CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-05-24 20:15:27 +02:00
Code Issues Packages Projects Releases Wiki Activity
14,602 Commits 31 Branches 126 Tags
82830c81733a925bf9c6c4748946d53ba1039358
Commit Graph

14602 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
reyesj2 82830c8173 Fix typos and fix error related to elasticsearch saltstate being called from logstash state. Logstash will be removed from kafkanodes in future 
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
 2024-04-02 16:37:39 -04:00
reyesj2 7f5741c43b Fix kafka storage setup 
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
 2024-04-02 16:36:22 -04:00
reyesj2 643d4831c1 CRLF -> LF 
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
 2024-04-02 16:35:14 -04:00
reyesj2 b032eed22a Update kafka to use manager docker registry 
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
 2024-04-02 16:34:06 -04:00
reyesj2 1b49c8540e Fix kafka keystore script 
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
 2024-04-02 16:32:15 -04:00
reyesj2 26abe90671 Removed duplicate kafka setup 
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
 2024-04-02 12:19:46 -04:00
reyesj2 446f1ffdf5 merge 2.4/dev 
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
 2024-03-25 13:55:48 -04:00
weslambert 57553bc1e5 Merge pull request #12652 from Security-Onion-Solutions/feature/pfsense_suricata 
FEATURE: pfSense Suricata logs
 2024-03-25 10:10:13 -04:00
weslambert df058b3f4a Merge branch '2.4/dev' into feature/pfsense_suricata 2024-03-25 10:08:03 -04:00
Wes 5e21da443f Minor verbiage updates 2024-03-25 13:58:32 +00:00
Josh Patterson 7898277a9b Merge pull request #12651 from Security-Onion-Solutions/issue/12637 
Allow for additional af-packet tuning options for Suricata
 2024-03-25 09:37:52 -04:00
m0duspwnens 029d8a0e8f handle yes/no on checksum-checks 2024-03-25 09:30:41 -04:00
Josh Brower b8d33ab983 Merge pull request #12639 from Security-Onion-Solutions/2.4/enable-detections 
Enable Detections
 2024-03-25 09:30:01 -04:00
weslambert e124791d5d Merge pull request #12650 from Security-Onion-Solutions/fix/soc_template 
FIX: http.response.status_code
 2024-03-25 09:29:19 -04:00
coreyogburn 8ae30d0a77 Merge pull request #12640 from Security-Onion-Solutions/cogburn/sigma-repo-support 
Update ElastAlert Config with Default Repos
 2024-03-22 14:24:18 -06:00
m0duspwnens 81f3d69eb9 remove mmap-locked. 2024-03-22 15:55:59 -04:00
Corey Ogburn 237946e916 Specify Folder in Rule Repo 2024-03-22 13:52:20 -06:00
Corey Ogburn 3d04d37030 Update ElastAlert Config with Default Repos 2024-03-22 13:52:20 -06:00
m0duspwnens bb0da2a5c5 add additional suricata af-packet config items 2024-03-22 14:34:14 -04:00
Doug Burks d6ce3851ec Merge pull request #12644 from Security-Onion-Solutions/dougburks-patch-1 
FIX: Specify that static IP address is recommended #12643
 2024-03-22 13:47:33 -04:00
Doug Burks 9c6f3f4808 FIX: Specify that static IP address is recommended #12643 2024-03-22 13:41:44 -04:00
Doug Burks 1ab56033a2 Merge pull request #12642 from Security-Onion-Solutions/fix/add-event.dataset 
FEATURE: Add event.dataset to all Events column layouts #12641
 2024-03-22 13:22:57 -04:00
Doug Burks a78a304d4f FEATURE: Add event.dataset to all Events column layouts #12641 2024-03-22 13:19:31 -04:00
DefensiveDepth 5ca9ec4b17 Enable Detections 2024-03-22 10:12:26 -04:00
weslambert 4e1543b6a8 Get only code 2024-03-22 09:56:21 -04:00
Jason Ertel 0e7d08b957 Merge pull request #12638 from Security-Onion-Solutions/jertel/logs 
disregard benign telegraf error
 2024-03-22 09:53:52 -04:00
Jason Ertel f889a089bf disregard benign telegraf error 2024-03-22 09:48:27 -04:00
Doug Burks 2b019ec8fe Merge pull request #12634 from Security-Onion-Solutions/dougburks-patch-1 
FEATURE: Add Events column layout for event.module system #12628
 2024-03-22 05:52:23 -04:00
Wes 5934829e0d Include pfsense config 2024-03-21 20:08:33 +00:00
Wes 486a633dfe Add pfsense Suricata config 2024-03-21 20:07:59 +00:00
weslambert 77ac342786 Merge pull request #12632 from Security-Onion-Solutions/fix/remove_temp_yara 
Remove temp YARA
 2024-03-21 10:11:32 -04:00
weslambert 8429a364dc Remove Strelka rules watch 2024-03-21 10:09:36 -04:00
weslambert 1568f57096 Remove Strelka config 2024-03-21 10:07:27 -04:00
weslambert f431e9ae08 Remove Strelka config 2024-03-21 10:06:25 -04:00
Josh Brower 4b03d088c3 Merge pull request #12611 from Security-Onion-Solutions/2.4/enable-detections 
Change Detections defaults
 2024-03-21 08:04:03 -04:00
DefensiveDepth 4a33234c34 Default update to 24 hours 2024-03-21 07:26:19 -04:00
Doug Burks 778997bed4 FEATURE: Add Events column layout for event.module system #12628 2024-03-20 17:07:37 -04:00
Doug Burks 655d3e349c Merge pull request #12627 from Security-Onion-Solutions/dougburks-patch-1 
FIX: Annotations for BPF and Suricata PCAP #12626
 2024-03-20 16:11:33 -04:00
Doug Burks f3b921342e FIX: Annotations for BPF and Suricata PCAP #12626 2024-03-20 16:06:25 -04:00
Doug Burks fff4d20e39 Update soc_suricata.yaml 2024-03-20 16:03:45 -04:00
Doug Burks d2fb067110 FIX: Annotations for BPF and Suricata PCAP #12626 2024-03-20 15:57:32 -04:00
Doug Burks 876690a9f6 FIX: Annotations for BPF and Suricata PCAP #12626 2024-03-20 15:49:46 -04:00
Jason Ertel 4c2f2759d4 Merge pull request #12601 from Security-Onion-Solutions/jertel/suripcap 
reschedule close/lock jobs
 2024-03-20 12:11:15 -04:00
Mike Reeves dd603934bc Merge pull request #12619 from Security-Onion-Solutions/TOoSmOotH-patch-1 
Update VERSION
 2024-03-20 11:06:05 -04:00
Mike Reeves d4d17e1835 Update VERSION 2024-03-20 11:04:40 -04:00
Mike Reeves 7779a95341 Merge pull request #12617 from Security-Onion-Solutions/2.4/main 
fix merges
 2024-03-20 10:53:09 -04:00
Mike Reeves 68ea2836dd Merge pull request #12615 from Security-Onion-Solutions/2.4.60 
2.4.260
 2024-03-20 10:43:08 -04:00
Mike Reeves bb3bbd749c 2.4.260 2024-03-20 10:20:04 -04:00
DefensiveDepth d84af803a6 Enable Autoupdates 2024-03-20 08:48:31 -04:00
DefensiveDepth 020eb47026 Change Detections defaults 2024-03-19 13:53:37 -04:00