10075 Commits

Author	SHA1	Message	Date
Jason Ertel	a146153ee9	switch to json	2024-10-30 12:44:01 -04:00
defensivedepth	c509dab5f1	Use socore user	2024-10-30 11:03:14 -04:00
reyesj2	36fc3bbd6d	add so-ip-mappings index ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2024-10-30 10:24:11 -04:00
defensivedepth	5406a263d5	Add local custom template	2024-10-29 19:42:06 -04:00
Jason Ertel	3f3ac21f50	connect	2024-10-29 12:28:24 -04:00
Jason Ertel	11820a16f0	connect	2024-10-29 12:04:38 -04:00
defensivedepth	4c5099d429	Initial support for local lookup	2024-10-29 10:27:54 -04:00
Jason Ertel	1243c7588b	connect	2024-10-28 19:42:01 -04:00
Jason Ertel	624c4855c8	connect	2024-10-28 19:25:20 -04:00
Jason Ertel	12a76a9d35	connect	2024-10-28 19:11:26 -04:00
Josh Brower	6a3e5415cf	Merge pull request #13832 from Security-Onion-Solutions/2.4/sigmapipelines ... Add process and file creation mappings	2024-10-28 18:30:21 -04:00
defensivedepth	f3ca5b1c42	Remove OS-specific mappings	2024-10-28 09:19:51 -04:00
Corey Ogburn	640f53d085	Cleanup ... Fix indentation and trailing comma.	2024-10-24 17:05:36 -06:00
Corey Ogburn	1aa9d87c5d	Corrected ... Put the note on the right model this time.	2024-10-24 17:05:36 -06:00
Corey Ogburn	e11c562022	Added Note to ES Mappings	2024-10-24 17:05:35 -06:00
Jason Ertel	d503c09ef2	connect	2024-10-24 15:45:18 -04:00
Corey Ogburn	6ce52bf9ab	Specify Defaults for detectionEngineStatusQueries ... Specify the defaults as an example to the user.	2024-10-24 13:11:49 -06:00
Corey Ogburn	f67fcecc6e	Clean up StatusQueries String	2024-10-24 11:18:48 -06:00
Corey Ogburn	b7c392a244	Corrected a misspelling	2024-10-24 11:18:48 -06:00
Corey Ogburn	ad0b0a5e95	Refactor to String ... To accomodate the config screen, the annotation now specifies it as a multiline string with a yaml syntax. The user can edit the yaml to add or remove queries. The UI will parse the YAML before use. Also updated the IntegrityFailure queries to specify table columns more relevant to a sync failure than the default ones.	2024-10-24 11:18:47 -06:00
Corey Ogburn	c77b0afd8e	Move to Client/Detections ... Added a basic annotation.	2024-10-24 11:18:47 -06:00
Corey Ogburn	04ebe4efea	Array to Dictionary	2024-10-24 11:18:46 -06:00
Corey Ogburn	cbb4d6846f	Detection Engine Status Queries ... A few for testing	2024-10-24 11:18:45 -06:00
m0duspwnens	a0558ace16	replace: False to remove state warning	2024-10-24 10:33:16 -04:00
m0duspwnens	ca793966a8	set retry and interval to remove state warning	2024-10-24 10:32:42 -04:00
Jason Ertel	d9273ec369	exec bit	2024-10-24 09:40:47 -04:00
Jason Ertel	cacd5b0643	connect	2024-10-24 09:36:09 -04:00
Jason Ertel	7c405ff9d7	connect	2024-10-24 08:47:52 -04:00
Jason Ertel	5e6dd2e8b3	connect	2024-10-23 16:49:02 -04:00
Josh Patterson	578a18acbe	Merge pull request #13853 from Security-Onion-Solutions/agcr ... install createrepo for airgap	2024-10-23 14:21:26 -04:00
m0duspwnens	8cc530dd4c	fix HELD for debian families	2024-10-23 09:36:17 -04:00
m0duspwnens	1df104967e	fix pkg name	2024-10-22 16:50:23 -04:00
m0duspwnens	7a0f6d5e93	fix pkg name	2024-10-22 16:42:01 -04:00
m0duspwnens	8d2ae23ae6	install createrepo on airgap and non airgap	2024-10-22 13:56:38 -04:00
m0duspwnens	4d093735ec	prevent state from failing if versionlock plugin not installed	2024-10-18 14:41:23 -04:00
m0duspwnens	39230159ae	update description	2024-10-17 12:10:49 -04:00
Jason Ertel	4611ef3713	connect wip	2024-10-17 11:39:36 -04:00
Jason Ertel	1537b69457	connect wip	2024-10-17 11:25:40 -04:00
Jason Ertel	25fe83cd40	connect wip	2024-10-17 11:22:10 -04:00
Jason Ertel	435b9b14e3	connect wip	2024-10-17 10:49:39 -04:00
m0duspwnens	76ff0c56cd	create versionlock pillar dir/files during soup to 120	2024-10-17 10:06:40 -04:00
m0duspwnens	17870bcab8	Merge remote-tracking branch 'origin/2.4/dev' into issue/204	2024-10-17 09:59:36 -04:00
m0duspwnens	5fb660bc9a	remove kernel bool option, just use list	2024-10-17 09:29:03 -04:00
Jason Ertel	f713dbacf8	connect	2024-10-16 17:53:57 -04:00
m0duspwnens	73ce526467	allow users to lock pkgs from upgrade	2024-10-16 17:06:03 -04:00
reyesj2	322199358d	add support for trendmicro integration ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2024-10-16 16:45:46 -04:00
defensivedepth	dcdfaf66f4	Add process and file creation mappings	2024-10-16 15:20:52 -04:00
Jason Ertel	d8546bf747	connect upgrade	2024-10-16 14:59:15 -04:00
Jason Ertel	1e5bf3aa98	connect upgrade	2024-10-16 14:21:11 -04:00
Jason Ertel	647f057714	Merge branch '2.4/dev' into jertel/wip	2024-10-16 13:44:20 -04:00