CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-07-14 04:43:09 +02:00
Code Issues Packages Projects Releases Wiki Activity
18,205 Commits 40 Branches 127 Tags
52791204e46c656a8d7fcc94de5ac7e9c61d55de
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Doug BurksandGitHub 668fe10fc0 Merge pull request #9552 from Security-Onion-Solutions/fix/import-unnecessary-processes 
Prevent unnecessary processes in Import Mode
 2023-01-11 08:07:40 -05:00
Doug BurksandGitHub c15db73561 Avoid unnecessary Zeek processes in Import Mode 2023-01-10 16:48:47 -05:00
Doug BurksandGitHub 554754421c Avoid unecessary Suricata processes in Import Mode 2023-01-10 16:48:06 -05:00
Doug BurksandGitHub 322efa304a Avoid unnecessary processes in Import Mode 2023-01-10 16:47:18 -05:00
Doug BurksandGitHub c3a5a02010 Merge pull request #9529 from Security-Onion-Solutions/dougburks-patch-1 
Add missing Zeek log to filebeat defaults.yaml
 2023-01-06 14:34:02 -05:00
Doug BurksandGitHub c1dfb9f935 Add missing Zeek log to filebeat defaults.yaml 2023-01-06 14:27:40 -05:00
Doug BurksandGitHub 54e554eb3b Merge pull request #9528 from Security-Onion-Solutions/dougburks-patch-1 
Remove line numbers from vi
 2023-01-06 14:25:19 -05:00
Doug BurksandGitHub 10e82c5f1c Remove line numbers from vi 2023-01-06 14:23:54 -05:00
Doug BurksandGitHub 723362e685 Merge pull request #9514 from Security-Onion-Solutions/fix/jinja-whitespace-2.4 
fix jinja whitespace 2.4
 2023-01-04 13:56:24 -05:00
doug 7ba4bdd87b fix jinja whitespace 2023-01-04 13:50:25 -05:00
Doug BurksandGitHub 4c1fc4c679 Merge pull request #9511 from Security-Onion-Solutions/fix/sysmon-fields-2.4 
Improve default sysmon fields and add new network_connection fields
 2023-01-04 07:58:16 -05:00
Doug BurksandGitHub 5754365c6d Improve default sysmon fields and add new network_connection fields 2023-01-04 07:42:24 -05:00
Doug BurksandGitHub 3c91d842f5 Merge pull request #9499 from Security-Onion-Solutions/fix/sysmon-parsing-2.4 
FIX: Sysmon logs are missing event.category and event.dataset #8194
 2023-01-03 09:05:55 -05:00
doug 4e5d1d587e update sysmon ingest parser and Sysmon File dashboard 2023-01-03 09:02:17 -05:00
Doug BurksandGitHub f335e7e477 Merge pull request #9466 from Security-Onion-Solutions/2.4/fix-grafana-playbook-links 
Remove Grafana and Playbook links for Import mode
 2022-12-22 16:09:46 -05:00
Doug BurksandGitHub 5be074bbea Remove Grafana and Playbook links for Import mode 2022-12-22 15:45:25 -05:00
Doug BurksandGitHub b02ba7edf7 Merge pull request #9463 from Security-Onion-Solutions/2.4/fix-grafana-eval 
Enable Grafana in EVAL mode
 2022-12-22 13:30:54 -05:00
Doug BurksandGitHub 2df4755fef Enable Grafana in EVAL mode 2022-12-22 12:54:57 -05:00
Doug BurksandGitHub f1d31a0c41 Merge pull request #9459 from Security-Onion-Solutions/2.4/fix-influxdb-telegraf 
Make influxdb and telegraf consistent across import and eval modes
 2022-12-22 10:26:36 -05:00
Doug BurksandGitHub e95034886e add influxdb and telegraf to import mode 2022-12-22 09:49:57 -05:00
