14476 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Mike Reeves	a63fca727c	Update soc_suricata.yaml	2024-03-06 10:02:06 -05:00
Mike Reeves	f58c104d89	Update so-minion	2024-03-06 09:51:56 -05:00
Jason Ertel	5acefb5d18	Merge pull request #12511 from Security-Onion-Solutions/jertel/annotations ... PCAP annotations	2024-03-06 08:40:24 -05:00
Jason Ertel	0f12297f50	add new pcap annotations	2024-03-06 08:19:42 -05:00
Jason Ertel	12653eec8c	add new pcap annotations	2024-03-06 08:14:33 -05:00
Josh Patterson	73b45cfaf8	Merge pull request #12508 from Security-Onion-Solutions/jppsensoroni ... fix pcapspace function	2024-03-05 17:53:28 -05:00
Josh Patterson	eaef076eba	Update so-minion	2024-03-05 17:52:24 -05:00
Josh Patterson	ac9db8a392	Merge branch '2.4/dev' into jppsensoroni	2024-03-05 17:51:32 -05:00
m0duspwnens	5687fdcf57	fix pcapspace function	2024-03-05 17:46:43 -05:00
Jason Ertel	d5b08142a0	Merge pull request #12507 from Security-Onion-Solutions/jertel/annotations ... fix oinkcodes with leading zeros	2024-03-05 16:44:56 -05:00
Jason Ertel	4b5f00cef4	fix oinkcodes with leading zeros	2024-03-05 16:42:20 -05:00
weslambert	185a160df0	Merge pull request #12500 from Security-Onion-Solutions/feature/additional_integrations_5 ... Additional Integrations #5	2024-03-05 16:12:05 -05:00
Mike Reeves	b9707fc8ea	Merge pull request #12502 from Security-Onion-Solutions/TOoSmOotH-patch-5 ... Update so-minion	2024-03-05 15:10:02 -05:00
Mike Reeves	a686d46322	Update so-minion	2024-03-05 15:09:02 -05:00
Mike Reeves	6eb608c3f5	Update so-minion	2024-03-05 15:05:03 -05:00
weslambert	b9ebe6c40b	Update VERSION	2024-03-05 12:58:34 -05:00
Josh Patterson	781f96a74e	Merge pull request #12497 from Security-Onion-Solutions/jppsensoroni ... fix sensoroni for non sensor	2024-03-05 10:36:12 -05:00
m0duspwnens	c0d19e11b9	fix } placement	2024-03-05 10:07:32 -05:00
m0duspwnens	1a58aa61a0	only import pcap and suricata if sensor	2024-03-05 09:54:40 -05:00
m0duspwnens	08f2b8251b	add GLOBALS.is_sensor	2024-03-05 09:53:35 -05:00
weslambert	bed42208b1	Add journald integration	2024-03-05 09:49:55 -05:00
weslambert	2a7e5b096f	Change version for foxtrot	2024-03-05 09:48:59 -05:00
weslambert	d8e8933ea0	Add AWS Security Hub template	2024-03-05 09:25:41 -05:00
weslambert	d85ac39e28	Add AWS Inspector template	2024-03-05 09:23:17 -05:00
weslambert	1514f1291e	Add AWS GuardDuty template	2024-03-05 09:21:48 -05:00
weslambert	b64d61065a	Add AWS Cloudfront template	2024-03-05 09:19:43 -05:00
Mike Reeves	58d222284e	Merge pull request #12271 from Security-Onion-Solutions/suripcap ... Suricata PCAP	2024-03-04 17:27:38 -05:00
Mike Reeves	fe238755e9	Fix df	2024-03-04 16:52:51 -05:00
Mike Reeves	018e099111	Modify setup	2024-03-04 14:53:15 -05:00
Josh Brower	9fd1653914	Merge pull request #12487 from Security-Onion-Solutions/2.4/elastic-agent-fim ... Fix FIM	2024-03-04 07:41:36 -05:00
Josh Brower	f28f269bb1	Fix FIM	2024-03-04 07:38:32 -05:00
Josh Brower	f3dce66f03	Merge pull request #12482 from Security-Onion-Solutions/2.4/sigma-pipeline ... 2.4/sigma pipeline	2024-03-01 15:29:13 -05:00
Josh Brower	d832158cc5	Drop Hashes field	2024-03-01 15:26:02 -05:00
Josh Brower	b017157d21	Add antivirus mapping	2024-03-01 14:04:56 -05:00
Jorge Reyes	d911b7bfc4	Merge pull request #12469 from Security-Onion-Solutions/reyesj2-patch-4 ... FIX: EA installers not downloadable from SOC & fix logging	2024-02-29 16:21:44 -05:00
reyesj2	53761d4dba	FIX: EA installers not downloadable from SOC + fix stg logging ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2024-02-29 16:15:26 -05:00
Mike Reeves	1fe8f3d9e4	Merge pull request #12405 from Security-Onion-Solutions/repochange ... Manage the repo files	2024-02-29 14:01:48 -05:00
Josh Brower	aa3b917368	Merge pull request #12456 from Security-Onion-Solutions/feature/detections-airgap ... Feature/detections airgap	2024-02-28 09:41:13 -05:00
Josh Brower	e2dd0f8cf1	Only update rule files if AG	2024-02-28 09:39:23 -05:00
weslambert	d1e55d5ab7	Merge pull request #12450 from Security-Onion-Solutions/fix/suricata_max_age ... Roll Suricata logs daily to prevent alerts from being deleted when not meeting size threshold	2024-02-27 17:28:07 -05:00
weslambert	df3943b465	Daily rollover	2024-02-27 17:24:27 -05:00
Josh Patterson	d5fc6ddd2c	Merge pull request #12449 from Security-Onion-Solutions/issue/12391 ... Issue/12391	2024-02-27 15:38:33 -05:00
m0duspwnens	fcc0f9d14f	redo classifications	2024-02-27 13:20:58 -05:00
Josh Brower	59af547838	Fix download location	2024-02-27 09:49:54 -05:00
Josh Brower	a817bae1e5	Merge pull request #12437 from Security-Onion-Solutions/feature/detections-airgap ... Airgap Support - Detections module	2024-02-26 16:47:26 -05:00
Josh Brower	c6baa4be1b	Airgap Support - Detections module	2024-02-26 16:19:32 -05:00
m0duspwnens	8b7f7933bd	suricata container watch classification.config	2024-02-26 15:29:13 -05:00
m0duspwnens	466dac30bb	soup for classifications	2024-02-26 12:15:17 -05:00
Doug Burks	52580fb8c4	Merge pull request #12434 from Security-Onion-Solutions/feature/improve-endpoint-columns ... Add multiple endpoint features	2024-02-26 12:05:30 -05:00
weslambert	acf7dbdabe	Merge pull request #12432 from Security-Onion-Solutions/fix/endpoint_diag_template ... Update pattern for endpoint diagnostic template	2024-02-26 12:01:29 -05:00