Commit Graph
100 Commits
Author SHA1 Message Date
Jason ErtelandGitHub b62a0c5d5c Merge pull request #9846 from Security-Onion-Solutions/kilo
Kilo
2023-02-23 12:12:06 -05:00
Jason ErtelandGitHub 1f37af0e57 Merge pull request #9800 from Security-Onion-Solutions/kilo
influx upgrade
2023-02-16 13:51:53 -05:00
Jason ErtelandGitHub e4de89c960 Merge pull request #9798 from Security-Onion-Solutions/jertel-remove-kilo-from-ver
Update VERSION
2023-02-16 10:57:19 -05:00
Jason ErtelandGitHub dcbf5a2fa6 Update VERSION 2023-02-16 10:55:32 -05:00
Jason ErtelandGitHub 6e9d1f7c2c Merge pull request #9797 from Security-Onion-Solutions/kilo
Influx upgrade
2023-02-16 10:46:57 -05:00
Jason ErtelandGitHub c9f18891b2 Merge pull request #9639 from Security-Onion-Solutions/kilo
auto extract source/dest IP on case related event attachments; improve so-verify stream to console
2023-01-25 11:37:16 -05:00
Jason ErtelandGitHub fd7d51a59b Merge pull request #9630 from Security-Onion-Solutions/kilo
Kilo
2023-01-24 10:45:12 -05:00
Jason ErtelandGitHub 2bffd9b473 Merge pull request #9628 from Security-Onion-Solutions/kilo
try paths filter on both even though docs only mention support for push
2023-01-24 10:27:30 -05:00
Jason ErtelandGitHub 5da1b03d9b Merge pull request #9619 from Security-Onion-Solutions/kilo
switch MySQL 8 to use native password for playbook compat; fix so-verify mail inspection
2023-01-23 15:14:00 -05:00
Jason ErtelandGitHub a613d960b9 Merge pull request #9608 from Security-Onion-Solutions/kilo
setup improvements
2023-01-20 13:11:11 -05:00
Jason ErtelandGitHub 4044706cd9 Merge pull request #9603 from Security-Onion-Solutions/kilo
Handle setup failures
2023-01-19 15:49:41 -05:00
Jason ErtelandGitHub 8d797ad9df Merge pull request #9490 from Security-Onion-Solutions/kilo
Ensure create/update dates are both reset when an admin sets a user pass
2022-12-30 11:47:01 -05:00
Jason ErtelandGitHub ba13ad7151 Merge pull request #9454 from Security-Onion-Solutions/kilo
fix redis defaults to force string keys instead of numeric
2022-12-21 18:16:40 -05:00
Jason ErtelandGitHub 5a5c565fae Merge pull request #9449 from Security-Onion-Solutions/kilo
Ensure user/pass values are quoted due to symbol chars appearing in values
2022-12-21 14:02:38 -05:00
Jason ErtelandGitHub 33a1aea729 Merge pull request #9448 from Security-Onion-Solutions/kilo
improve so-status rendering on terminals that only support 8 colors
2022-12-21 10:14:47 -05:00
Jason ErtelandGitHub 2edc3cac11 Clarify Kratos annotations 2022-12-20 14:08:49 -05:00
Jason ErtelandGitHub 1b42965a6d Merge pull request #9416 from Security-Onion-Solutions/jertel/lic
license key format change and eventFields dedup
2022-12-16 15:58:08 -05:00
Jason ErtelandGitHub 6a73410be9 Merge pull request #9394 from Security-Onion-Solutions/jertel/mvkr
move Kratos DB to /nsm
2022-12-14 15:00:44 -05:00
Jason ErtelandGitHub d1f554723a Merge pull request #9317 from Security-Onion-Solutions/config
Reduce cron noise; ensure filecheck is restarted if modified
2022-12-07 08:41:04 -05:00
Jason ErtelandGitHub 6443e702a5 Merge pull request #9305 from Security-Onion-Solutions/config
Filecheck support for Suricata
2022-12-06 12:53:19 -05:00
Jason ErtelandGitHub 88410bc8f8 Merge branch '2.4/dev' into config 2022-12-06 12:38:43 -05:00
Jason ErtelandGitHub 5f59ae52d5 Merge pull request #9162 from Security-Onion-Solutions/config
Config
2022-11-17 11:50:35 -05:00
Jason ErtelandGitHub 55f22af758 Merge pull request #9017 from Security-Onion-Solutions/config
Retry so-user commands if another process is currently using so-user
2022-10-27 15:41:37 -04:00
Jason ErtelandGitHub d7b370e31b Merge pull request #9010 from Security-Onion-Solutions/config
regex should match entire input against allowed logLevel values
2022-10-27 13:17:51 -04:00
Jason ErtelandGitHub fd6bea92da Merge pull request #8913 from Security-Onion-Solutions/config
retry up to 25 minutes if APT is locked by an unattended upgrade. This is an increase from 8 minutes.
