CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-07-14 04:43:09 +02:00
Code Issues Packages Projects Releases Wiki Activity
10,704 Commits 40 Branches 127 Tags
68efd817e0894de0c8b583a8eaf45f720364f403
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Josh BrowerandGitHub 98af16055c Merge pull request #9151 from Security-Onion-Solutions/2.4/elasticfleet-ag 
Initial support for Elastic Fleet Package Registry
 2022-11-16 08:45:29 -05:00
Josh Brower 8db49feb32 Use our docker image 2022-11-16 08:24:25 -05:00
Josh Brower 48d191b656 Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/elasticfleet-ag 2022-11-15 12:13:05 -05:00
Josh Brower c389944e5c Initial support for Elastic Package Registry 2022-11-08 09:56:53 -05:00
Josh BrowerandGitHub 97f42dcce5 Merge pull request #8811 from Security-Onion-Solutions/2.4/elastic-fleet 
Live Query - View in Hunt fix
 2022-09-26 09:35:12 -04:00
Josh Brower a0b579019f Live Query - View in Hunt fix 2022-09-26 09:27:09 -04:00
Josh BrowerandGitHub d698238ed1 Merge pull request #8799 from Security-Onion-Solutions/2.4/elastic-fleet 
Live Query - View in Hunt link
 2022-09-23 15:00:32 -04:00
Josh Brower c7eccfd0c5 Live Query - View in Hunt link 2022-09-22 20:17:57 -04:00
Josh BrowerandGitHub 0815b607e6 Merge pull request #8778 from Security-Onion-Solutions/2.4/elastic-fleet 
Hunt Query - Elastic Agent Live Osquery Logs
 2022-09-20 08:29:47 -04:00
Josh Brower 120fdef173 Hunt Query - Elastic Agent Live Osquery Logs 2022-09-20 08:27:47 -04:00
Josh BrowerandGitHub da8d09713f Merge pull request #8776 from Security-Onion-Solutions/2.4/elastic-fleet 
Hunt Query - Elastic Agent Live Osquery Logs
 2022-09-20 06:20:51 -04:00
Josh Brower 3eb4adc5c3 Hunt Query - Elastic Agent Live Osquery Logs 2022-09-19 20:12:47 -04:00
Josh BrowerandGitHub b38804840d Merge pull request #8772 from Security-Onion-Solutions/2.4/grafana-ids 
Grafana SOC Redirect
 2022-09-19 16:02:41 -04:00
Josh BrowerandGitHub 80919827c6 Fixup index patterns 2022-09-19 15:55:23 -04:00
Josh Brower ea7979cfdd Add Elastic Agent datastreams to SOC index 2022-09-19 15:33:15 -04:00
Josh Brower d28a9ecec2 Set Dashboard UUID 2022-09-19 13:32:04 -04:00
Josh BrowerandGitHub eba82553a1 Merge pull request #8755 from Security-Onion-Solutions/2.4/tls 
Change ssl_ecdh_curve
 2022-09-16 13:28:35 -04:00
Josh Brower d5debd9b6b Change ssl_ecdh_curve 2022-09-16 09:06:09 -04:00
Josh BrowerandGitHub 99f54acef1 Merge pull request #8742 from Security-Onion-Solutions/2.4/elastic-fleet 
2.4/elastic fleet
 2022-09-15 07:16:37 -04:00
Josh Brower bdfde669f3 remove outdated scripts 2022-09-14 18:38:08 -04:00
Josh Brower 798b39ec09 elastic-fleet so-status & restart scripts 2022-09-14 18:36:26 -04:00
Josh BrowerandGitHub 0c1f9eaa37 Merge pull request #8739 from Security-Onion-Solutions/2.4/elastic-fleet 
EA Certs & image
 2022-09-14 14:20:17 -04:00
Josh Brower 1c671b47d7 Run container as elastic-fleet user 2022-09-14 14:17:54 -04:00