Doug BurksandGitHub 9352854fe4 enable influxdb for eval and import modes 2022-12-22 09:48:38 -05:00
Doug BurksandGitHub 75e16963c8 add influxdb and telegraf to import mode 2022-12-22 09:47:47 -05:00
Doug BurksandGitHub dfd5947051 add influxdb and telegraf to import mode 2022-12-22 09:46:27 -05:00
Doug BurksandGitHub f99279ca24 Merge pull request #9453 from Security-Onion-Solutions/feature/improve-dashboards-2.4 
FEATURE: Improve SOC Dashboards #9450 2.4
 2022-12-21 15:46:11 -05:00
Doug BurksandGitHub 69415a0d8d Improve Strelka dashboard 2022-12-21 15:34:35 -05:00
Doug BurksandGitHub 506556f0d2 Improve Firewall dashboard 2022-12-21 15:29:09 -05:00
Doug BurksandGitHub d7b2c88201 Improve Software dashboard 2022-12-21 15:24:58 -05:00
Doug BurksandGitHub 4519c533a2 Improve Intel dashboard 2022-12-21 15:20:27 -05:00
Doug BurksandGitHub 3a367d69f4 Improve FTP dashboard 2022-12-21 14:37:17 -05:00
Doug BurksandGitHub a4f1f75306 Improve NIDS Alerts dashboard 2022-12-21 14:33:01 -05:00
Doug BurksandGitHub 3d1ce4ef10 Improve SOC dashboards 2022-12-21 13:26:04 -05:00
Doug BurksandGitHub 03f682dbec Merge pull request #9439 from Security-Onion-Solutions/2.4/remove-old-whiptail 
Remove whiptail_network_init_notice
 2022-12-20 11:16:24 -05:00
Doug BurksandGitHub 1371c4d01f remove whiptail_network_init_notice from so-whiptail 2022-12-20 10:46:14 -05:00
Doug BurksandGitHub 388e0a08ae remove old whiptail reference from so-functions 2022-12-20 10:45:30 -05:00
Doug BurksandGitHub 6487e6e1f0 remove old whiptail reference from so-setup 2022-12-20 10:44:37 -05:00
Doug BurksandGitHub d4c54ce161 Merge pull request #9438 from Security-Onion-Solutions/dougburks-patch-1 
so-status should ignore commented entries in so-status.conf
 2022-12-20 09:16:21 -05:00
Doug BurksandGitHub 894434715b so-status should ignore commented entries in so-status.conf 
Import mode comments out so-steno, so-suricata, and so-zeek in so-status.conf, so so-status should ignore these lines.
 2022-12-20 09:05:07 -05:00
Doug BurksandGitHub 86fc0e11b0 Merge pull request #9436 from Security-Onion-Solutions/2.4/improve-import 
Import mode does not need Elastic Fleet or Playbook
 2022-12-20 07:32:24 -05:00
Doug BurksandGitHub 69811b4d74 Import mode does not need Elastic Fleet or Playbook 2022-12-20 06:46:01 -05:00
Doug BurksandGitHub 316d2cd9a5 Merge pull request #9435 from Security-Onion-Solutions/2.4/fix-import 
Fix Import Mode in 2.4
 2022-12-20 06:13:37 -05:00
doug cd55be2f83 move IMPORT to top of list 2022-12-19 16:58:43 -05:00
doug 9d8951ceb8 fix import 2022-12-19 16:55:16 -05:00
Doug BurksandGitHub 7168c4f91a fix import in so-setup 2022-12-19 16:48:35 -05:00
Doug BurksandGitHub cf884c68a7 Merge pull request #9433 from Security-Onion-Solutions/dougburks-patch-1 
Remove another hardcoded docs URL
 2022-12-19 13:16:42 -05:00
Doug BurksandGitHub 0494efaea0 remove temporary message 2022-12-19 13:15:02 -05:00
Doug BurksandGitHub d7b47814dc Merge pull request #9432 from Security-Onion-Solutions/2.4/refactor-docs-url 
