CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-07-19 23:33:47 +02:00
Code Issues Packages Projects Releases Wiki Activity
18,205 Commits 45 Branches 127 Tags
52791204e46c656a8d7fcc94de5ac7e9c61d55de
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Doug BurksandGitHub f19bdd7aae Merge pull request #15883 from Security-Onion-Solutions/reyesj2/transformhealth 
use temp files to prevent jq arg too long
 2026-05-12 15:36:12 -04:00
Doug BurksandGitHub 066918e27d Merge pull request #15634 from Security-Onion-Solutions/dougburks-3dev 
update helpLink references for new documentation
 2026-03-18 10:01:43 -04:00
Doug Burks 930985b770 update helpLink references for new documentation 2026-03-18 09:46:45 -04:00
Doug BurksandGitHub 92213e302f Merge pull request #15603 from Security-Onion-Solutions/dougburks-patch-1 
Remove version 3.0.0 from 2.4 discussion template
 2026-03-13 10:53:24 -04:00
Doug BurksandGitHub 72193b0249 Remove version 3.0.0 from 2.4 discussion template 2026-03-13 10:51:25 -04:00
Doug BurksandGitHub 589de8e361 Update discussion template by removing unsupported options 
Removed unsupported network installation options for Red Hat, Ubuntu, and Debian.
 2026-03-13 10:48:15 -04:00
Doug BurksandGitHub 914cd8b611 Add discussion template for Security Onion 3.0 2026-03-12 13:52:41 -04:00
Doug BurksandGitHub 845290595e Delete .github/DISCUSSION_TEMPLATE/3.0.yml 2026-03-12 13:52:14 -04:00
Doug BurksandGitHub 544b60d111 Add discussion template for version 3.0 2026-03-12 13:51:27 -04:00
Doug BurksandGitHub c1d85493df Merge pull request #15045 from Security-Onion-Solutions/dougburks-patch-1 
Update 2-4.yml
 2025-09-17 14:23:23 -04:00
Doug BurksandGitHub e01d0f81ea Update 2-4.yml 2025-09-17 14:22:40 -04:00
Doug BurksandGitHub d1f4e26e29 Merge pull request #15043 from Security-Onion-Solutions/2.4/dev 
2.4.180
 2025-09-17 14:15:32 -04:00
Doug BurksandGitHub 5166db1caa Merge pull request #15042 from Security-Onion-Solutions/2.4/main 
Merge pull request #14917 from Security-Onion-Solutions/2.4/dev
 2025-09-17 13:13:46 -04:00
Doug BurksandGitHub ff5ad586af Merge pull request #15040 from Security-Onion-Solutions/dougburks-patch-1 
2.4.180
 2025-09-17 13:00:26 -04:00
Doug BurksandGitHub 4dae1afe0b Add files via upload 2025-09-17 12:37:29 -04:00
Doug BurksandGitHub 456cad1ada Update DOWNLOAD_AND_VERIFY_ISO.md for 2.4.180 2025-09-17 12:36:55 -04:00
Doug BurksandGitHub f303363a73 Merge pull request #14867 from Security-Onion-Solutions/dougburks-patch-1 
UPGRADE: Zeek Ethercat plugin #14783
 2025-07-22 16:14:55 -04:00
Doug BurksandGitHub 2a166af524 UPGRADE: Zeek Ethercat plugin #14783 2025-07-22 16:10:44 -04:00
Doug BurksandGitHub a037421809 Merge pull request #14845 from Security-Onion-Solutions/dougburks-patch-1 
Simplify UniFi dashboards #14838
 2025-07-16 07:28:45 -04:00
Doug BurksandGitHub 6bb6c24641 Simplify UniFi dashboards #14838 2025-07-16 07:20:39 -04:00
Doug BurksandGitHub 617834a044 Merge pull request #14842 from Security-Onion-Solutions/dougburks-patch-1 
Issues #14836 #14837 #14838
 2025-07-15 08:22:37 -04:00
Doug BurksandGitHub 4f8bd16910 FEATURE: Add SOC Dashboards for CEF, iptables, and UniFi logs #14838 2025-07-14 15:37:10 -04:00
Doug BurksandGitHub ab9d03bc2e FEATURE: Add SOC Dashboards for UniFi logs #14838 2025-07-14 12:21:08 -04:00
Doug BurksandGitHub 10bf3e8fab FEATURE: Add SOC default fields for CEF logs #14837 2025-07-14 12:07:02 -04:00
Doug BurksandGitHub f8108e93d5 FEATURE: Add SOC default fields for iptables logs #14836 2025-07-14 12:04:46 -04:00