2022-10-13 07:01:00 -04:00
Jason ErtelandGitHub fe62744c05 Merge pull request #8825 from Security-Onion-Solutions/config
resolve inode issue with soc_users_roles when deleting a user; other minor improvements
2022-09-27 17:38:20 -04:00
Jason ErtelandGitHub 16d24d4bc9 Merge pull request #8822 from Security-Onion-Solutions/config
user management / sync
2022-09-27 11:14:32 -04:00
Jason ErtelandGitHub 21f8b3b61c Merge pull request #8768 from Security-Onion-Solutions/config
refactor sostatus telegraf input script
2022-09-19 10:35:22 -04:00
Jason ErtelandGitHub f2b09c84d4 Merge pull request #8767 from Security-Onion-Solutions/config
Config
2022-09-19 09:18:10 -04:00
Jason ErtelandGitHub b4add5ebb3 Merge pull request #8766 from Security-Onion-Solutions/config
complete rewrite of so-status
2022-09-19 07:40:51 -04:00
Jason ErtelandGitHub 0d32cc38d6 Merge pull request #8733 from Security-Onion-Solutions/config
Always use local docs
2022-09-13 14:40:10 -04:00
Jason ErtelandGitHub 810d89eb6c Merge pull request #8731 from Security-Onion-Solutions/config
Remove comments to avoid confusing config viewers within SOC
2022-09-13 12:16:38 -04:00
Jason ErtelandGitHub 8c5cba58aa Merge pull request #8730 from Security-Onion-Solutions/config
Config
2022-09-13 11:52:05 -04:00
Jason ErtelandGitHub cfb3893c2b Merge pull request #8694 from Security-Onion-Solutions/salt-relay
Salt relay
2022-09-08 10:31:28 -04:00
Jason ErtelandGitHub 15124b6ad7 Merge pull request #8271 from Security-Onion-Solutions/kilo
Add content-type header to PUT request, now required in Kratos 0.10.1
2022-07-11 13:47:28 -04:00
Jason ErtelandGitHub f28c6d590a Merge pull request #8263 from Security-Onion-Solutions/kilo
Remove Jinja from yaml files before parsing
2022-07-08 20:32:22 -04:00
Jason ErtelandGitHub ac68fa822b Merge pull request #8200 from Security-Onion-Solutions/contrib
Add gh action for contrib check
2022-06-27 11:25:10 -04:00
Jason ErtelandGitHub 2e123b7a4f Merge pull request #8175 from Security-Onion-Solutions/kilo
Avoid failing setup due to retrying while waiting for lock file
2022-06-23 08:16:39 -04:00
Jason ErtelandGitHub e405750d26 Merge pull request #8095 from Security-Onion-Solutions/kilo
Bump version to 2.3.140
2022-06-08 09:07:56 -04:00
Jason ErtelandGitHub a70da41f20 Merge pull request #8032 from Security-Onion-Solutions/kilo
Exclude pkg upgrade retry error logs from failing setup
2022-05-28 08:34:40 -04:00
Jason ErtelandGitHub 88f17f037e Merge pull request #7982 from Security-Onion-Solutions/kilo
Upgrade to Kratos 0.9.0-alpha.3
2022-05-19 13:28:58 -04:00
Jason ErtelandGitHub c95bafd521 Merge pull request #7969 from Security-Onion-Solutions/fix/helpers-analyzers
Only import yaml module when config is loaded
2022-05-18 07:15:32 -04:00
Jason ErtelandGitHub 685789de33 Merge pull request #7936 from Security-Onion-Solutions/kilo
