5b3ca98b80
Fix JA4+ license link in soc_zeek.yaml
...
Updated the license link in the JA4+ fingerprinting description.
2026-04-06 10:12:37 -04:00
3b269e8b82
Merge remote-tracking branch 'origin/3/dev' into delta
2026-03-19 15:14:06 -04:00
d3938b61d2
ja4plus nest enabled under ja4plus key for defaults
2026-03-19 12:39:37 -04:00
c2c5aea244
ensure bool sliders for each state:enabled annotation
2026-03-19 12:35:38 -04:00
83b7fecbbc
ja4plus cleanup
2026-03-19 11:12:24 -04:00
d227cf71c8
ja4plus cleanup
2026-03-19 11:01:40 -04:00
930985b770
update helpLink references for new documentation
2026-03-18 09:46:45 -04:00
6809497730
Add SOC UI toggle for JA4+ fingerprinting in Zeek
...
JA4 (BSD licensed) remains always enabled, but JA4+ variants (JA4S,
JA4D, JA4H, JA4L, JA4SSH, JA4T, JA4TS, JA4X) require a FoxIO license
and are now toggleable via the SOC UI. The toggle includes a license
agreement warning and defaults to disabled.
2026-03-17 09:35:31 -04:00
6b8e2e2643
Add Filters
2025-10-01 19:58:07 -04:00
af6245f19d
add zeek file_extraction forcedType for instances where a single line is speciifed
2025-03-17 14:30:17 -05:00
0566f46d5b
Clarify enabled settings
2024-09-16 10:41:01 -04:00
217bb388a0
Clarify enabled settings
2024-09-16 10:05:17 -04:00
66563a4da0
zeek networks will only ever have one HOME_NETWORKS setting
2024-05-01 09:31:11 -04:00
d0e140cf7b
zeek networks will only ever have one HOME_NETWORKS setting
2024-05-01 09:30:52 -04:00
87c6d0a820
zeek networks will only ever have one HOME_NETWORKS setting
2024-05-01 09:29:36 -04:00
84db82852c
annotation updates for custom settings
2024-04-30 15:14:56 -04:00
d57f773072
Fix regex to allow ipv6 in bpfs
2024-03-27 09:36:42 -04:00
09e005127e
Update soc_zeek.yaml
2023-06-02 07:41:55 -04:00
2bb77251b0
Move Elastic Fleet logging exclusions to the Fleet pillar
2023-05-31 13:38:58 +00:00
36791665f3
Merge pull request #10462 from Security-Onion-Solutions/feature/elastic_agent_zeek_logging
...
Dynamic integration configuration and Zeek log exclusions for Elastic Agent
2023-05-30 19:27:13 -04:00
e5117a343d
Change description
2023-05-30 17:10:17 +00:00
e910f04beb
Add default description and Zeek log exclusions for Elastic Fleet
2023-05-30 03:10:52 +00:00
8ce0d76287
Zeek Annotations
2023-05-25 12:12:18 -04:00
743bbfea35
add zeek.enabled to zeek annotation file
2023-05-05 17:09:01 -04:00
57d90a62f7
Update soc_zeek.yaml
2023-04-27 16:21:41 -04:00
2589670755
set forceType
2023-04-06 15:16:04 -04:00
1be86cdf8e
issue 10050 and issue 10062
2023-03-29 17:21:40 -04:00
fee5a7bea9
initial quick OCD pass
2022-09-23 16:29:55 -04:00
e1ea3c2031
soc for zeek
2022-09-20 16:22:54 -04:00
958d2494a8
Zeek Test
2022-09-16 10:27:42 -04:00
2a51ecb1ac
Zeek Test
2022-09-16 09:10:09 -04:00
f02db7a815
Zeek Test
2022-09-16 09:05:16 -04:00
9ca2e6e871
Add more logging to setup process
2022-09-12 14:20:59 -04:00
2bd9dd80e2
Move In Day
2022-09-07 09:06:25 -04:00
Mike Reeves
Josh Patterson
Mike Reeves
Doug Burks
reyesj2
Jason Ertel
Wes
bryant-treacle
doug