Doug BurksandGitHub 773606d876 Merge pull request #14691 from Security-Onion-Solutions/dougburks-patch-1 
add echo to end of so-elasticsearch-ilm-start and so-elasticsearch-ilm-stop
 2025-05-30 12:03:32 -04:00
Doug BurksandGitHub bf38055a6c add echo to end of so-elasticsearch-ilm-stop 2025-05-30 11:41:50 -04:00
Doug BurksandGitHub 90b8d6b2f7 add echo to end of so-elasticsearch-ilm-start 2025-05-30 11:41:11 -04:00
Doug BurksandGitHub 2d78fa1a41 Merge pull request #14689 from Security-Onion-Solutions/dougburks-patch-1 
FIX: so-elasticsearch-ilm-start needs shebang #14688
 2025-05-30 09:58:18 -04:00
Doug BurksandGitHub 45d541d4f2 FIX: so-elasticsearch-ilm-start needs shebang #14688 2025-05-30 09:55:53 -04:00
Doug BurksandGitHub 8d42739030 Merge pull request #14687 from Security-Onion-Solutions/dougburks-patch-1 
FIX: so-suricata-testrule should disable pcap logging #14685
 2025-05-30 09:26:37 -04:00
Doug BurksandGitHub 27358137f2 FIX: so-suricata-testrule should disable pcap logging #14685 2025-05-30 09:24:41 -04:00
Doug BurksandGitHub a54b9ddbe4 Merge pull request #14683 from Security-Onion-Solutions/dougburks-patch-1 
FIX: Improve annotation for Elasticsearch index deletion #14682
 2025-05-29 15:26:35 -04:00
Doug BurksandGitHub 58936b31d5 FIX: Improve annotation for Elasticsearch index deletion #14682 2025-05-29 15:19:21 -04:00
Doug BurksandGitHub 82f9043a14 Merge pull request #14604 from Security-Onion-Solutions/dougburks-patch-1 
Update defaults.yaml to replace remaining instances of identity_id with user.name
 2025-05-08 09:14:03 -04:00
Doug BurksandGitHub a8cb18bb2e Update defaults.yaml to replace remaining instances of identity_id with user.name 2025-05-08 09:09:26 -04:00
Doug BurksandGitHub 3037dc7c38 Update soc_soc.yaml to fix previous change 2025-03-07 07:13:27 -05:00
Doug BurksandGitHub 630140b979 Merge pull request #14354 from Security-Onion-Solutions/dougburks-patch-1 
Update soc_elasticsearch.yaml to include note about ILM rollover
 2025-03-06 12:11:58 -05:00
Doug BurksandGitHub cce94d96d1 Update soc_elasticsearch.yaml to include note about ILM rollover 2025-03-06 11:14:48 -05:00
Doug BurksandGitHub 2f6c7d2643 Merge pull request #14340 from Security-Onion-Solutions/dougburks-patch-1 
FEATURE: Add sankey chart to Elastic Agent API dashboard to show relationship between process.name and process.Ext.api.name #14339
 2025-03-05 08:02:39 -05:00
Doug BurksandGitHub c6c67f4d06 FEATURE: Add sankey chart to Elastic Agent API dashboard to show relationship between process.name and process.Ext.api.name #14339 2025-03-05 06:31:16 -05:00
Doug BurksandGitHub 1c96449ad9 Merge pull request #14327 from Security-Onion-Solutions/dougburks-patch-1 
FIX: Elastic Agent Security Events dashboard should reference user.effective.name #14325
 2025-03-04 07:10:41 -05:00
Doug BurksandGitHub 44535cba8c FIX: Elastic Agent Security Events dashboard should reference user.effective.name #14325 2025-03-04 06:46:56 -05:00
Doug BurksandGitHub 206acbe618 Merge pull request #14312 from Security-Onion-Solutions/dougburks-patch-1 
FIX: SOC Actions for process.entity_id value must be quoted #14311
 2025-03-03 07:09:45 -05:00
Doug BurksandGitHub e53f4fd1f1 Update defaults.yaml to quote the process.entity_id value 2025-03-02 05:54:30 -05:00
Doug BurksandGitHub cee9f66689 Merge pull request #14269 from Security-Onion-Solutions/dougburks-patch-1 
Configure issue template chooser
 2025-02-20 13:29:32 -05:00
Doug BurksandGitHub 5dc9200ee7 Add files via upload 2025-02-20 13:19:22 -05:00
Doug BurksandGitHub 2be5384980 Create config.yml 2025-02-20 13:19:08 -05:00