Improved unit test coverage of new analyzers; Utilize localized summa…
2022-05-12 16:47:18 -04:00
Jason ErtelandGitHub 60b55acd6f Merge pull request #7926 from Security-Onion-Solutions/kilo
Add support for analyzers in airgapped environments
2022-05-10 17:12:18 -04:00
Jason ErtelandGitHub 91a7f25d3a Corrected brand name capitalization 2022-05-10 09:39:19 -04:00
Jason ErtelandGitHub e19635e44a Merge pull request #7920 from Security-Onion-Solutions/kilo
Disable MRU queries on dashboards
2022-05-09 15:08:55 -04:00
Jason ErtelandGitHub dc209a37cd Merge pull request #7916 from Security-Onion-Solutions/kilo
Disable actions on dashboards group-by tables
2022-05-09 11:52:22 -04:00
Jason ErtelandGitHub 0e64a9e5c3 Merge pull request #7912 from Security-Onion-Solutions/kilo
Add dashboard ref to soc.json
2022-05-06 15:18:05 -04:00
Jason ErtelandGitHub 60763c38db Merge pull request #7911 from Security-Onion-Solutions/kilo
Analyzers + Dashboards
2022-05-06 13:50:54 -04:00
Jason ErtelandGitHub 71a86b0a3c Merge pull request #7856 from Security-Onion-Solutions/bumpver
Bump version
2022-04-25 13:01:19 -04:00
Jason ErtelandGitHub 13c9af5a5a Clearing hotfix 2022-04-08 10:23:44 -04:00
Jason ErtelandGitHub cedb23f4bc Merge pull request #7689 from Security-Onion-Solutions/esup
Upgrade to ES 7.17.2
2022-04-01 13:57:04 -04:00
Jason ErtelandGitHub 408f9d6695 Update .gitleaks.toml 2022-03-15 09:53:27 -04:00
Jason ErtelandGitHub b810f14428 Update .gitleaks.toml 2022-03-15 09:53:11 -04:00
Jason ErtelandGitHub cec9cba40e Create .gitleaks.toml 2022-03-15 09:47:57 -04:00
Jason ErtelandGitHub 8ebeeb497f add configuration to override leak detector defaults 2022-03-15 09:43:09 -04:00
Jason ErtelandGitHub 16f673d956 Merge pull request #7541 from Security-Onion-Solutions/kilo
Add assignee field to case list
2022-03-14 08:49:46 -04:00
Jason ErtelandGitHub f64da9632f Merge pull request #7461 from Security-Onion-Solutions/kilo
Gracefully handle situations where another process is using the Kratos DB while so-user executes
2022-03-08 11:02:14 -05:00
Jason ErtelandGitHub 73b2a36e89 Merge pull request #7365 from Security-Onion-Solutions/kilo
Upgrade to ES 7.17.1
2022-02-28 18:26:31 -05:00
Jason ErtelandGitHub 04a99a0adc Merge pull request #7361 from Security-Onion-Solutions/kilo
Clear out hotfix file
2022-02-28 16:04:30 -05:00
Jason ErtelandGitHub 380f0ef93a Merge pull request #7256 from Security-Onion-Solutions/kilo
Update password len requirements; clarify password update help
2022-02-18 15:19:08 -05:00
Jason ErtelandGitHub cb9712aa08 Merge pull request #7217 from Security-Onion-Solutions/kilo
MFA
2022-02-16 16:47:40 -05:00
Jason ErtelandGitHub 1bac031975 Merge pull request #7058 from Security-Onion-Solutions/kilo
Bump to 2.3.110
2022-02-01 15:04:48 -05:00
