  Josh BrowerandGitHub
|
f2ab2354fd
|
Merge pull request #15894 from Security-Onion-Solutions/3/nginx-fix
Tweak for nginx upgrade
|
2026-05-14 23:20:57 +02:00 |
|
|
Josh Brower
|
024fece607
|
Tweak for nginx upgrade
|
2026-05-14 17:08:57 -04:00 |
|
|
Josh BrowerandGitHub
|
b328820c01
|
Merge pull request #15792 from Security-Onion-Solutions/3/strelkalnk
Fix module name
|
2026-05-14 13:06:26 +02:00 |
|
|
Josh BrowerandGitHub
|
d6d90d84cd
|
Merge pull request #15880 from Security-Onion-Solutions/feature/import-overrides
Initial commit
|
2026-05-12 17:00:44 +02:00 |
|
|
Josh Brower
|
125610ed42
|
Additional test coverage
|
2026-05-12 10:11:22 -04:00 |
|
|
Josh Brower
|
306b0af4d0
|
Initial commit
|
2026-05-12 09:55:06 -04:00 |
|
|
Josh BrowerandGitHub
|
006ac31109
|
Merge pull request #15579 from marcopedrinazzi/3/dev
New Sigma rules pipeline mapping for M365 and Fortigate
|
2026-05-11 21:03:53 +02:00 |
|
|
Josh BrowerandGitHub
|
49a643fff4
|
Merge pull request #15875 from Security-Onion-Solutions/3/sigma-fp-os
proc_creation per OS type
|
2026-05-08 15:13:14 +02:00 |
|
|
Josh Brower
|
e1d830da76
|
proc_creation per OS type
|
2026-05-08 09:11:24 -04:00 |
|
|
Josh BrowerandGitHub
|
e847c46129
|
Merge pull request #15872 from Security-Onion-Solutions/3/soc-logs
cleanup status code
|
2026-05-07 19:01:24 +02:00 |
|
|
Josh Brower
|
499f7102bd
|
cleanup status code
|
2026-05-07 11:27:49 -04:00 |
|
|
Josh BrowerandGitHub
|
affede7f0a
|
Rename 'ScanLNK' to 'ScanLnk' in YAML config
|
2026-04-20 10:01:10 -04:00 |
|
|
Josh BrowerandGitHub
|
97366c0496
|
Rename 'ScanLNK' to 'ScanLnk' in defaults.yaml
|
2026-04-20 10:00:29 -04:00 |
|
|
Josh BrowerandGitHub
|
0707507412
|
Merge pull request #15694 from Security-Onion-Solutions/fixpath
Remove hardcoded index
|
2026-03-30 12:47:55 -04:00 |
|
|
Josh Brower
|
c7e865aa1c
|
Remove hardcoded index
|
2026-03-30 12:42:48 -04:00 |
|
|
Josh BrowerandGitHub
|
a89db79854
|
Merge pull request #15691 from Security-Onion-Solutions/jertel/wip
revisit workflows
|
2026-03-27 16:24:30 -04:00 |
|
|
Josh BrowerandGitHub
|
115ca2c41d
|
Merge pull request #15672 from Security-Onion-Solutions/yaracomments
update yara template
|
2026-03-24 15:59:48 -04:00 |
|
|
Josh Brower
|
9e53bd3f2d
|
update yara template
|
2026-03-24 15:56:26 -04:00 |
|
|
Josh BrowerandGitHub
|
d4f1078f84
|
Merge pull request #15669 from Security-Onion-Solutions/lowercasefix
Lowercase network transport
|
2026-03-24 11:30:13 -04:00 |
|
|
Josh Brower
|
1f9bf45b66
|
Lowercase network transport
|
2026-03-24 11:24:59 -04:00 |
|
|
Josh BrowerandGitHub
|
c6978f9037
|
Merge pull request #15663 from Security-Onion-Solutions/fix/idh-skins
Remove hardcoded path
|
2026-03-23 16:30:51 -04:00 |
|
|
Josh Brower
|
7300513636
|
Remove hardcoded path
|
2026-03-23 16:26:56 -04:00 |
|
|
Josh BrowerandGitHub
