Commit Graph

10877 Commits

Author SHA1 Message Date
weslambert
f85fb5ecf9 Remove double quotes to fix issue with file path sourcing from 'localfile.py' 2022-12-08 16:35:24 -05:00
Jason Ertel
1716cb0297 Merge pull request #9333 from Security-Onion-Solutions/jertel/mergedev
Jertel/mergedev
2022-12-08 09:17:20 -05:00
Jason Ertel
0ec366f075 clear hotfix 2022-12-08 09:15:41 -05:00
Jason Ertel
e9b9e128c6 Merge branch 'master' into jertel/mergedev 2022-12-08 09:14:08 -05:00
Mike Reeves
ef15de130a Merge pull request #9329 from Security-Onion-Solutions/hotfix/2.3.190
Hotfix/2.3.190
2.3.190-20221207
2022-12-08 09:08:18 -05:00
Mike Reeves
e975ee0a8e Merge pull request #9328 from Security-Onion-Solutions/mike4
2.3.190 hotfix
2022-12-07 16:22:05 -05:00
Mike Reeves
da94ddca13 2.3.190 hotfix 2022-12-07 16:17:57 -05:00
Mike Reeves
6e94751c65 Merge pull request #9327 from Security-Onion-Solutions/jertel/surifilecheck
Switch back to older style redirect due to incompatibility with Ub 18
2022-12-07 14:10:30 -05:00
Jason Ertel
d48d473f43 Switch back to older style redirect due to incompatibility with Ub 18 2022-12-07 14:06:24 -05:00
Jason Ertel
cff5a83ad5 Merge pull request #9324 from Security-Onion-Solutions/jertel/surifilecheck
Use original style due to pgrep conflict with cron
2022-12-07 12:06:26 -05:00
Jason Ertel
225b7e359c Use original style due to pgrep conflict with cron 2022-12-07 11:53:42 -05:00
Mike Reeves
9a616caf53 Merge pull request #9322 from Security-Onion-Solutions/mike
2.3.190 hotfix
2022-12-07 11:15:30 -05:00
Mike Reeves
0aab268801 2.3.190 hotfix 2022-12-07 11:12:13 -05:00
Mike Reeves
0bb7f5c5e3 Merge pull request #9320 from Security-Onion-Solutions/TOoSmOotH-patch-3
Update HOTFIX
2022-12-07 09:21:17 -05:00
Mike Reeves
4aff1f0fdb Update HOTFIX 2022-12-07 09:19:51 -05:00
Jason Ertel
35ca08ea88 Merge pull request #9315 from Security-Onion-Solutions/jertel/surifilecheck
Suricata support for filecheck; reduce cron noise
2022-12-07 08:17:19 -05:00
Jason Ertel
7b05627d5c Suricata support for filecheck; reduce cron noise 2022-12-07 07:58:32 -05:00
Mike Reeves
e3c1b6dbba Merge pull request #9306 from Security-Onion-Solutions/TOoSmOotH-patch-2
Update init.sls
2022-12-06 13:38:35 -05:00
Mike Reeves
f0c3b876a9 Update init.sls 2022-12-06 13:35:03 -05:00
Mike Reeves
531423f49a Update init.sls 2022-12-06 13:25:03 -05:00
Jason Ertel
dfad5a748c Merge pull request #9303 from Security-Onion-Solutions/jertel/surifilecheck
Jertel/surifilecheck
2022-12-06 11:52:36 -05:00
Jason Ertel
819b39c0bb Update hotfix 2022-12-06 11:41:00 -05:00
Jason Ertel
0dd2e51e83 Ensure Suricata move events get picked up 2022-12-06 11:39:58 -05:00
Mike Reeves
f7730741c2 Merge pull request #9297 from Security-Onion-Solutions/TOoSmOotH-patch-1
Update VERSION
2022-12-05 16:12:55 -05:00
Mike Reeves
cb2d6b7876 Update VERSION 2022-12-05 16:07:12 -05:00
Mike Reeves
93ca7548f8 Merge pull request #9273 from Security-Onion-Solutions/dev
2.3.190
2.3.190-20221205
2022-12-05 15:17:47 -05:00
Mike Reeves
9cbbed1038 Merge pull request #9294 from Security-Onion-Solutions/2.3.190a
2.3.190
2022-12-05 13:03:23 -05:00
Mike Reeves
967fd30bb1 2.3.190 2022-12-05 13:00:55 -05:00
weslambert
6c8c8a2d8e Merge pull request #9292 from Security-Onion-Solutions/fix/strelka_disable_yara_rules_causing_errors
Disable additional YARA rules that are causing compilation errors
2022-12-05 11:31:23 -05:00
weslambert
8bb3b22993 Disable additional YARA rules there are causing compilation errors 2022-12-05 11:30:22 -05:00
Jason Ertel
5b6182c003 Merge pull request #9289 from Security-Onion-Solutions/jertel/filechek
Update filecheck to support Suricata extracted files
2022-12-05 10:59:44 -05:00
Jason Ertel
69c5a9dd90 ensure tmp files are not processed 2022-12-05 10:31:09 -05:00
Jason Ertel
86c31c129a add suricata to socore group 2022-12-05 10:27:42 -05:00
Jason Ertel
483a9d477f undo filecheck location move 2022-12-05 10:15:15 -05:00
Jason Ertel
d7f60a0e58 only check files on inotify 2022-12-05 10:01:40 -05:00
Jason Ertel
f06443f3dd add suricata to socore group 2022-12-05 09:57:24 -05:00
Jason Ertel
fe798138e3 add suricata to socore group 2022-12-05 09:50:35 -05:00
Jason Ertel
e9bb60dedb fix filecheck for suricata deployments 2022-12-05 09:28:25 -05:00
Jason Ertel
992ced685f fix filecheck for suricata deployments 2022-12-05 09:27:31 -05:00
Jason Ertel
592bbf4217 fix filecheck for suricata deployments 2022-12-05 09:21:08 -05:00
Mike Reeves
eacf6238d8 Merge pull request #9274 from Security-Onion-Solutions/2.3.190
2.3.190
2022-12-02 15:33:53 -05:00
Mike Reeves
0a7ada314d 2.3.190 2022-12-02 15:31:42 -05:00
Mike Reeves
c8edb43748 Merge pull request #9272 from Security-Onion-Solutions/2.3.190
2.3.190
2022-12-02 15:28:02 -05:00
Mike Reeves
f112663a76 2.3.190 2022-12-02 15:21:42 -05:00
Ben Allen
a1b2c28a42 Check privileges much earlier 2022-12-02 14:08:22 -05:00
weslambert
4311d5135b Merge pull request #9269 from Security-Onion-Solutions/fix/zeek_scripts_bzar_remove_by_default
Don't load BZAR script(s) by default
2022-12-02 11:02:07 -05:00
weslambert
2b2d39c869 Don't load BZAR script(s) by default 2022-12-02 10:46:45 -05:00
Mike Reeves
fcc0534572 Merge pull request #9267 from Security-Onion-Solutions/TOoSmOotH-patch-4
Update init.sls
2022-12-02 09:41:03 -05:00
Mike Reeves
a3f9859fdb Update init.sls 2022-12-02 09:38:13 -05:00
Doug Burks
cf5d5e4fc2 Merge pull request #9257 from Security-Onion-Solutions/dougburks-patch-1
Disable ecat_arp_info by default in so-zeek-logs and so-whiptail
2022-12-01 07:31:47 -05:00