Doug BurksandGitHub 25dfc182a9 Delete .github/ISSUE_TEMPLATE 2025-02-20 13:18:02 -05:00
Doug BurksandGitHub 14e7e411c0 Merge pull request #14268 from Security-Onion-Solutions/dougburks-patch-1 
Create LICENSE
 2025-02-20 11:13:12 -05:00
Doug BurksandGitHub 7c2118f2f6 Create LICENSE 2025-02-20 11:07:50 -05:00
Doug BurksandGitHub 8033cdbc89 Merge pull request #14253 from Security-Onion-Solutions/dougburks-patch-1 
FIX: Add TLSv1.3 to nginx config #14252
 2025-02-18 11:49:22 -05:00
Doug BurksandGitHub 5c3e28535a FIX: Add TLSv1.3 to nginx config #14252 2025-02-18 11:46:45 -05:00
Doug BurksandGitHub 927b618ec9 Update Zeek QUIC dashboard, add Hunt query, add quic.server.name as column in Events table 2025-01-02 06:57:56 -05:00
Doug BurksandGitHub 2381260a55 Merge pull request #13783 from Security-Onion-Solutions/dougburks-patch-1 
Add 2.4.120 for next release
 2024-10-07 16:06:39 -04:00
Doug BurksandGitHub ba4fbb9953 Update 2-4.yml 2024-10-07 16:05:45 -04:00
Doug BurksandGitHub f319f0803a Merge pull request #13583 from Security-Onion-Solutions/dougburks-patch-1 
Update Github Discussion template
 2024-08-30 11:31:52 -04:00
Doug BurksandGitHub 9eb76a95ca Update 2-4.yml 2024-08-30 11:25:51 -04:00
Doug BurksandGitHub b9040eb0de Merge pull request #13481 from Security-Onion-Solutions/dougburks-patch-1 
Update so-elasticsearch-cluster-space-used for changes in _cat/alloca…
 2024-08-15 08:20:09 -04:00
Doug BurksandGitHub ab63d5dbdb Update so-elasticsearch-cluster-space-used for changes in _cat/allocation API 2024-08-15 08:01:22 -04:00
Doug BurksandGitHub f5603b1274 Merge pull request #13473 from Security-Onion-Solutions/dougburks-patch-1 
Update SECURITY.md
 2024-08-13 08:50:03 -04:00
Doug BurksandGitHub 1d27fcc50e Update SECURITY.md 2024-08-13 08:48:49 -04:00
Doug BurksandGitHub ff14217d38 Merge pull request #13467 from Security-Onion-Solutions/dougburks-patch-1 
FEATURE: Add warning to soup about ssh #13466
 2024-08-12 09:23:28 -04:00
Doug BurksandGitHub 46596f01fa FEATURE: Add warning to soup about ssh #13466 2024-08-12 09:18:29 -04:00
Doug BurksandGitHub c1388a68f0 FEATURE: Add warning to soup about ssh #13466 2024-08-12 09:12:49 -04:00
Doug BurksandGitHub e7b6496f98 Merge pull request #13348 from Security-Onion-Solutions/dougburks-patch-1 
FEATURE: Add new action to SOC Actions list to allow users to more easily add their own actions #13346
 2024-07-15 15:59:49 -04:00
Doug BurksandGitHub 3991c7b5fe FEATURE: Add new action to SOC Actions list to allow users to more easily add their own actions #13346 2024-07-15 15:52:00 -04:00
Doug BurksandGitHub dadb0db8f3 Merge pull request #13321 from Security-Onion-Solutions/dougburks-patch-1 
FIX: Update SOC MOTD #13320
 2024-07-09 12:58:22 -04:00
Doug BurksandGitHub dfd8ac3626 FIX: Update SOC MOTD #13320 2024-07-09 12:55:58 -04:00
Doug BurksandGitHub 32af2d8436 Merge pull request #13318 from Security-Onion-Solutions/dougburks-patch-1 
FIX: Update MOTD #13317
 2024-07-09 10:07:47 -04:00
Doug BurksandGitHub 24e945eee4 FIX: Update MOTD #13317 2024-07-09 10:06:16 -04:00
Doug BurksandGitHub ae0e994461 Merge pull request #13239 from Security-Onion-Solutions/dougburks-patch-1 
Update defaults.yaml to put Process actions in logical order
 2024-06-20 10:12:06 -04:00
Doug BurksandGitHub 07b9011636 Update defaults.yaml to put Process actions in logical order 2024-06-20 10:09:27 -04:00
Doug BurksandGitHub 5f6a9850eb Merge pull request #13227 from Security-Onion-Solutions/dougburks-patch-1 
FEATURE: Add new Process actions #13226
 2024-06-18 10:57:52 -04:00
Doug BurksandGitHub de18bf06c3 FEATURE: Add new Process actions #13226 2024-06-18 10:36:41 -04:00