2.4: Refactor docs URL
 2022-12-19 10:43:22 -05:00
Doug BurksandGitHub df1b564d17 Replace hardcoded URL in so-analyst-install with new $DOC_BASE_URL variable from so-common 2022-12-19 10:30:29 -05:00
Doug BurksandGitHub 73f2789c95 Replace hardcoded URLs in soup with new $DOC_BASE_URL variable from so-common 2022-12-19 10:28:20 -05:00
Doug BurksandGitHub a28f804f7f Replace hardcoded URLs with new $DOC_BASE_URL variable from so-common 2022-12-19 10:24:03 -05:00
Doug BurksandGitHub 042693895a add new DOC_BASE_URL variable to so-common 2022-12-19 10:21:54 -05:00
Doug BurksandGitHub c25a828dd2 Merge pull request #9417 from Security-Onion-Solutions/2.4/eval 
Fix EVAL mode in 2.4
 2022-12-16 16:39:46 -05:00
Doug BurksandGitHub 0fa6ca3880 init.sls needs to import GLOBALS 2022-12-16 15:59:17 -05:00
Doug BurksandGitHub 490e97b49f Merge pull request #9415 from Security-Onion-Solutions/2.4/dev 
2.4/dev
 2022-12-16 15:07:39 -05:00
Doug BurksandGitHub 4384b83b65 Merge pull request #9412 from Security-Onion-Solutions/dougburks-patch-1 
fix telegraf_pillar
 2022-12-16 13:51:32 -05:00
Doug BurksandGitHub 9c4d441b4d fix telegraf_pillar 2022-12-16 13:36:26 -05:00
doug b9e51fc7cf first round of fixes for eval mode 2022-12-16 13:24:02 -05:00
Doug BurksandGitHub 93056e802f remove old comment 2022-12-16 13:17:27 -05:00
Doug BurksandGitHub 61c976f8a6 Merge pull request #9384 from Security-Onion-Solutions/2.4/streamline-setup 
miscellaneous improvements for 2.4
 2022-12-13 13:43:31 -05:00
Doug BurksandGitHub 07df9ad0e0 FIX: so-import utilities should hyperlink to dashboards #9373 2022-12-13 13:30:38 -05:00
Doug BurksandGitHub ca3c99ac99 FIX: so-import utilities should hyperlink to dashboards #9373 2022-12-13 13:29:59 -05:00
doug 6eedae601f improve welcome screen 2022-12-13 12:35:43 -05:00
doug d58579d916 improve grammar 2022-12-13 12:05:02 -05:00
doug 0072cc42db add extra newline 2022-12-13 11:34:29 -05:00
doug 0f84f419b2 fix sizing 2022-12-13 11:31:12 -05:00
doug d3a8bdff52 setup improvements 2022-12-13 11:20:00 -05:00
Doug BurksandGitHub f94eb243e4 Merge pull request #9367 from Security-Onion-Solutions/dougburks-patch-1 
Upgrade to Elastic 8.5.3
 2022-12-13 10:14:41 -05:00
Doug BurksandGitHub 3dd4e31f49 Upgrade to Elastic 8.5.3 in config_saved_objects.ndjson 2022-12-13 10:07:52 -05:00
Doug BurksandGitHub 2004184b72 Upgrade to Elastic 8.5.3 in so-kibana-config-load 2022-12-13 10:06:23 -05:00
Doug BurksandGitHub ed8bf884eb Merge pull request #9355 from Security-Onion-Solutions/fix/2.4-ics 
Fix ICS and other issues in 2.4
 2022-12-12 09:18:14 -05:00
Doug BurksandGitHub e1d200e6ce Remove duplicate TDS dashboard from defaults.yaml 2022-12-11 14:39:08 -05:00
Doug BurksandGitHub 72f71ba695 Fix TDS dashboard in defaults.yaml 2022-12-11 14:36:27 -05:00
Doug BurksandGitHub be75062612 Update so-import-pcap 2022-12-10 15:17:02 -05:00
Doug BurksandGitHub da8e098655 update so-import-evtx 2022-12-10 15:16:32 -05:00
