Commit Graph

9646 Commits

Author SHA1 Message Date
weslambert
56cb8d62ab Merge pull request #7337 from Security-Onion-Solutions/fix/pb_overrides
Fix formatting for PB overrides
2022-02-25 20:48:38 -05:00
weslambert
e942d81433 Ensure correct formatting for source override 2022-02-25 19:14:58 -05:00
weslambert
a511fd33e9 Ensure correct formatting for destination override 2022-02-25 19:14:21 -05:00
Doug Burks
74037e6f00 Merge pull request #7335 from Security-Onion-Solutions/fix/soup-postversion
make sure that each post_to_* function sets POSTVERSION at end
2022-02-25 15:27:31 -05:00
Josh Brower
25b0069353 Merge pull request #7334 from Security-Onion-Solutions/delta
IDH Setup - dont show ssh fix screen
2022-02-25 15:01:25 -05:00
Josh Brower
6a270eb8b3 IDH Setup - dont show ssh fix screen - fix 2022-02-25 14:58:30 -05:00
Josh Brower
ee39ec1882 IDH Setup - dont show ssh fix screen 2022-02-25 14:55:28 -05:00
Doug Burks
8df47e809d make sure that each post_to_* function sets POSTVERSION at end 2022-02-25 14:30:59 -05:00
Mike Reeves
fa15a2e012 Merge pull request #7333 from Security-Onion-Solutions/endgamecurator
Fix endgame index name
2022-02-25 13:31:29 -05:00
Mike Reeves
15924ebe0f Fix endgame index name 2022-02-25 13:29:29 -05:00
weslambert
c95f48e49a Merge pull request #7330 from Security-Onion-Solutions/fix/pb-override
Override destination/source mappings with .keyword for Playbook
2022-02-25 13:07:31 -05:00
Wes Lambert
a8bdff89ae Move files into SO component template directory 2022-02-25 18:00:16 +00:00
Wes Lambert
08097fe9ec Add Playbook override mappings 2022-02-25 17:58:51 +00:00
Josh Brower
ce4c859f3a Merge pull request #7328 from Security-Onion-Solutions/fix/soup-sigma-refresh
.110 Post processing - sigma refresh
2022-02-25 12:24:19 -05:00
Josh Patterson
9de9d92b2b Merge pull request #7329 from Security-Onion-Solutions/delta
add extra hosts for filebeat on idh node
2022-02-25 12:23:37 -05:00
m0duspwnens
d76facb1bb add extra hosts for idh node 2022-02-25 12:21:43 -05:00
Josh Brower
1abf27873d .110 Post processing - sigma refresh 2022-02-25 12:19:59 -05:00
weslambert
a6ab09501e Merge pull request #7326 from Security-Onion-Solutions/fix/additional_text_subfield_mappings
Add additional .text subfield mappings
2022-02-25 11:29:26 -05:00
Wes Lambert
61dadc6249 Add additional .text subfield mappings 2022-02-25 16:27:37 +00:00
Josh Brower
be80f0530c Merge pull request #7321 from Security-Onion-Solutions/delta
IDH Improvements
2022-02-24 21:27:36 -05:00
Josh Brower
96ed3cb158 IDH - Setup Summary new lines 2022-02-24 20:59:47 -05:00
Josh Brower
4a597b9f0e Merge remote-tracking branch 'remotes/origin/dev' into delta 2022-02-24 19:58:10 -05:00
Josh Brower
cf7325a546 IDH - Play tweaks, Setup summary, log rotate 2022-02-24 19:57:11 -05:00
Josh Patterson
8302c45059 Merge pull request #7320 from Security-Onion-Solutions/delta_ssh
default to false if local role doesnt exist
2022-02-24 18:06:19 -05:00
m0duspwnens
0970bbc983 default to false if local role doesnt exist 2022-02-24 17:55:50 -05:00
Josh Brower
e8e683c2e9 Merge pull request #7319 from Security-Onion-Solutions/delta
Add and Update IDH Plays
2022-02-24 15:48:38 -05:00
Josh Brower
fbc702375c Add and Update IDH Plays 2022-02-24 15:06:04 -05:00
Josh Patterson
5c747fbb4c Merge pull request #7318 from Security-Onion-Solutions/delta_ssh
change name of selinux policy state for idh node
2022-02-24 14:49:55 -05:00
m0duspwnens
8b61d4818d change name of selinux policy state for idh node 2022-02-24 14:47:14 -05:00
weslambert
22b01dab1e Merge pull request #7317 from Security-Onion-Solutions/fix/add_text_subfield_to_dtc_mappings
Add .text subfield mappings for DTC where fields are defined
2022-02-24 14:47:11 -05:00
Wes Lambert
0f8a39002f Add .text subfield mappings for DTC where fields are defined 2022-02-24 19:39:52 +00:00
weslambert
5e29c71381 Merge pull request #7315 from Security-Onion-Solutions/fix/split_zeek_dns
Split Zeek DNS records into a separate index
2022-02-24 13:21:52 -05:00
weslambert
23fb62c0d6 Split Zeek DNS records into a separate index 2022-02-24 12:52:25 -05:00
weslambert
313487a887 Merge pull request #7313 from Security-Onion-Solutions/fix/kibana_dashboard_load
Add Kibana dashboard updates for 2.3.110
2022-02-24 09:48:28 -05:00
weslambert
bc1794e437 Fix function name 2022-02-24 09:42:14 -05:00
Josh Patterson
d7aa413c46 Merge pull request #7314 from Security-Onion-Solutions/delta
default port 2222 for ssh idh node
2022-02-24 09:37:11 -05:00
weslambert
45ccfc5ad4 Add back post to .100 and call for .110 2022-02-24 09:35:43 -05:00
weslambert
582bf4c64c Remove dashboard updates for .100 so we don't run twice 2022-02-24 09:25:59 -05:00
weslambert
7f08ecdcbe Add function reference for .110 post changes 2022-02-24 09:25:15 -05:00
weslambert
a22e470038 Add Kibana dashboard updates for 2.3.110 2022-02-24 09:20:44 -05:00
weslambert
bc2c1b4ccc Merge pull request #6935 from abesinger/issue/6912
Updated syslog pipeline, resolves #6912.
2022-02-24 08:33:55 -05:00
Josh Brower
5779e40401 Merge pull request #7308 from Security-Onion-Solutions/defensivedepth-patch-1
UC true
2022-02-24 07:48:39 -05:00
Josh Brower
585c275df6 UC true 2022-02-23 19:35:10 -05:00
Josh Brower
babc114d27 Merge branch 'delta' of https://github.com/Security-Onion-Solutions/securityonion into delta 2022-02-23 19:33:18 -05:00
Josh Brower
2bf20bd1f0 UC true 2022-02-23 19:33:10 -05:00
Josh Patterson
a9c6dc32ab Merge pull request #7305 from Security-Onion-Solutions/delta_ssh
allow only manager to connect to ssh port for idh node
2022-02-23 15:17:31 -05:00
m0duspwnens
61ae61953f allow only manager to connect to ssh port for idh node 2022-02-23 15:14:11 -05:00
weslambert
2aa811dcd2 Merge pull request #7300 from Security-Onion-Solutions/fix/new_es_template_config
Add IDH and Kratos index templates
2022-02-23 12:24:38 -05:00
weslambert
6a0ecb9e9c Add IDH and Kratos index templates 2022-02-23 12:13:46 -05:00
Josh Brower
b7b2183c15 Merge pull request #7296 from Security-Onion-Solutions/delta
IDH - Import & Enables Plays
2022-02-23 10:52:37 -05:00