Josh Brower b7b92c73a3 add so-elastic-agent to container list 2022-09-14 11:00:16 -04:00
Josh Brower 334a0d7b1c Start using so-elastic-agent container 2022-09-14 10:33:27 -04:00
Josh Brower 6945596eee Tweak elastic agent ssl gen 2022-09-14 08:10:42 -04:00
Josh Brower bf14612258 Change out Elastic Fleet certs 2022-09-13 15:58:53 -04:00
Josh BrowerandGitHub 0c7ee56ee3 Merge pull request #8725 from Security-Onion-Solutions/2.4/elastic-fleet 
Fix elastic agent gen script
 2022-09-13 07:18:47 -04:00
Josh Brower 4a28841a7c Fix elastic agent gen script 2022-09-13 06:38:05 -04:00
Josh BrowerandGitHub 905068f7bf Merge pull request #8720 from Security-Onion-Solutions/2.4/elastic-fleet 
Add so-elastic-agent-builder
 2022-09-12 13:40:28 -04:00
Josh Brower 0df7d0249a Add so-elastic-agent-builder 2022-09-12 12:22:35 -04:00
Josh BrowerandGitHub 3708c9b4d9 Merge pull request #8715 from Security-Onion-Solutions/2.4/elastic-fleet 
Add links to tools menu
 2022-09-12 09:34:17 -04:00
Josh Brower 9f99939bda Add links to tools menu 2022-09-12 09:28:10 -04:00
Josh BrowerandGitHub e700a43a40 Merge pull request #8714 from Security-Onion-Solutions/2.4/elastic-fleet 
2.4/elastic fleet
 2022-09-12 08:34:28 -04:00
Josh Brower 09a1032f77 Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/elastic-fleet 2022-09-09 15:08:25 -04:00
Josh Brower 921d644a0b Elastic Fleet wrapper 2022-09-09 15:05:31 -04:00
Josh BrowerandGitHub d9ae646ef2 Merge pull request #8682 from Security-Onion-Solutions/2.4/elastic-fleet 
2.4/elastic fleet
 2022-09-07 18:53:35 -04:00
Josh Brower f00aafdfb2 Elastic Agent - move gen installers 2022-09-07 16:57:11 -04:00
Josh Brower e8af315e40 Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/elastic-fleet 2022-09-07 16:32:31 -04:00
Josh BrowerandGitHub e3e0e4c6ed Merge pull request #8681 from Security-Onion-Solutions/playbookfix 
Update so-playbook-reset
 2022-09-07 16:01:37 -04:00
Josh BrowerandGitHub 39ed582a72 Update so-playbook-reset 2022-09-07 15:59:54 -04:00
Josh Brower ce688cfb91 Elastic Agent setup changes 2022-09-07 10:23:26 -04:00
Josh BrowerandGitHub 7fa9ca8fc6 Merge pull request #8233 from Security-Onion-Solutions/fix/remove-sudo-bpf 
Remove unneeded sudo
 2022-07-05 09:23:48 -04:00
Josh Brower a1d1779126 Remove unneeded sudo 2022-07-05 09:21:05 -04:00
Josh BrowerandGitHub 0a203add3b Merge pull request #8145 from Security-Onion-Solutions/defensivedepth-patch-1 
pin v1.6.0
 2022-06-17 13:14:58 -04:00
Josh BrowerandGitHub b8ee896f8a pin v1.6.0 2022-06-17 12:38:54 -04:00
Josh BrowerandGitHub 238e671f34 Merge pull request #8129 from Security-Onion-Solutions/fix/curator-cron 
Change curator to daily for true cluster
 2022-06-15 11:40:53 -04:00
Josh Brower 072cb3cca2 Change curator to daily for true cluster 2022-06-15 11:38:38 -04:00
Josh BrowerandGitHub 2574f0e23d Merge pull request #8081 from Security-Onion-Solutions/fix/fleetdm-websockets 
