7068 Commits

Author	SHA1	Message	Date
m0duspwnens	91da3fd797	Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/strelka	2023-03-17 08:39:10 -04:00
m0duspwnens	924d598a8a	add filecheck_runas	2023-03-17 08:38:56 -04:00
Mike Reeves	c7099280da	Merge pull request #9944 from Security-Onion-Solutions/guifixes ... Change yum to dnf	2023-03-17 08:28:26 -04:00
Mike Reeves	bd1eb9c7df	Change yum to dnf	2023-03-16 18:05:38 -04:00
m0duspwnens	dd4461daf4	remove other filecheck map import	2023-03-16 17:50:19 -04:00
m0duspwnens	a9b8877268	remove filecheckdefaults from strelka init	2023-03-16 17:15:52 -04:00
m0duspwnens	7950f692a8	Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/strelka	2023-03-16 16:41:24 -04:00
m0duspwnens	0dfbbfcf8e	fix spacing on filecheck config	2023-03-16 16:37:38 -04:00
m0duspwnens	2056ce37c6	strelka ui things	2023-03-16 16:32:41 -04:00
Josh Brower	d78128dbf4	Formatting	2023-03-16 13:11:12 -04:00
Josh Brower	a96473554d	Add IDH log ingest	2023-03-16 12:56:04 -04:00
Mike Reeves	d0955b3e91	Merge pull request #9937 from Security-Onion-Solutions/guifixes ... Re-Work Backups	2023-03-16 09:42:07 -04:00
Jason Ertel	ad2616900c	Merge pull request #9939 from Security-Onion-Solutions/kilo ... automated testing support; removal of nonexistent ScanRuby strelka scanner	2023-03-16 09:30:05 -04:00
Jason Ertel	49df376bcc	Remove non-existant Ruby scanner	2023-03-15 19:24:03 -04:00
Mike Reeves	3156b1ed0c	Re-Work Backups	2023-03-15 17:53:14 -04:00
Mike Reeves	d4f5209e39	Re-Work IDSTOOLS	2023-03-15 17:22:54 -04:00
Mike Reeves	afcd1155bf	Re-Work IDSTOOLS	2023-03-15 17:19:33 -04:00
Mike Reeves	28dc490775	Re-Work IDSTOOLS	2023-03-15 16:58:52 -04:00
Mike Reeves	02d013c0cc	Re-Work IDSTOOLS	2023-03-15 16:47:43 -04:00
Jason Ertel	49a9affe2a	Merge branch '2.4/dev' into kilo	2023-03-15 16:39:26 -04:00
Mike Reeves	0d30c14561	Re-Work IDSTOOLS	2023-03-15 16:33:33 -04:00
Jason Ertel	fbefe229c1	add test support to so-minion	2023-03-15 15:27:26 -04:00
Mike Reeves	a36a6d5659	Strelka UI components	2023-03-15 10:40:16 -04:00
m0duspwnens	f9b8c78d74	move repos to rules dir	2023-03-14 14:43:13 -04:00
m0duspwnens	7cf4e6b03b	add rules dir, change so-yar-update to save to local/salt/strelka/rules	2023-03-14 13:59:31 -04:00
m0duspwnens	5f7256c826	Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/strelka	2023-03-14 13:26:15 -04:00
m0duspwnens	b38d5df684	set default mime_db	2023-03-14 13:25:51 -04:00
weslambert	8eba3426be	Remove extra dash for 'logs-elastic_agent-metricbeat-default' key	2023-03-14 10:51:50 -04:00
weslambert	7c39938e14	Change 'elastic_agent.filebeat' to 'elastic_agent-filebeat'	2023-03-14 10:48:50 -04:00
Wes	766e6a7974	Add 'logs-windows-sysmon_operational-delete' for Windows Sysmon operational indices	2023-03-14 13:51:49 +00:00
Wes	f0d4c16b2b	Add more Elastic Agent index keys for Curator	2023-03-14 13:49:13 +00:00
Wes	412e5c0402	Add more Elastic Agent Curator action files	2023-03-14 13:46:08 +00:00
Josh Brower	fbac23c28d	Merge pull request #9925 from Security-Onion-Solutions/2.4/fiedfix ... Removes Suricata host.* fields	2023-03-14 07:38:05 -04:00
weslambert	486de12ca5	Delete logs-system-auth-syslog-close.yaml	2023-03-13 17:27:52 -04:00
weslambert	f4112b30c0	Fix index reference for system auth default	2023-03-13 17:27:06 -04:00
weslambert	bab40de58d	Fix system auth default key value	2023-03-13 17:26:05 -04:00
weslambert	785f100132	Fix system auth default key value	2023-03-13 17:25:33 -04:00
weslambert	8ade7b85fc	Fix system syslog default key value	2023-03-13 17:24:40 -04:00
weslambert	c2701f1835	Fix system syslog default key value	2023-03-13 17:24:12 -04:00
weslambert	d5bb223235	Fix system syslog delete file configuration	2023-03-13 17:10:52 -04:00
Wes	efc5832499	Add Elastic Agent default log action files	2023-03-13 20:54:38 +00:00
Wes	8d395dc465	Add Elastic Agent default data stream backing indices for management by Curator	2023-03-13 20:54:13 +00:00
m0duspwnens	9d4e1cc149	jinja for strelka	2023-03-13 16:48:21 -04:00
Josh Brower	f7be4ba31c	Remove host field from NIDS logs	2023-03-13 14:07:17 -04:00
Josh Brower	126add7ddd	Merge pull request #9922 from Security-Onion-Solutions/2.4/fieldfixes ... auto-apply firewall rules	2023-03-13 12:00:28 -04:00
Josh Brower	b3a2680847	auto-apply firewall rules	2023-03-13 11:41:36 -04:00
Wes	e105e56fac	Move data stream configuration outside of ILM policy definition	2023-03-13 13:27:02 +00:00
m0duspwnens	58343e39fa	2.4 strelka	2023-03-10 17:32:14 -05:00
weslambert	16d9478196	Add index lifecycle management policy definitions for default Elastic Agent data streams	2023-03-10 16:54:47 -05:00
Jason Ertel	5804409fcf	Merge branch '2.4/dev' into kilo	2023-03-10 15:13:57 -05:00