|
m0duspwnens
|
08f2b8251b
|
add GLOBALS.is_sensor
|
2024-03-05 09:53:35 -05:00 |
|
weslambert
|
bed42208b1
|
Add journald integration
|
2024-03-05 09:49:55 -05:00 |
|
weslambert
|
2a7e5b096f
|
Change version for foxtrot
|
2024-03-05 09:48:59 -05:00 |
|
weslambert
|
d8e8933ea0
|
Add AWS Security Hub template
|
2024-03-05 09:25:41 -05:00 |
|
weslambert
|
d85ac39e28
|
Add AWS Inspector template
|
2024-03-05 09:23:17 -05:00 |
|
weslambert
|
1514f1291e
|
Add AWS GuardDuty template
|
2024-03-05 09:21:48 -05:00 |
|
weslambert
|
b64d61065a
|
Add AWS Cloudfront template
|
2024-03-05 09:19:43 -05:00 |
|
Mike Reeves
|
58d222284e
|
Merge pull request #12271 from Security-Onion-Solutions/suripcap
Suricata PCAP
|
2024-03-04 17:27:38 -05:00 |
|
Mike Reeves
|
fe238755e9
|
Fix df
|
2024-03-04 16:52:51 -05:00 |
|
Mike Reeves
|
018e099111
|
Modify setup
|
2024-03-04 14:53:15 -05:00 |
|
Josh Brower
|
9fd1653914
|
Merge pull request #12487 from Security-Onion-Solutions/2.4/elastic-agent-fim
Fix FIM
|
2024-03-04 07:41:36 -05:00 |
|
Josh Brower
|
f28f269bb1
|
Fix FIM
|
2024-03-04 07:38:32 -05:00 |
|
Josh Brower
|
f3dce66f03
|
Merge pull request #12482 from Security-Onion-Solutions/2.4/sigma-pipeline
2.4/sigma pipeline
|
2024-03-01 15:29:13 -05:00 |
|
Josh Brower
|
d832158cc5
|
Drop Hashes field
|
2024-03-01 15:26:02 -05:00 |
|
Josh Brower
|
b017157d21
|
Add antivirus mapping
|
2024-03-01 14:04:56 -05:00 |
|
Jorge Reyes
|
d911b7bfc4
|
Merge pull request #12469 from Security-Onion-Solutions/reyesj2-patch-4
FIX: EA installers not downloadable from SOC & fix logging
|
2024-02-29 16:21:44 -05:00 |
|
reyesj2
|
53761d4dba
|
FIX: EA installers not downloadable from SOC + fix stg logging
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-02-29 16:15:26 -05:00 |
|
Mike Reeves
|
1fe8f3d9e4
|
Merge pull request #12405 from Security-Onion-Solutions/repochange
Manage the repo files
|
2024-02-29 14:01:48 -05:00 |
|
Josh Brower
|
aa3b917368
|
Merge pull request #12456 from Security-Onion-Solutions/feature/detections-airgap
Feature/detections airgap
|
2024-02-28 09:41:13 -05:00 |
|
Josh Brower
|
e2dd0f8cf1
|
Only update rule files if AG
|
2024-02-28 09:39:23 -05:00 |
|
weslambert
|
d1e55d5ab7
|
Merge pull request #12450 from Security-Onion-Solutions/fix/suricata_max_age
Roll Suricata logs daily to prevent alerts from being deleted when not meeting size threshold
|
2024-02-27 17:28:07 -05:00 |
|
weslambert
|
df3943b465
|
Daily rollover
|
2024-02-27 17:24:27 -05:00 |
|
Josh Patterson
|
d5fc6ddd2c
|
Merge pull request #12449 from Security-Onion-Solutions/issue/12391
Issue/12391
|
2024-02-27 15:38:33 -05:00 |
|