Allow websockets for fleetdm
 2022-06-06 19:15:02 -04:00
Josh Brower c9d9804c3a Allow websockets for fleetdm 2022-06-06 17:26:24 -04:00
Josh BrowerandGitHub 025677a1e6 Merge pull request #8034 from Security-Onion-Solutions/feature/sigmafp 
Feature/SigmaCustomFilters
 2022-05-31 07:25:44 -04:00
Josh Brower a5361fb745 Change Target_log name 2022-05-28 18:07:05 -04:00
Josh BrowerandGitHub 94ee45ac63 Merge pull request #8029 from Security-Onion-Solutions/upgrade/navigator 
Upgrade Navigator to 4.6.4
 2022-05-27 14:46:59 -04:00
Josh Brower 43cb78a6a8 Upgrade Navigator 2022-05-27 14:21:11 -04:00
Josh Brower 8e368bdebe Merge in upstream dev 2022-05-06 20:01:07 -04:00
Josh BrowerandGitHub 891a197a6a Merge pull request #7814 from Security-Onion-Solutions/defensivedepth-patch-2 
Fix ES/LS Log Pruning
 2022-04-18 10:45:27 -04:00
Josh BrowerandGitHub b35b505f0a Fix pattern matching 2022-04-18 10:39:04 -04:00
Josh BrowerandGitHub 2b39570b08 Fix matching logic 2022-04-18 10:37:38 -04:00
Josh BrowerandGitHub d60d31f723 Merge pull request #7801 from Security-Onion-Solutions/defensivedepth-patch-1 
Remove thehive entries from so-status
 2022-04-15 12:25:21 -04:00
Josh BrowerandGitHub bd19da1878 Remove thehive entries from so-status 2022-04-15 12:21:56 -04:00
Josh BrowerandGitHub 19cba9dca9 Merge pull request #7798 from Security-Onion-Solutions/awlocal 
Make analyst iso install init management interface
 2022-04-15 07:26:53 -04:00
Josh BrowerandGitHub 1cb5a791ca Add idh req_storage elif 2022-04-12 14:29:07 -04:00
Josh BrowerandGitHub f1574de827 Merge pull request #7765 from Security-Onion-Solutions/fix/compress-clean-elastic-logs 
Compress + Clean ES & Logstash App Logs
 2022-04-11 16:43:03 -04:00
Josh Brower 886d69fb38 Compress + Clean ES & Logstash App Logs 2022-04-11 16:09:24 -04:00
Josh BrowerandGitHub ae8d300567 Merge pull request #7738 from Security-Onion-Solutions/feature/idh-allow-multiple-int 
Include firewall state
 2022-04-07 14:52:31 -04:00
Josh Brower 36b2d78dfe Include firewall state 2022-04-07 14:02:21 -04:00
Josh BrowerandGitHub 86771e1fe6 Merge pull request #7732 from Security-Onion-Solutions/feature/idh-allow-multiple-int 
Feature/idh allow multiple int
 2022-04-06 17:21:30 -04:00
Josh Brower f5e539a05c Initial support for restricting IDH services on MGT IP 2022-04-06 17:16:38 -04:00
Josh Brower 7906c053b1 Initial support for restricting IDH services on MGT IP 2022-04-04 16:46:05 -04:00
Josh BrowerandGitHub 5b9c82a434 Merge pull request #7494 from Security-Onion-Solutions/fix/fleetdm-custom-hostname 
Force regen of ssl cert
 2022-03-16 15:17:05 -04:00
Josh Brower f0e44827a5 rm extra line 2022-03-10 08:48:46 -05:00
Josh Brower 814e16ba95 Force regen of ssl cert 2022-03-10 08:47:26 -05:00
Josh Brower 2ba72791aa Remove sigma regen cron 2022-03-02 10:31:15 -05:00
Josh BrowerandGitHub 39718561ce Merge pull request #7366 from Security-Onion-Solutions/delta 
Enable state tracking for sigma refresh