Jason ErtelandGitHub ac21bd1e29 Merge pull request #7009 from Security-Onion-Solutions/kilo
Add new abbreviated result limit param
2022-01-27 15:55:42 -05:00
Jason ErtelandGitHub c2636036ee Merge pull request #6995 from Security-Onion-Solutions/kilo
store related event data as a flattened object blob
2022-01-26 12:21:02 -05:00
Jason ErtelandGitHub 4ab7a6a079 Merge pull request #6967 from Security-Onion-Solutions/kilo
Copyright year and format update
2022-01-24 10:39:31 -05:00
Jason ErtelandGitHub e984b0b9c4 Merge pull request #6921 from Security-Onion-Solutions/kilo
remove unused fields object from related case schema
2022-01-19 14:42:05 -05:00
Jason ErtelandGitHub a63787daba Merge pull request #6864 from Security-Onion-Solutions/kilo
Add default queries for cases to show user's assigned cases
2022-01-13 17:15:02 -05:00
Jason ErtelandGitHub db04646735 Merge pull request #6794 from Security-Onion-Solutions/kilo
Update field mappings based on Wes' feedback
2022-01-07 16:03:05 -05:00
Jason ErtelandGitHub a4f01d4412 Merge pull request #6792 from Security-Onion-Solutions/kilo
Add case exclusion toggle to Hunt to avoid hunt results getting case …
2022-01-07 13:02:27 -05:00
Jason ErtelandGitHub 8cf7ea8b87 Merge pull request #6772 from Security-Onion-Solutions/kilo
Prevent PCAP action from showing up outside of hunt/alerts
2022-01-05 19:15:02 -05:00
Jason ErtelandGitHub 89415b12ce Merge pull request #6762 from Security-Onion-Solutions/kilo
Switch soc.json to use lowercase labels in default queries; Also enab…
2022-01-05 09:59:39 -05:00
Jason ErtelandGitHub 1d136b611a Merge pull request #6723 from Security-Onion-Solutions/kilo
Uniform presets
2021-12-29 16:49:41 -05:00
Jason ErtelandGitHub 74dbc4bf67 Merge pull request #6720 from Security-Onion-Solutions/kilo
Add case template to eval install types; also improve clarity of case queries
2021-12-29 11:41:06 -05:00
Jason ErtelandGitHub d4f3615cae Merge pull request #6717 from Security-Onion-Solutions/kilo
Support CCS in CM
2021-12-29 09:12:13 -05:00
Jason ErtelandGitHub 0072ae253b Merge pull request #6705 from Security-Onion-Solutions/kilo
Initial CM Impl; Improve so-user script
2021-12-28 08:36:59 -05:00
Jason ErtelandGitHub 2f88f08be2 Merge pull request #6649 from Security-Onion-Solutions/2.3.91-merge
2.3.91 merge
2021-12-21 09:39:14 -05:00
Jason ErtelandGitHub 8ec671422f Merge pull request #6593 from Security-Onion-Solutions/esup
Finish upgrade of ES to 7.16.1
2021-12-16 07:59:34 -05:00
Jason ErtelandGitHub ffa8ca57a7 Merge pull request #6579 from Security-Onion-Solutions/unhotfix
Remove some previous hotfix code
2021-12-15 12:34:00 -05:00
Jason ErtelandGitHub 83fab42b6e Merge pull request #6433 from Security-Onion-Solutions/kilo
Reign in the Wazuh port check to only complain if a non-Docker process is listening on 55000.