Doug BurksandGitHub cb16bd36fb fix descriptions in defaults.yaml 2022-12-10 14:31:59 -05:00
Doug BurksandGitHub cf7d8076e9 remove old Wazuh Hunt queries in defaults.yaml 2022-12-10 14:21:58 -05:00
Doug BurksandGitHub cd664b2d39 remove old Modbus dashboard from defaults.yaml 2022-12-10 14:16:39 -05:00
Doug BurksandGitHub 7f07a94a98 remove old DNP3 and Wazuh dashboards from defaults.yaml 2022-12-10 14:14:24 -05:00
Doug BurksandGitHub 8a0f94f8df increase window width to accommodate extra text in so-whiptail 2022-12-10 11:24:11 -05:00
Doug BurksandGitHub 66ad10cf77 fix airgap text in so-whiptail 2022-12-10 10:41:30 -05:00
Doug BurksandGitHub de2427cabe add -p option to mkdir in so-elastic-fleet-setup 2022-12-10 08:20:38 -05:00
Doug BurksandGitHub 187ca4c453 Update soc defaults.yaml to include dnp3_control and dnp3_objects eventfields 2022-12-10 07:33:09 -05:00
Doug BurksandGitHub c4ea39d1ba Merge pull request #9349 from Security-Onion-Solutions/fix/2.4-ics 
2.4: Fix multiple ICS issues and keep import indices open as in 2.3
 2022-12-09 15:09:49 -05:00
doug c2e10a4359 remove duplicate import iteration from so-functions 2022-12-09 11:00:06 -05:00
doug 90093395b6 keep so-import indices open as in 2.3 2022-12-09 10:23:09 -05:00
doug 565ca4e94f keep so-import indices open as in 2.3 2022-12-09 08:49:25 -05:00
doug 5c00ab7b7f correct order in defaults.yaml 2022-12-08 16:50:34 -05:00
doug 07a4919cd3 remove old opcua files 2022-12-08 16:43:11 -05:00
doug 7cfb688890 update defaults.yaml 2022-12-08 16:32:04 -05:00
Doug BurksandGitHub cf53242cf8 Merge pull request #9334 from Security-Onion-Solutions/dougburks-patch-1 
update wording in so-whiptail
 2022-12-08 10:43:22 -05:00
Doug BurksandGitHub c01486b009 update wording in so-whiptail 2022-12-08 10:32:03 -05:00
Doug BurksandGitHub 6e1e6e15e8 Merge pull request #9186 from Security-Onion-Solutions/dougburks-patch-2 
Add ICS/SCADA logs to filebeat defaults.yaml
 2022-11-21 13:30:35 -05:00
Doug BurksandGitHub febb781428 Add ICS/SCADA logs to filebeat defaults.yaml 2022-11-21 12:10:55 -05:00
Doug BurksandGitHub 5a0fe6050b Merge pull request #9179 from Security-Onion-Solutions/dougburks-patch-2 
Simplify version in README.md to just 2.4
 2022-11-21 08:46:33 -05:00
Doug BurksandGitHub 778ee4b00f Simplify version in README.md to just 2.4 2022-11-21 08:39:18 -05:00
Doug BurksandGitHub a2da8e5e08 Merge pull request #9129 from Security-Onion-Solutions/dougburks-patch-1 
fix descriptions in files related to analyzers
 2022-11-12 19:26:34 +00:00
Doug BurksandGitHub 632464335f fix descriptions in files related to analyzers 2022-11-12 13:14:02 -05:00
Doug BurksandGitHub f77db78219 fix descriptions in files related to analyzers 2022-11-12 13:13:30 -05:00
Doug BurksandGitHub 2f4ce91678 fix descriptions in files related to analyzers 2022-11-12 13:12:58 -05:00
Doug BurksandGitHub 154dff98de fix descriptions in files related to analyzers 2022-11-12 13:12:23 -05:00
Doug BurksandGitHub a15ca3cc49 fix descriptions in files related to analyzers 2022-11-12 13:11:38 -05:00