|
a4fcf4ddf2
|
Merge pull request #15656 from Security-Onion-Solutions/zeek-websocket
Add support for websockets
|
2026-03-23 08:21:08 -04:00 |
|
|
Josh Brower
|
165e69cd11
|
Add support for websockets
|
2026-03-23 07:52:36 -04:00 |
|
|
Josh BrowerandGitHub
|
0738208627
|
Merge pull request #15572 from Security-Onion-Solutions/fix/suricatatest
Update so-suricata-testrule for idstools removal
|
2026-03-10 11:19:36 -04:00 |
|
|
Josh Brower
|
a3720219d8
|
add missing cp
|
2026-03-10 11:11:11 -04:00 |
|
|
Josh Brower
|
385726b87c
|
update paths
|
2026-03-10 11:09:56 -04:00 |
|
|
Josh BrowerandGitHub
|
17e3a4bf21
|
Merge pull request #15536 from Security-Onion-Solutions/idstools-cleanup
Move rm to post
|
2026-02-27 08:39:50 -05:00 |
|
|
DefensiveDepth
|
2284283b17
|
Move rm to post
|
2026-02-27 08:35:28 -05:00 |
|
|
Josh BrowerandGitHub
|
dfed3681df
|
Merge pull request #15531 from Security-Onion-Solutions/idstools-cleanup
Cleanup idstools
|
2026-02-26 10:21:18 -05:00 |
|
|
DefensiveDepth
|
55e984df4c
|
readonly deprecated setting
|
2026-02-26 10:12:23 -05:00 |
|
|
DefensiveDepth
|
5e7b0cfe0e
|
Cleanup idstools
|
2026-02-26 09:05:54 -05:00 |
|
|
DefensiveDepth
|
f9edfd6391
|
Add trailing nl if it doesnt already exist
|
2025-12-14 12:03:44 -05:00 |
|
|
Josh BrowerandGitHub
|
c6d52b5eb1
|
Merge pull request #15303 from Security-Onion-Solutions/idstools-refactor
Add Airgap check
|
2025-12-12 09:59:19 -05:00 |
|
|
DefensiveDepth
|
7cac528389
|
Add Airgap check
|
2025-12-12 09:52:01 -05:00 |
|
|
Josh BrowerandGitHub
|
6fe817ca4a
|
Merge pull request #15301 from Security-Onion-Solutions/idstools-refactor
Rework backup
|
2025-12-11 13:57:25 -05:00 |
|
|
DefensiveDepth
|
cb9a6fac25
|
Update tests for rework
|
2025-12-11 12:14:37 -05:00 |
|
|
DefensiveDepth
|
a945768251
|
Refactor backup
|
2025-12-11 11:15:30 -05:00 |
|
|
Josh BrowerandGitHub
|
04d6cca204
|
Merge pull request #15298 from Security-Onion-Solutions/idstools-refactor
Fixup logic
|
2025-12-10 17:18:59 -05:00 |
|
|
DefensiveDepth
|
5ab6bda639
|
Fixup logic
|
2025-12-10 17:16:35 -05:00 |
|
|
Josh BrowerandGitHub
|
f433de7e12
|
Merge pull request #15297 from Security-Onion-Solutions/idstools-refactor
small fixes
|
2025-12-10 15:23:12 -05:00 |
|
|
DefensiveDepth
|
8ef6c2f91d
|
small fixes
|
2025-12-10 15:19:44 -05:00 |
|
|
Josh BrowerandGitHub
|
ddcd74ffd2
|
Merge pull request #15292 from Security-Onion-Solutions/idstools-refactor
Fix custom name
|
2025-12-09 10:12:41 -05:00 |
|
|
DefensiveDepth
|
e105bd12e6
|
Fix custom name
|
2025-12-09 09:49:27 -05:00 |
|
|
Josh BrowerandGitHub
|
f5688175b6
|
Merge pull request #15290 from Security-Onion-Solutions/idstools-refactor
match correct custom ruleset name
|
2025-12-08 18:25:46 -05:00 |
|
|
DefensiveDepth
|
72a4ba405f
|
match correct custom ruleset name
|
