925 Commits

Author	SHA1	Message	Date
Josh Patterson	807b40019f	Update soc_elasticsearch.yaml	2023-10-25 16:16:48 -04:00
Josh Patterson	5f168a33ed	Update defaults.yaml	2023-10-25 16:16:01 -04:00
Mike Reeves	d1170cb69f	Update soc_elasticsearch.yaml	2023-10-25 16:05:20 -04:00
m0duspwnens	19fdc9319b	fix role update	2023-10-25 15:58:26 -04:00
Josh Patterson	af4b34801f	Update defaults.yaml	2023-10-25 15:48:27 -04:00
Josh Patterson	1ae8896a05	Update config.map.jinja	2023-10-25 15:47:40 -04:00
Mike Reeves	6fb0c5dbfe	Annotation changes for warm node	2023-10-25 15:37:36 -04:00
Mike Reeves	a887551dad	Annotation changes for warm node	2023-10-25 15:22:47 -04:00
weslambert	660020cc76	Parse pkt_src for Suricata logs	2023-10-23 15:45:41 -04:00
Wes	28b7a24cc1	Add templates for integrations	2023-10-18 20:36:04 +00:00
Wes	0bba68769b	Make scan.pe.image_version type of 'float'	2023-09-26 14:05:12 +00:00
Wes	2e0ea3f374	Set final pipeline	2023-09-19 13:33:12 +00:00
Wes	508260bd46	Use event.created for timestamp	2023-09-19 13:32:03 +00:00
Wes	98499c3963	Clean component template directory	2023-09-15 13:51:46 +00:00
defensivedepth	0c11a9b733	Add transform role	2023-09-14 09:33:17 -04:00
Wes	cf19c8f8c2	Remove templates	2023-09-05 13:43:41 +00:00
Wes	0fed757b11	Add entropy mapping	2023-08-31 15:10:27 +00:00
Wes	1a3b3b21fb	Change entropy value syntax	2023-08-31 15:09:19 +00:00
weslambert	d090852895	Correct fortigate template name	2023-08-30 15:40:40 -04:00
weslambert	706a6e2d56	Make sure a data stream is created for syslog	2023-08-30 08:34:04 -04:00
weslambert	d2063c7e11	Add auditd reference back	2023-08-29 11:14:49 -04:00
weslambert	f118e25e8c	Add Apache references	2023-08-29 11:00:31 -04:00
weslambert	d40bbf6b09	Add Apache templates	2023-08-29 10:59:40 -04:00
Jason Ertel	bdb88cc87b	Merge pull request #11161 from Security-Onion-Solutions/jertel/alts ... use consistent cert dir and reduce jinja complexity	2023-08-24 11:18:34 -04:00
Wes	d2d0d53eef	Change order	2023-08-23 20:20:44 +00:00
Wes	31a49268cb	Add o365 and okta	2023-08-23 20:20:06 +00:00
Wes	2f51349ff8	Add SOC configuration	2023-08-23 20:07:42 +00:00
Wes	3f2793088a	Add templates	2023-08-23 19:02:50 +00:00
Jason Ertel	8a751e097d	cert path refactor	2023-08-23 14:32:05 -04:00
Mike Reeves	ce32a0081e	Merge pull request #11128 from Security-Onion-Solutions/2.4/main ... Merge in hotfix	2023-08-21 16:29:40 -04:00
Jason Ertel	222352b4b3	fix typo	2023-08-17 17:26:35 -04:00
m0duspwnens	4ac95447eb	pop sort settings if index_sorting is false	2023-08-17 16:15:27 -04:00
m0duspwnens	9cba9d9ae0	allow to override number_of_replicas from one place in soc ui	2023-08-17 15:00:01 -04:00
Wes	7971d9749a	Assign pipeline to import	2023-08-17 14:08:48 +00:00
m0duspwnens	4d497022db	replace . with _x_ for soc ui compat	2023-08-10 09:52:18 -04:00
m0duspwnens	f9e272dd8f	add additional annotations for elasticsearch index settings	2023-08-09 16:09:23 -04:00
m0duspwnens	dfe916d7c8	add annotation for so-logs index	2023-08-09 15:19:17 -04:00
Josh Brower	dd1fa51eb5	Generate community_id for defend endpoint logs	2023-08-04 09:03:17 -04:00
weslambert	f102351052	Add event	2023-08-02 13:25:44 -04:00
weslambert	ac28f90af3	Remove override	2023-08-02 13:15:11 -04:00
Josh Brower	9437a47946	Fix formatting	2023-07-26 10:54:24 -04:00
Josh Brower	4f94d953c9	Merge remote-tracking branch 'origin/2.4/dev' into fix/elasticsearch_endpoint	2023-07-25 07:42:59 -04:00
Wes	5553be02ac	Change how tags are added	2023-07-24 21:31:28 +00:00
Wes	4efc951eaf	Add tags	2023-07-24 20:57:39 +00:00
Wes	d84dbf9535	Add fleet	2023-07-24 18:53:52 +00:00
Wes	de7b7ff989	Add endpoint	2023-07-24 18:35:02 +00:00
Josh Brower	eead0c42d4	Merge remote-tracking branch 'origin/2.4/dev' into 2.4/SigmaMappings	2023-07-24 09:27:14 -04:00
Josh Brower	741e6039c1	Cleanup for Sigma Rules	2023-07-24 09:25:58 -04:00
weslambert	83e1e3efdc	Merge pull request #10788 from Security-Onion-Solutions/fix/elastic_mappings ... Fix user name mapping and remove security subfield	2023-07-20 15:51:42 -04:00
Wes	4b7e7978ef	Add final pipeline	2023-07-19 19:56:54 +00:00