CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 09:12:45 +01:00
Code Issues Packages Projects Releases Wiki Activity
9,797 Commits 24 Branches 119 Tags
722b200e16d172200e79962f9e10c07b0e10032f
Commit Graph

9797 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Jason Ertel
e59f0d69d9 Merge branch 'master' into jertelhf 2022-03-02 10:18:14 -05:00
Mike Reeves
ad2b69c9de Merge pull request #7391 from Security-Onion-Solutions/hf0301 
Hotfix 2.3.100 20220301
 2022-03-02 10:08:27 -05:00
Mike Reeves
e874c32c08 Hotfix 2.3.100-20220301 2022-03-02 10:05:41 -05:00
Wes Lambert
ab9b81ea39 Change match_only_text to text for mac in host mappings 2022-03-02 15:01:05 +00:00
Wes Lambert
ed620b93b7 Add custom analyzer definition to all SO/DTC mappings 2022-03-02 14:43:19 +00:00
Wes Lambert
27c8eaa630 Update all other mappings for .security where applicable 2022-03-02 14:39:23 +00:00
Wes Lambert
e925d435ff Update event, file, and host mappings to include .security 2022-03-02 14:33:52 +00:00
Wes Lambert
496b161253 Update ECS mappings to include .security 2022-03-02 14:27:36 +00:00
Wes Lambert
aae2fd1fbb Update DNS mappings to include .security 2022-03-02 14:27:15 +00:00
Wes Lambert
0b45cf7ae1 Update base mappings to include .security 2022-03-02 14:25:57 +00:00
Wes Lambert
d89af5f04f Update agent mappings to include .security 2022-03-02 14:25:14 +00:00
Wes Lambert
2d2ec45029 Modify base ECS mappings to include .security where possible, as well as custom analyzer definition 2022-03-02 14:19:36 +00:00
weslambert
93386f4620 Merge pull request #7389 from Security-Onion-Solutions/fix/revert_text 
Fix/revert text
 2022-03-02 09:17:46 -05:00
Mike Reeves
c0649a863b Merge pull request #7376 from Security-Onion-Solutions/hfnew 
Curator Fixes
 2022-03-01 14:38:31 -05:00
Mike Reeves
e93dbb5347 Update Hotfix 2022-03-01 14:37:03 -05:00
doug
bbced5b52f FIX: curator should exclude so-case* indices #7270 2022-03-01 14:34:52 -05:00
Doug Burks
f134c74585 FIX: curator should exclude so-case* indices #7270 2022-03-01 14:34:41 -05:00
Wes Lambert
5489b8559d Revert "Switch from .security to match_only_text" 
This reverts commit f7862af934.
 2022-03-01 18:44:00 +00:00
Wes Lambert
2a9caccc7c Revert "Add additional .text subfield mappings" 
This reverts commit 61dadc6249.
 2022-03-01 18:43:24 +00:00
Doug Burks
adf3dc0cf6 Merge pull request #7370 from Security-Onion-Solutions/fix/syslog 
Revert syslog pipeline updates from Abe's PR for now
 2022-03-01 11:13:13 -05:00
Wes Lambert
a290602a70 Revert syslog pipeline updates from Abe' PR for now 2022-03-01 15:31:07 +00:00
weslambert
4201ee45c6 Merge pull request #7369 from Security-Onion-Solutions/fix/ingest_timestamp 
Rename ingest timestamp to event.ingested
 2022-03-01 10:11:16 -05:00
Wes Lambert
038dc49098 Temporarily increase field limit before trimming efforts 2022-03-01 15:06:28 +00:00
Wes Lambert
dc07adca63 Rename ingest.timestamp to event.ingested 2022-03-01 15:05:08 +00:00
Josh Brower
39718561ce Merge pull request #7366 from Security-Onion-Solutions/delta 
Enable state tracking for sigma refresh
 2022-03-01 05:53:14 -05:00
Josh Brower
e960d99901 Enable state tracking for sigma refresh 2022-02-28 21:18:41 -05:00
Josh Brower
09f1a5025d Merge remote-tracking branch 'remotes/origin/dev' into delta 2022-02-28 21:18:07 -05:00
Josh Brower
41a58b791a Enable state tracking for sigma refresh 2022-02-28 21:17:59 -05:00
Jason Ertel
73b2a36e89 Merge pull request #7365 from Security-Onion-Solutions/kilo 
Upgrade to ES 7.17.1
 2022-02-28 18:26:31 -05:00
Jason Ertel
f147bb33ed Upgrade to ES 7.17.1 2022-02-28 18:18:09 -05:00
Josh Patterson
6b3b5e9a1f Merge pull request #7363 from Security-Onion-Solutions/soup_singlenode_30 
allow for check_log_size_limit to work without salt-master running
 2022-02-28 17:13:42 -05:00
Josh Brower
f824717094 Merge pull request #7364 from Security-Onion-Solutions/delta 
IDH Node verbiage
 2022-02-28 17:09:08 -05:00
Josh Brower
0cee0d5dea IDH Node verbiage 2022-02-28 16:47:24 -05:00
Josh Brower
d71bde0e38 Merge pull request #7362 from Security-Onion-Solutions/delta 
Navigator - include attack json for airgap
 2022-02-28 16:33:10 -05:00
Josh Brower
2075412ca2 Navigator - include attack json for airgap 2022-02-28 16:15:30 -05:00
m0duspwnens
a51f833f36 output only the value for log_size_limit 2022-02-28 16:13:43 -05:00
Jason Ertel
04a99a0adc Merge pull request #7361 from Security-Onion-Solutions/kilo 
Clear out hotfix file
 2022-02-28 16:04:30 -05:00
Jason Ertel
166ac0d194 Clear out hotfix file 2022-02-28 16:01:42 -05:00
m0duspwnens
8d12e136f2 Merge remote-tracking branch 'remotes/origin/dev' into soup_singlenode_30 2022-02-28 15:43:37 -05:00
m0duspwnens
710059211d remove debug echo, mkdir verbose 2022-02-28 14:54:39 -05:00
weslambert
a1c0ae4aab Merge pull request #7356 from Security-Onion-Solutions/fix/es_config_load_order 
Run template load first to prevent issues with pipeline changes that …
 2022-02-28 14:50:22 -05:00
m0duspwnens
80e5198f9e combine local and default pillars to get pillar values locally 2022-02-28 14:35:16 -05:00
m0duspwnens
dc24cb711d need local to be --local 2022-02-28 13:50:08 -05:00
m0duspwnens
c5bf818049 debug messages and pass local to lookup_salt_value 2022-02-28 13:39:50 -05:00
weslambert
414b9dcd59 Run template load first to prevent issues with pipeline changes that generate new indices 2022-02-28 12:33:18 -05:00
m0duspwnens
cd981fa2ae forgot then for if 2022-02-28 12:25:06 -05:00
m0duspwnens
278235b0ca update so-common lookup_salt_value to accept local option. soup get minion id from grains with local option 2022-02-28 12:15:23 -05:00
weslambert
a9caef9596 Merge pull request #7338 from Security-Onion-Solutions/fix/endgame_template 
Revert Endgame index name changes
 2022-02-28 08:13:09 -05:00
Doug Burks
e0b3635318 Merge pull request #7339 from Security-Onion-Solutions/fix/zeek_dns-import 
Avoid changing _index for imported logs
 2022-02-27 05:09:00 -05:00
Doug Burks
32b71fdcac Avoid changing _index for imported logs 2022-02-26 10:36:09 -05:00