15030 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
weslambert	13062099b3	Remove YARA script update and reference to exclusions	2024-05-13 18:04:16 -04:00
weslambert	7250fb1188	Merge pull request #13004 from Security-Onion-Solutions/fix/detections_alerts_indices ... FIX: Detections alerts indices	2024-05-13 17:02:52 -04:00
Josh Patterson	437d0028db	Merge pull request #13003 from Security-Onion-Solutions/localdirs ... create local directories during soup if needed	2024-05-13 16:33:04 -04:00
m0duspwnens	1ef9509aac	define local_salt_dir	2024-05-13 14:34:22 -04:00
weslambert	d606f259d1	Add detection alerts	2024-05-13 14:25:11 -04:00
weslambert	c8870eae65	Add detection alerts template	2024-05-13 14:23:47 -04:00
Josh Brower	2419066dc8	Merge pull request #13001 from Security-Onion-Solutions/2.4/socdefaults ... 2.4/socdefaults	2024-05-13 13:39:31 -04:00
DefensiveDepth	e430de88d3	Change rule updates to 24h	2024-05-13 13:15:06 -04:00
DefensiveDepth	c4c38f58cb	Update descriptions	2024-05-13 13:13:57 -04:00
weslambert	26b5a39912	Change index to detections.alerts	2024-05-13 12:59:17 -04:00
m0duspwnens	eb03858230	missed one	2024-05-13 12:44:57 -04:00
m0duspwnens	2643da978b	those functions in so-functions	2024-05-13 11:51:10 -04:00
m0duspwnens	649f52dac7	create_local_directories in soup too	2024-05-13 10:37:56 -04:00
Mike Reeves	927fe91f25	Merge pull request #13000 from Security-Onion-Solutions/soupz ... Backup Suricata for migration	2024-05-13 10:12:34 -04:00
Mike Reeves	9d6f6c7893	Update soup	2024-05-13 10:09:35 -04:00
Mike Reeves	28e40e42b3	Update soc_soc.yaml	2024-05-13 09:58:32 -04:00
Mike Reeves	6c71c45ef6	Update soup	2024-05-13 09:55:57 -04:00
Mike Reeves	641899ad56	Backup Suricata for migration and remove advanced from reverselookups	2024-05-13 09:50:14 -04:00
Doug Burks	d120326cb9	Merge pull request #12999 from Security-Onion-Solutions/dougburks-patch-1 ... FEATURE: Add more fields to the SOC Dashboards URL for so-import-pcap #12972	2024-05-13 09:20:01 -04:00
Doug Burks	a4f2d8f327	Merge pull request #12998 from Security-Onion-Solutions/dougburks-patch-2 ... Update README.md to reference new screenshots for 2.4.70	2024-05-13 08:42:33 -04:00
Doug Burks	ae323cf385	Update README.md to include new Detections screenshot	2024-05-13 08:34:44 -04:00
Doug Burks	788c31014d	Update README.md to reference new screenshots for 2.4.70	2024-05-13 08:30:48 -04:00
Jason Ertel	154dc605ef	Merge pull request #12994 from Security-Onion-Solutions/jertel/testcy ... support upgrade tests	2024-05-10 16:57:19 -04:00
Jason Ertel	2a0e33401d	support upgrade tests	2024-05-10 16:54:50 -04:00
Josh Patterson	79b4d7b6b6	Merge pull request #12992 from Security-Onion-Solutions/issue/12991 ... Fix IDH node	2024-05-10 12:43:09 -04:00
m0duspwnens	986cbb129a	pkg not file	2024-05-10 12:33:56 -04:00
m0duspwnens	950c68783c	add pkg policycoreutils-python-utils to idh node	2024-05-10 11:46:00 -04:00
Doug Burks	cec75ba475	Merge pull request #12989 from Security-Onion-Solutions/dougburks-patch-2 ... FIX: so-index-list typo #12988	2024-05-10 08:06:29 -04:00
Doug Burks	26cb8d43e1	FIX: so-index-list typo #12988	2024-05-10 08:01:56 -04:00
Doug Burks	a1291e43c3	FIX: so-index-list typo #12988	2024-05-10 07:58:13 -04:00
Jason Ertel	45fd07cdf8	Merge pull request #12987 from Security-Onion-Solutions/jertel/testcy ... Add quick action to find related alerts for a detection	2024-05-09 18:08:08 -04:00
Jason Ertel	fecd674fdb	Add quick action to find related alerts for a detection	2024-05-09 17:55:41 -04:00
Jason Ertel	dff2de4527	Merge pull request #12984 from Security-Onion-Solutions/jertel/testcy ... tests will retry on any rule import failure	2024-05-09 15:50:37 -04:00
Jason Ertel	19e1aaa1a6	exclude detection rule errors	2024-05-09 15:45:33 -04:00
Jason Ertel	074d063fee	tests will retry on any rule import failure	2024-05-09 14:52:58 -04:00
Wes	6ed82d7b29	Remove YARA download in setup	2024-05-09 17:27:46 +00:00
Wes	ea4cf42913	Remove old YARA update script	2024-05-09 17:26:54 +00:00
Wes	8a34f5621c	Remove old YARA download script	2024-05-09 17:26:45 +00:00
Wes	823ff7ce11	Remove exclusions and repos	2024-05-09 17:03:13 +00:00
Josh Patterson	fb8456b4a6	Merge pull request #12983 from Security-Onion-Solutions/fix/strelka ... fix strelka errors	2024-05-09 12:04:40 -04:00
m0duspwnens	c864fec70c	allow strelka.manager to run on standalone	2024-05-09 11:53:50 -04:00
m0duspwnens	a74fee4cd0	strelka compiled rules	2024-05-09 11:26:02 -04:00
m0duspwnens	3a99624eb8	seperate manager states for strelka	2024-05-09 10:03:02 -04:00
Mike Reeves	656bf60fda	Merge pull request #12973 from Security-Onion-Solutions/TOoSmOotH-patch-5 ... Update config.sls	2024-05-08 16:42:19 -04:00
weslambert	cdc47cb1cd	Merge pull request #12975 from Security-Onion-Solutions/fix/strelka_watch ... Use state	2024-05-08 16:39:49 -04:00
weslambert	01a68568a6	Use state	2024-05-08 16:37:13 -04:00
weslambert	b916465b06	Merge pull request #12974 from Security-Onion-Solutions/fix/strelka_yara ... Account for 0 active rules and change watch	2024-05-08 15:59:20 -04:00
weslambert	0567b93534	Remove mode	2024-05-08 15:39:59 -04:00
Mike Reeves	ad9fdf064b	Update config.sls	2024-05-08 15:24:29 -04:00
Wes	77e2117051	Account for 0 active rules and change watch	2024-05-08 18:47:52 +00:00