Commit Graph

9164 Commits

Author SHA1 Message Date
Mike Reeves
d98a1d5ae5 Initial Oracle support 2023-07-13 08:40:09 -04:00
Mike Reeves
695ec149f1 Initial Oracle support 2023-07-12 15:07:26 -04:00
Mike Reeves
50103aebb3 Initial Oracle support 2023-07-12 14:59:36 -04:00
Mike Reeves
6f81e234cd Initial Oracle support 2023-07-12 14:52:23 -04:00
Mike Reeves
7732435b64 Initial Oracle support 2023-07-12 14:49:59 -04:00
Josh Brower
40294e2762 Update Integration JSON 2023-07-12 08:49:36 -04:00
m0duspwnens
676696b24a restart strelka backend if rules change 2023-07-11 15:48:22 -04:00
m0duspwnens
da27fce95f run so-yara-download/update if scripts change 2023-07-11 13:48:26 -04:00
weslambert
5f1b467e64 Fix syntax for conditional 2023-07-11 13:37:50 -04:00
Wes
577bfac886 Update logic for YARA matches 2023-07-11 17:00:13 +00:00
Josh Patterson
c75d209d7f import ELASTICFLEETMERGED 2023-07-11 11:01:27 -04:00
Josh Brower
c99e7da5a7 Remove Comments 2023-07-11 10:26:18 -04:00
Josh Patterson
60d66b973c Merge pull request #10739 from Security-Onion-Solutions/yararules
include *.yara
2023-07-11 10:21:35 -04:00
m0duspwnens
304830d2ee remove old rules prior to copy 2023-07-11 10:20:04 -04:00
m0duspwnens
d7285d69a7 include *.yara 2023-07-11 09:59:13 -04:00
weslambert
b7cab1d118 Change path to old one 2023-07-11 09:10:20 -04:00
weslambert
f03a472ee5 Merge pull request #10731 from Security-Onion-Solutions/fix/kibana_file_search
Kibana dashboard changes
2023-07-11 08:50:03 -04:00
Mike Reeves
c7a0801eed Merge pull request #10725 from Security-Onion-Solutions/yararules
Yararules
2023-07-11 08:49:20 -04:00
Josh Brower
5a72c558cb Tag at top level 2023-07-11 08:35:47 -04:00
Josh Brower
a6e907f76c Tag Playbook Alerts 2023-07-11 08:03:15 -04:00
Josh Brower
8437fcd94c Exclude Import and Eval from autoupdate 2023-07-10 17:10:08 -04:00
m0duspwnens
f8ed2e6e8e make parent dirs 2023-07-10 16:11:45 -04:00
m0duspwnens
5069d1163c only *.yar files 2023-07-10 14:36:34 -04:00
Josh Brower
31edf2e8ea Tighten & Document Pipelines 2023-07-10 14:17:42 -04:00
Wes
6b8893ded5 Update saved objects 2023-07-10 18:13:34 +00:00
m0duspwnens
1f8b7bda89 fix output_dir var 2023-07-10 13:39:31 -04:00
Mike Reeves
b9204cbe99 Initial RHEL support 2023-07-10 12:57:59 -04:00
m0duspwnens
1ac72e5b24 ensure /nsm/rules/yara directory exists 2023-07-10 11:10:37 -04:00
Josh Brower
7805ca8beb Add Failover Support 2023-07-10 10:38:14 -04:00
m0duspwnens
47b2481cdd nothing in strelka/tools/sbin_jinja to file.recurse 2023-07-10 10:29:19 -04:00
m0duspwnens
fa933d3f53 use file_mode 2023-07-10 10:26:30 -04:00
Mike Reeves
0c9e230294 Initial RHEL support 2023-07-10 10:14:47 -04:00
m0duspwnens
f4dc73a206 yara download and update 2023-07-10 09:42:37 -04:00
Wes
6da96a733f Use tags instead of dataset 2023-07-10 13:06:38 +00:00
Josh Brower
8c16feb772 Rename Fleet pipelines 2023-07-09 12:22:55 -04:00
Josh Brower
ce1f363424 Allow base_url 2023-07-08 13:30:19 -04:00
Josh Brower
e8860a7d2c Fix perms 2023-07-08 09:04:55 -04:00
Josh Brower
beb26596fd Merge remote-tracking branch 'origin/2.4/dev' into 2.4/fleetautogen 2023-07-07 19:12:47 -04:00
Josh Brower
ff3bb11fbb Elastic Fleet Certs Refactor 2023-07-07 16:44:16 -04:00
m0duspwnens
8be5082b60 yara scripts 2023-07-07 16:43:26 -04:00
Corey Ogburn
da7770a900 Allow an additional kratos endpoint through
The /auth/self-service/errors route is used to lookup auth issues so the route must also be proxied to kratos.
2023-07-07 12:47:55 -06:00
weslambert
79ed17b506 Change path 2023-07-07 13:31:43 -04:00
Mike Reeves
a41b0dbfea Add Debian 2023-07-07 12:59:41 -04:00
Mike Reeves
d28375b304 Add Debian 2023-07-07 12:54:47 -04:00
Mike Reeves
07c0b539d7 Add Debian 2023-07-07 12:53:23 -04:00
Mike Reeves
d18ebd6e36 Add Debian 2023-07-07 12:52:45 -04:00
Mike Reeves
5a642b151b Add Debian 2023-07-07 12:51:17 -04:00
Mike Reeves
0aa4ea3e87 Add Debian 2023-07-07 12:49:11 -04:00
Josh Patterson
2785587840 Merge pull request #10714 from Security-Onion-Solutions/remove_so-logstash-get-unparsed
remove so-logstash-get-unparsed, use so-redis-count instead
2023-07-07 09:53:54 -04:00
weslambert
9f95306458 Merge pull request #10708 from Security-Onion-Solutions/fix/elasticsearch_templates_hn
Fix heavy node Elasticsearch template load
2023-07-07 09:52:54 -04:00