2021-12-02 09:39:14 -05:00
Jason ErtelandGitHub 1272de3058 Merge pull request #6378 from Security-Onion-Solutions/TOoSmOotH-patch-2
bump version to 2.3.100
2021-11-29 09:57:29 -05:00
Jason ErtelandGitHub 31ffd6c4ec Merge pull request #6339 from Security-Onion-Solutions/kilo
Merge 2.3.90 WAZUH hotfix into dev
2021-11-23 19:33:18 -05:00
Jason ErtelandGitHub 273842eb43 Merge pull request #6328 from Security-Onion-Solutions/kilo
WAZUH hotfix
2021-11-23 12:06:34 -05:00
Jason ErtelandGitHub 9737a4088c Merge pull request #6327 from Security-Onion-Solutions/TOoSmOotH-patch-1
Update HOTFIX
2021-11-23 09:25:43 -05:00
Jason ErtelandGitHub 9c0e8cedba Merge pull request #6279 from Security-Onion-Solutions/syncesusers_so-kratos
restart kratos if failure
2021-11-18 10:49:12 -05:00
Jason ErtelandGitHub 96f1f0174b Merge pull request #6275 from Security-Onion-Solutions/syncesusers_so-kratos
break kratos state out from soc state
2021-11-18 09:13:10 -05:00
Jason ErtelandGitHub 83bd314a63 Merge pull request #6186 from Security-Onion-Solutions/kilo
Upgrade to ES 7.15.2
2021-11-10 14:06:08 -05:00
Jason ErtelandGitHub c469d12a49 Merge pull request #6002 from Security-Onion-Solutions/kilo
Update whiptail links to use latest docs
2021-10-25 15:08:31 -04:00
Jason ErtelandGitHub e9a44c6e1b Merge pull request #5662 from Security-Onion-Solutions/TOoSmOotH-patch-1
Update README.md
2021-09-27 09:28:46 -04:00
Jason ErtelandGitHub 9eb6f5942e Merge pull request #5623 from Security-Onion-Solutions/kilo
Prevent email addresses from having uppercase characters
2021-09-22 09:10:38 -04:00
Jason ErtelandGitHub 3924b8f5db Merge pull request #5586 from Security-Onion-Solutions/kilo
Ensure identity ID parm is quoted now that it doesn't have embedded quotes in the value
2021-09-20 13:56:30 -04:00
Jason ErtelandGitHub a3f62c81c3 Merge pull request #5577 from Security-Onion-Solutions/kilo
Continuation of auth enhancements
2021-09-20 06:30:36 -04:00
Jason ErtelandGitHub 4e2d5018a2 Merge pull request #5455 from Security-Onion-Solutions/kilo
Consolidate whiptail screens
2021-09-09 14:57:28 -04:00
Jason ErtelandGitHub 19a02baa7c Merge pull request #5425 from Security-Onion-Solutions/kilo
Auth enhancements
2021-09-07 13:10:36 -04:00
Jason ErtelandGitHub 6dfc943e8c Merge pull request #5382 from Security-Onion-Solutions/kilo
Correct invalid password message
2021-09-02 07:15:09 -04:00
Jason ErtelandGitHub e39de8c7bc Merge pull request #5089 from Ron89/feature/thehive-userupdate
add user password update command
2021-08-15 09:36:35 -04:00
Jason ErtelandGitHub 84fdc1e690 Merge pull request #5057 from Security-Onion-Solutions/bravo
Several Suricata things
2021-08-04 12:26:11 -04:00
Jason ErtelandGitHub 724f7d4f3d Merge pull request #5036 from Security-Onion-Solutions/kilo
Condense cloud automations
2021-08-02 18:04:05 -04:00
Jason ErtelandGitHub c524b54af1 Merge pull request #4988 from Security-Onion-Solutions/mkr2361
2.3.61-MSEARCH
2021-07-29 11:10:41 -04:00
Jason ErtelandGitHub 28c5c02ef1 Merge pull request #4958 from Security-Onion-Solutions/issue/4024
https://github.com/Security-Onion-Solutions/securityonion/issues/4024
2021-07-27 16:21:13 -04:00