CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-07-14 21:03:10 +02:00
Code Issues Packages Projects Releases Wiki Activity
13,948 Commits 40 Branches 127 Tags
802bf9ce27ec2fef3d8d41432f4e65a0d439c82c
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
weslambertandGitHub 55052c4811 Merge pull request #11919 from Security-Onion-Solutions/fix/remove_curator_changes 
Remove Curator Changes
 2023-12-01 11:15:23 -05:00
Wes e36044e164 Remove close changes 2023-12-01 16:10:56 +00:00
Wes 6fa4a69753 Remove action changes 2023-12-01 16:10:07 +00:00
weslambertandGitHub 32b03f514e Merge pull request #11907 from Security-Onion-Solutions/fix/curator_close 
Curator close fixes
 2023-11-30 11:05:49 -05:00
Wes a605c5c62c Ensure indices managed by ILM can be managed by Curator 2023-11-29 22:13:20 +00:00
Wes 2368e8b793 Fix action file names 2023-11-29 22:06:11 +00:00
weslambertandGitHub 317b6cb614 Merge pull request #11902 from Security-Onion-Solutions/fix/hotfix_version 
Update HOTFIX
 2023-11-29 17:03:59 -05:00
weslambertandGitHub a6d20bdc71 Update HOTFIX 2023-11-29 17:01:29 -05:00
weslambertandGitHub b6e2df45c7 Update HOTFIX 2023-11-16 14:48:00 -05:00
weslambertandGitHub 46c5bf40e0 Merge pull request #11804 from Security-Onion-Solutions/fix/kibana_corrupt_integration 
Discard corrupt integration
 2023-11-16 10:49:39 -05:00
Wes 3ed7b36865 Discard corrupt integration 2023-11-16 15:45:38 +00:00
weslambertandGitHub aeb09b16db Merge pull request #11760 from Security-Onion-Solutions/fix/elastic_packages 
Add Elastic Agent package and upgrade packages when elasticfleet.packages list changes
 2023-11-10 10:20:17 -05:00
weslambertandGitHub 583ec5176e Add package check 2023-11-10 10:15:52 -05:00
weslambertandGitHub 4bb1dabb89 Add elastic_agent 2023-11-10 10:14:59 -05:00
weslambertandGitHub 02baa18502 Add metrics 2023-11-08 22:41:24 -05:00
weslambertandGitHub e39edab00d Exclude osquery and display failed name 2023-11-08 20:55:08 -05:00
weslambertandGitHub acb6e84248 Don't load index template if component template doesn't exist 2023-11-08 20:34:08 -05:00
weslambertandGitHub 9df3a8fc18 Merge pull request #11740 from Security-Onion-Solutions/fix/elastic_templates 
Remove template files
 2023-11-08 15:20:01 -05:00
weslambertandGitHub 36098e6314 Remove template files 2023-11-08 14:32:58 -05:00
Wes 653fda124f Check expected with retry 2023-11-08 13:02:17 +00:00
Wes b46e86c39b Extend index template loading to 60 attempts and a total of ~5 minutes 2023-11-08 02:29:09 +00:00
Wes de9f9549af Extend template loading to 24 attempts and a total of ~2 minutes 2023-11-07 23:55:03 +00:00
weslambertandGitHub 749e22e4b9 Fix if statement 2023-11-07 17:29:38 -05:00
weslambertandGitHub 69ec1987af Fix if statement 2023-11-07 17:28:37 -05:00
Wes 570624da7e Remove RETURN_CODE 2023-11-07 21:09:29 +00:00
Wes 7772657b4b Remove RETURN_CODE 2023-11-07 21:06:35 +00:00
Wes 1676c84f9c Use the retry function so-elasticsearch-query 2023-11-07 19:56:50 +00:00
weslambertandGitHub 1dcca0bfd3 Change pipeline to 1.13.1 2023-11-07 12:17:51 -05:00
Wes 0b4a246ddb State file changes and retry logic 2023-11-07 16:44:42 +00:00
weslambertandGitHub f97dc70fcb Merge pull request #11732 from Security-Onion-Solutions/fix/elastic_agent_template 
Change pipeline to 1.8.0
 2023-11-07 09:08:25 -05:00
weslambertandGitHub cce80eb2fb Change pipeline to 1.8.0 2023-11-07 09:02:48 -05:00
Wes c30a0d5b5b Better error handling and state file management 2023-11-06 14:29:01 +00:00
Wes 74eda68d84 Exit if unable to communicate with Elasticsearch 2023-11-06 13:16:35 +00:00