 2022-03-01 05:53:14 -05:00
Josh Brower e960d99901 Enable state tracking for sigma refresh 2022-02-28 21:18:41 -05:00
Josh Brower 09f1a5025d Merge remote-tracking branch 'remotes/origin/dev' into delta 2022-02-28 21:18:07 -05:00
Josh Brower 41a58b791a Enable state tracking for sigma refresh 2022-02-28 21:17:59 -05:00
Josh BrowerandGitHub f824717094 Merge pull request #7364 from Security-Onion-Solutions/delta 
IDH Node verbiage
 2022-02-28 17:09:08 -05:00
Josh Brower 0cee0d5dea IDH Node verbiage 2022-02-28 16:47:24 -05:00
Josh BrowerandGitHub d71bde0e38 Merge pull request #7362 from Security-Onion-Solutions/delta 
Navigator - include attack json for airgap
 2022-02-28 16:33:10 -05:00
Josh Brower 2075412ca2 Navigator - include attack json for airgap 2022-02-28 16:15:30 -05:00
Josh BrowerandGitHub 25b0069353 Merge pull request #7334 from Security-Onion-Solutions/delta 
IDH Setup - dont show ssh fix screen
 2022-02-25 15:01:25 -05:00
Josh Brower 6a270eb8b3 IDH Setup - dont show ssh fix screen - fix 2022-02-25 14:58:30 -05:00
Josh Brower ee39ec1882 IDH Setup - dont show ssh fix screen 2022-02-25 14:55:28 -05:00
Josh BrowerandGitHub ce4c859f3a Merge pull request #7328 from Security-Onion-Solutions/fix/soup-sigma-refresh 
.110 Post processing - sigma refresh
 2022-02-25 12:24:19 -05:00
Josh BrowerandGitHub 1abf27873d .110 Post processing - sigma refresh 2022-02-25 12:19:59 -05:00
Josh BrowerandGitHub be80f0530c Merge pull request #7321 from Security-Onion-Solutions/delta 
IDH Improvements
 2022-02-24 21:27:36 -05:00
Josh Brower 96ed3cb158 IDH - Setup Summary new lines 2022-02-24 20:59:47 -05:00
Josh Brower 4a597b9f0e Merge remote-tracking branch 'remotes/origin/dev' into delta 2022-02-24 19:58:10 -05:00
Josh Brower cf7325a546 IDH - Play tweaks, Setup summary, log rotate 2022-02-24 19:57:11 -05:00
Josh BrowerandGitHub e8e683c2e9 Merge pull request #7319 from Security-Onion-Solutions/delta 
Add and Update IDH Plays
 2022-02-24 15:48:38 -05:00
Josh Brower fbc702375c Add and Update IDH Plays 2022-02-24 15:06:04 -05:00
Josh BrowerandGitHub 5779e40401 Merge pull request #7308 from Security-Onion-Solutions/defensivedepth-patch-1 
UC true
 2022-02-24 07:48:39 -05:00
Josh BrowerandGitHub 585c275df6 UC true 2022-02-23 19:35:10 -05:00
Josh Brower babc114d27 Merge branch 'delta' of https://github.com/Security-Onion-Solutions/securityonion into delta 2022-02-23 19:33:18 -05:00
Josh Brower 2bf20bd1f0 UC true 2022-02-23 19:33:10 -05:00
Josh BrowerandGitHub b7b2183c15 Merge pull request #7296 from Security-Onion-Solutions/delta 
IDH - Import & Enables Plays
 2022-02-23 10:52:37 -05:00
Josh Brower 83aa261d88 IDH - Import & Enables Plays 2022-02-23 10:50:13 -05:00
Josh BrowerandGitHub 0121eda536 Merge pull request #7282 from Security-Onion-Solutions/delta 
Initial Support - IDH Node
 2022-02-23 08:49:40 -05:00
Josh Brower 1d95aca4de IDH - VNC default port 2022-02-22 14:16:45 -05:00