2025-12-08 16:45:40 -05:00 |
|
|
Josh BrowerandGitHub
|
ba49765312
|
Merge pull request #15287 from Security-Onion-Solutions/idstools-refactor
Rework ordering
|
2025-12-08 12:42:48 -05:00 |
|
|
DefensiveDepth
|
72c8c2371e
|
Rework ordering
|
2025-12-08 12:39:30 -05:00 |
|
|
Josh BrowerandGitHub
|
80411ab6cf
|
Merge pull request #15286 from Security-Onion-Solutions/idstools-refactor
be more verbose
|
2025-12-08 10:31:39 -05:00 |
|
|
DefensiveDepth
|
0ff8fa57e7
|
be more verbose
|
2025-12-08 10:29:24 -05:00 |
|
|
Josh BrowerandGitHub
|
411f28a049
|
Merge pull request #15284 from Security-Onion-Solutions/idstools-refactor
Make sure local salt dir is created
|
2025-12-07 17:49:56 -05:00 |
|
|
DefensiveDepth
|
0f42233092
|
Make sure local salt dir is created
|
2025-12-07 16:13:55 -05:00 |
|
|
Josh BrowerandGitHub
|
2dd49f6d9b
|
Merge pull request #15283 from Security-Onion-Solutions/idstools-refactor
Fixup Airgap
|
2025-12-06 16:06:57 -05:00 |
|
|
DefensiveDepth
|
271f545f4f
|
Fixup Airgap
|
2025-12-06 15:26:44 -05:00 |
|
|
Josh BrowerandGitHub
|
c4a70b540e
|
Merge pull request #15232 from Security-Onion-Solutions/idstools-refactor
Idstools refactor
|
2025-12-05 12:58:10 -05:00 |
|
|
DefensiveDepth
|
bef85772e3
|
Merge branch 'idstools-refactor' of https://github.com/Security-Onion-Solutions/securityonion into idstools-refactor
|
2025-12-05 12:17:06 -05:00 |
|
|
DefensiveDepth
|
a6b19c4a6c
|
Remove idstools config from manager pillar file
|
2025-12-05 12:13:05 -05:00 |
|
|
Josh BrowerandGitHub
|
44f5e6659b
|
Merge branch '2.4/dev' into idstools-refactor
|
2025-12-05 10:30:54 -05:00 |
|
|
DefensiveDepth
|
3f9a9b7019
|
tweak threshold
|
2025-12-05 10:23:24 -05:00 |
|
|
DefensiveDepth
|
b7ad985c7a
|
Add cron.abset
|
2025-12-05 09:48:46 -05:00 |
|
|
Josh BrowerandGitHub
|
dba087ae25
|
Update version from 2.4.0-delta to 2.4.200
|
2025-12-05 09:43:31 -05:00 |
|
|
DefensiveDepth
|
9304513ce8
|
Add support for suricata rules load status
|
2025-12-04 12:26:13 -05:00 |
|
|
DefensiveDepth
|
f15a39c153
|
Add historical hashes
|
2025-12-03 11:24:04 -05:00 |
|
|
Josh BrowerandGitHub
|
822c411e83
|
Update version to 2.4.0-delta
|
2025-12-02 21:24:24 -05:00 |
|
|
DefensiveDepth
|
41b3ac7554
|
Backup salt master config
|
2025-12-02 19:58:56 -05:00 |
|
|
DefensiveDepth
|
23575fdf6c
|
edit actual file
|
2025-12-02 19:19:57 -05:00 |
|
|
DefensiveDepth
|
52f70dc49a
|
Cleanup idstools
|
2025-12-02 17:40:30 -05:00 |
|
|
DefensiveDepth
|
79c9749ff7
|
Merge remote-tracking branch 'origin/2.4/dev' into idstools-refactor
|
2025-12-02 17:40:04 -05:00 |
|
|
DefensiveDepth
|
8abd4c9c78
|
Remove idstools files
|
2025-12-02 12:42:15 -05:00 |
|
|
DefensiveDepth
|
c372cd533d
|
Merge remote-tracking branch 'origin/2.4/dev' into idstools-refactor
|
2025-12-01 16:10:22 -05:00 |
|
|
DefensiveDepth
|
999f83ce57
|