weslambertandGitHub 96582add5e Merge pull request #11704 from Security-Onion-Solutions/feature/integrations_checkpoint_vsphere 
Checkpoint and VSphere Integrations
 2023-11-02 17:17:03 -04:00
Wes 5bfef3f527 Add checkpoint and vsphere templates 2023-11-02 21:10:01 +00:00
Wes 3875970dc5 Add checkpoint and vsphere packages 2023-11-02 21:09:37 +00:00
weslambertandGitHub ac593e4632 Merge pull request #11701 from Security-Onion-Solutions/fix/elastic_templates_common 
Don't source so-elastic-fleet-common if not there
 2023-11-02 16:43:27 -04:00
weslambertandGitHub 51e7861757 Don't source so-elastic-fleet-common if not there 2023-11-02 16:41:34 -04:00
weslambertandGitHub e10f043b1c Merge pull request #11688 from Security-Onion-Solutions/fix/integrations_roles 
Add eval and import roles
 2023-11-02 09:58:40 -04:00
weslambertandGitHub 65735fc4d3 Add eval and import roles 2023-11-02 09:54:01 -04:00
weslambertandGitHub f9e2940181 Merge pull request #11676 from Security-Onion-Solutions/feature/sublime_platform_integration 
Sublime Platform Integration
 2023-11-01 16:13:57 -04:00
Wes f33079f1e3 Make settings global 2023-11-01 20:09:56 +00:00
Wes c32935e2e6 Remove optional integration from configuration if not enabled 2023-11-01 17:02:43 +00:00
Wes 655c88cd09 Make sure enabled_nodes is populated 2023-11-01 16:47:51 +00:00
Wes bca1194a46 Sublime SOC Action 2023-11-01 14:01:55 +00:00
Wes a0926b7b87 Load optional integrations 2023-11-01 13:59:24 +00:00
Wes 44e45843bf Change optional integration Fleet configuration 2023-11-01 13:52:38 +00:00
Wes 9701d0ac20 Optional integration Fleet configuration 2023-11-01 13:47:20 +00:00
Wes 23ee9c2bb0 Sublime Platform integration 2023-11-01 13:41:40 +00:00
Wes 51247be6b9 Sublime Platform integration defaults 2023-11-01 13:37:52 +00:00
Wes 4dc64400c5 Support document_id 2023-11-01 13:36:32 +00:00
Wes ae45d40eca Add Sublime Platform ingest pipeline 2023-11-01 13:34:30 +00:00
weslambertandGitHub 5a85003952 Merge pull request #11664 from Security-Onion-Solutions/fix/elastic_import 
Add import roles
 2023-10-31 10:47:13 -04:00
weslambertandGitHub c354924b68 Add import roles 2023-10-31 10:05:29 -04:00
weslambertandGitHub ed6473a34b Add roles for eval mode 2023-10-30 20:41:49 -04:00
weslambertandGitHub 9a1e95cd09 Merge pull request #11648 from Security-Onion-Solutions/fix/ilm_remove_policy 
Remove ILM policies for Cases and OSQuery manager indices
 2023-10-27 17:28:59 -04:00
weslambertandGitHub 76dd6f07ab Remove policy for OSQuery manager indices 2023-10-27 17:26:33 -04:00
weslambertandGitHub c955f9210a Remove policy for Cases indices 2023-10-27 17:24:27 -04:00
Wes 891ea997e7 Add lifecycle policies and warm settings 2023-10-26 12:25:37 +00:00
weslambertandGitHub 0c2b3f3c62 Merge pull request #11600 from Security-Onion-Solutions/fix/suricata_pkt_src 
Parse pkt_src for Suricata logs
 2023-10-23 15:51:30 -04:00
weslambertandGitHub 660020cc76 Parse pkt_src for Suricata logs 2023-10-23 15:45:41 -04:00
weslambertandGitHub 5119e6c45a Merge pull request #11570 from Security-Onion-Solutions/feature/additional_integrations 
Additional integrations
 2023-10-19 09:30:40 -04:00
Wes c135f886a9 Remove Carbon Black Cloud integration 2023-10-18 20:41:34 +00:00
Wes 28b7a24cc1 Add templates for integrations 2023-10-18 20:36:04 +00:00
Wes 767a54c91b Add pkgs 2023-10-18 20:07:26 +00:00
weslambertandGitHub f0e380870d Merge pull request #11567 from Security-Onion-Solutions/fix/mhr_docs 
Add note regarding DNS resolver
 2023-10-18 13:46:25 -04:00
weslambertandGitHub 34717fb65e Add note regarding DNS resolver 2023-10-18 13:44:09 -04:00