Doug BurksandGitHub 076da649cf Merge pull request #13217 from Security-Onion-Solutions/dougburks-patch-1 
FEATURE: Add more links and descriptions to SOC MOTD #13216
 2024-06-17 12:18:29 -04:00
Doug BurksandGitHub 93ced0959c FEATURE: Add more links and descriptions to SOC MOTD #13216 2024-06-17 09:25:01 -04:00
Doug BurksandGitHub 6f13fa50bf FEATURE: Add more links and descriptions to SOC MOTD #13216 2024-06-17 09:24:32 -04:00
Doug BurksandGitHub 3bface12e0 FEATURE: Add more links and descriptions to SOC MOTD #13216 2024-06-17 09:23:14 -04:00
Doug BurksandGitHub b584c8e353 FEATURE: Add more links and descriptions to SOC MOTD #13216 2024-06-17 09:13:17 -04:00
Doug BurksandGitHub 6340ebb36d Merge pull request #13197 from Security-Onion-Solutions/dougburks-patch-1 
Update DOWNLOAD_AND_VERIFY_ISO.md
 2024-06-12 16:49:21 -04:00
Doug BurksandGitHub 70721afa51 Update DOWNLOAD_AND_VERIFY_ISO.md 2024-06-12 16:47:26 -04:00
Doug BurksandGitHub 2c4f5f0a91 Merge pull request #13066 from Security-Onion-Solutions/dougburks-patch-1 
Update defaults.yaml to fix order of groupby tables and eliminate dup…
 2024-05-23 06:02:49 -04:00
Doug BurksandGitHub 3d4f3a04a3 Update defaults.yaml to fix order of groupby tables and eliminate duplicate 2024-05-23 05:56:18 -04:00
Doug BurksandGitHub 6172816f61 Merge pull request #13044 from Security-Onion-Solutions/dougburks-patch-1 
Update README.md with new Detections screenshot number
 2024-05-21 06:49:35 -04:00
Doug BurksandGitHub 03826dd32c Update README.md with new Detections screenshot number 2024-05-21 06:43:07 -04:00
Doug BurksandGitHub 27ad84ebd9 Merge pull request #13011 from Security-Onion-Solutions/dougburks-patch-1 
FEATURE: Add NetFlow dashboard #13009
 2024-05-14 10:15:25 -04:00
Doug BurksandGitHub 67645a662d FEATURE: Add NetFlow dashboard #13009 2024-05-14 10:14:16 -04:00
Doug BurksandGitHub 1d16f6b7ed Merge pull request #13010 from Security-Onion-Solutions/dougburks-patch-1 
FEATURE: Add NetFlow dashboard #13009
 2024-05-14 10:02:40 -04:00
Doug BurksandGitHub 5b45c80a62 FEATURE: Add NetFlow dashboard #13009 2024-05-14 10:01:18 -04:00
Doug BurksandGitHub d120326cb9 Merge pull request #12999 from Security-Onion-Solutions/dougburks-patch-1 
FEATURE: Add more fields to the SOC Dashboards URL for so-import-pcap #12972
 2024-05-13 09:20:01 -04:00
Doug BurksandGitHub a4f2d8f327 Merge pull request #12998 from Security-Onion-Solutions/dougburks-patch-2 
Update README.md to reference new screenshots for 2.4.70
 2024-05-13 08:42:33 -04:00
Doug BurksandGitHub ae323cf385 Update README.md to include new Detections screenshot 2024-05-13 08:34:44 -04:00
Doug BurksandGitHub 788c31014d Update README.md to reference new screenshots for 2.4.70 2024-05-13 08:30:48 -04:00
Doug BurksandGitHub cec75ba475 Merge pull request #12989 from Security-Onion-Solutions/dougburks-patch-2 
FIX: so-index-list typo #12988
 2024-05-10 08:06:29 -04:00
Doug BurksandGitHub 26cb8d43e1 FIX: so-index-list typo #12988 2024-05-10 08:01:56 -04:00
Doug BurksandGitHub a1291e43c3 FIX: so-index-list typo #12988 2024-05-10 07:58:13 -04:00
Doug BurksandGitHub 5b7b6e5fb8 FEATURE: Add more fields to the SOC Dashboards URL for so-import-pcap #12972 2024-05-08 14:00:23 -04:00
Doug BurksandGitHub c7845bdf56 Merge pull request #12970 from Security-Onion-Solutions/dougburks-patch-1 
FIX: Adjust so-import-pcap so that suricata works when it is pcapengine #12969
 2024-05-08 13:28:05 -04:00
Doug BurksandGitHub 5a5a1e86ac FIX: Adjust so-import-pcap so that suricata works when it is pcapengine #12969 2024-05-08 13:26:36 -04:00