Create dir earlier
|
2025-12-01 14:21:58 -05:00 |
|
|
DefensiveDepth
|
bda83a47a2
|
Remove header
|
2025-11-29 17:45:22 -05:00 |
|
|
DefensiveDepth
|
e96cfd35f7
|
Refactor for simplicity
|
2025-11-29 17:00:51 -05:00 |
|
|
DefensiveDepth
|
65c96b2edf
|
Add error handling
|
2025-11-29 16:27:22 -05:00 |
|
|
DefensiveDepth
|
87477ae4f6
|
Removed uneeded bind
|
2025-11-29 15:40:10 -05:00 |
|
|
DefensiveDepth
|
89a9106d79
|
Add context
|
2025-11-29 15:17:28 -05:00 |
|
|
DefensiveDepth
|
1284150382
|
Move to manager init
|
2025-11-27 08:39:19 -05:00 |
|
|
DefensiveDepth
|
4bb0a7c9d9
|
Merge remote-tracking branch 'origin/2.4/dev' into idstools-refactor
|
2025-11-25 13:52:21 -05:00 |
|
|
DefensiveDepth
|
ced3af818c
|
Refactor for Airgap
|
2025-11-25 13:51:50 -05:00 |
|
|
DefensiveDepth
|
148ef7ef21
|
add default ruleset
|
2025-11-18 11:57:30 -05:00 |
|
|
DefensiveDepth
|
1b55642c86
|
Refactor rules location
|
2025-11-18 09:58:14 -05:00 |
|
|
DefensiveDepth
|
af7f7d0728
|
Fix file paths
|
2025-11-17 12:00:08 -05:00 |
|
|
DefensiveDepth
|
431e5abf89
|
Extract ETPRO key if found
|
2025-11-14 09:39:33 -05:00 |
|
|
DefensiveDepth
|
f047677d8a
|
Check correct files
|
2025-11-14 09:03:08 -05:00 |
|
|
DefensiveDepth
|
b2606b6094
|
fix perms
|
2025-11-13 14:10:51 -05:00 |
|
|
DefensiveDepth
|
37b3fd9b7b
|
add detections backup
|
2025-11-13 10:41:12 -05:00 |
|
|
DefensiveDepth
|
573dded921
|
refactor to hash
|
2025-11-13 09:25:20 -05:00 |
|
|
DefensiveDepth
|
81d7c313af
|
remove dupe
|
2025-11-12 11:11:01 -05:00 |
|
|
DefensiveDepth
|
9a6ff75793
|
Merge remote-tracking branch 'origin/2.4/dev' into idstools-refactor
|
2025-11-12 08:51:51 -05:00 |
|
|
DefensiveDepth
|
1f24796eba
|
Fix ETPRO check
|
2025-11-12 08:48:47 -05:00 |
|
|
DefensiveDepth
|
55bbbdb58d
|
idstools removal refactor
|
2025-11-11 14:34:28 -05:00 |
|
|
DefensiveDepth
|
3a8a6bf5ff
|
idstools removal refactor
|
2025-11-11 14:12:51 -05:00 |
|
|
DefensiveDepth
|
13789bc56f
|
idstools removal refactor
|
2025-11-11 13:45:37 -05:00 |
|
|
DefensiveDepth
|
11518f6eea
|
idstools removal refactor
|
2025-11-11 13:41:32 -05:00 |
|
|
DefensiveDepth
|
2f6fb717c1
|
Merge remote-tracking branch 'origin/2.4/dev' into idstools-refactor
|
2025-11-06 10:38:37 -05:00 |
|
|
DefensiveDepth
|
ded520c2c1
|
Merge remote-tracking branch 'origin/2.4/dev' into idstools-refactor
|
2025-09-17 10:42:43 -04:00 |
|
|
DefensiveDepth
|
a77157391c
|
remove idstools
|
2025-09-17 10:42:05 -04:00 |
|
|
Josh BrowerandGitHub
|
d89df5f0dd
|
Merge pull request #15025 from Security-Onion-Solutions/2.4/fixes
Parsing fix
|
2025-09-12 13:44:03 -04:00 |
|
|
DefensiveDepth
|
f0c1922600
|
Support endpoint logs with no host.ip field
|
2025-09-12 13:31:34 -04:00 |
|
|
DefensiveDepth
|
ab2cdd18ed
|
Support endpoint logs with no host.ip field
|
2025-09-12 13:29:43 -04:00 |
|