weslambertandGitHub 830b5b9a21 Merge pull request #11560 from Security-Onion-Solutions/foxtrot 
Elastic 8.10.4
 2023-10-17 13:47:21 -04:00
weslambertandGitHub 06e731c762 Update VERSION 2023-10-17 13:33:12 -04:00
weslambertandGitHub be2a829524 Elastic 8.10.4 2023-10-17 10:49:03 -04:00
weslambertandGitHub 8cab242ad0 Elastic 8.10.4 2023-10-17 10:48:31 -04:00
weslambertandGitHub 99054a2687 Elastic 8.10.4 2023-10-17 10:47:26 -04:00
weslambertandGitHub adcb7840bd Elastic 8.10.3 2023-10-17 10:38:20 -04:00
weslambertandGitHub 8db6fef92d Elastic 8.10.3 2023-10-17 10:35:36 -04:00
weslambertandGitHub 24329e3731 Update config_saved_objects.ndjson 2023-10-17 10:34:38 -04:00
weslambertandGitHub 1db88bdbb5 Update so-common 2023-10-17 10:33:39 -04:00
weslambertandGitHub 7c2cdb78e9 Update VERSION 2023-10-17 10:31:53 -04:00
weslambertandGitHub c02e491609 Merge pull request #11430 from Security-Onion-Solutions/fix/elastic_packages 
Upgrade packages and load integrations when packages change
 2023-09-28 14:10:39 -04:00
Wes 670cd19051 Exclude package upgrade script 2023-09-28 18:04:07 +00:00
Wes 8c44481ee1 Load templates after package changes 2023-09-28 17:57:31 +00:00
Wes 018186ccbd Upgrade packages and load integrations when packages change 2023-09-28 16:43:56 +00:00
weslambertandGitHub ceae22adab Merge pull request #11423 from Security-Onion-Solutions/fix/elastic_known_certs 
Exclude known_certs
 2023-09-28 09:20:38 -04:00
weslambertandGitHub 202eb7e876 Exclude known_certs 2023-09-28 09:16:56 -04:00
weslambertandGitHub 4dc477cc1d Merge pull request #11391 from Security-Onion-Solutions/fix/elasticsearch_strelka_image_version 
Make scan.pe.image_version type of 'float'
 2023-09-26 10:21:17 -04:00
Wes 0bba68769b Make scan.pe.image_version type of 'float' 2023-09-26 14:05:12 +00:00
weslambertandGitHub f9ace4791f Merge pull request #11384 from Security-Onion-Solutions/fix/analyzers_testing 
Add a note about testing analyzers outside of the Sensoroni Docker container
 2023-09-25 14:48:45 -04:00
weslambertandGitHub 7cb9b5f257 Add the blank line that was removed from the previous commit 2023-09-25 14:41:20 -04:00
weslambertandGitHub c95af6b992 Add a note about testing analyzers outside of the Sensoroni Docker container 2023-09-25 14:39:33 -04:00
weslambertandGitHub 2fc4d2923d Merge pull request #11289 from Security-Onion-Solutions/fix/elastic_agent_404 
/app/dashboards to /kibana/app/dashboards
 2023-09-25 09:11:50 -04:00
Wes eeeae08ec8 /app/ to /app/dashboards/ 2023-09-21 18:39:06 +00:00
weslambertandGitHub 377802410e Merge pull request #11352 from Security-Onion-Solutions/fix/import_evtx_exists 
Fix EVTX Imports
 2023-09-19 16:11:22 -04:00
Wes 2e0ea3f374 Set final pipeline 2023-09-19 13:33:12 +00:00
Wes 508260bd46 Use event.created for timestamp 2023-09-19 13:32:03 +00:00
Wes a1e963f834 Reverse timestamps where necessary 2023-09-19 13:28:20 +00:00
Wes 5bac1e4d15 Show correct dates and Kibana URL for already processed EVTX files 2023-09-18 21:31:15 +00:00
weslambertandGitHub fe1bae96ed Merge pull request #11297 from Security-Onion-Solutions/fix/soc_idh 
Change description to indicate that opencanary modules only apply to IDH nodes
 2023-09-15 11:16:06 -04:00
weslambertandGitHub eab6173a31 Merge pull request #11329 from Security-Onion-Solutions/fix/elastic_templates_clean 
Clean component template directory
 2023-09-15 11:00:17 -04:00
Wes 98499c3963 Clean component template directory 2023-09-15 13:51:46 +00:00
Wes 35ebbc974c Change description to indicate that opencanary modules only apply to IDH nodes 2023-09-11 13:52:16 +00:00
Wes f1d0db8171 /app to /kibana/app 2023-09-11 13:30:11 +00:00