14476 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
weslambert	1d099f97d2	Update pattern for endpoint diagnostic template	2024-02-26 11:27:56 -05:00
Doug Burks	f8424f3dad	Update defaults.yaml	2024-02-26 11:22:09 -05:00
m0duspwnens	9a7e2153ee	add classification.config	2024-02-26 11:01:53 -05:00
Doug Burks	c8a95a8706	FEATURE: Add new endpoint dashboards #12428	2024-02-26 09:59:07 -05:00
Doug Burks	4df21148fc	FEATURE: Add default columns for endpoint.events datasets #12425	2024-02-26 09:40:51 -05:00
Doug Burks	ca249312ba	FEATURE: Add new SOC action for Process Info #12421	2024-02-26 09:38:14 -05:00
Josh Brower	66b815d4b2	Merge pull request #12431 from Security-Onion-Solutions/feature/brower-detections ... Add Detection AutoUpdate config	2024-02-26 08:43:33 -05:00
Josh Brower	a6bb7216f9	Add Detection AutoUpdate config	2024-02-26 08:18:42 -05:00
Josh Brower	77cb5748f6	Merge pull request #12430 from Security-Onion-Solutions/feature/sigma-pipeline ... Feature/sigma pipeline	2024-02-26 08:00:00 -05:00
Doug Burks	d6cb8ab928	update events_x_process in defaults.yaml	2024-02-23 17:09:40 -05:00
Doug Burks	daf96d7934	fix new eventFields in merged.map.jinja	2024-02-23 17:07:48 -05:00
Doug Burks	58f4fb87d0	fix new eventFields in soc_soc.yaml	2024-02-23 17:06:29 -05:00
Doug Burks	b7ef1e8af1	add more endpoint.events.x fields to soc_soc.yaml	2024-02-23 15:38:53 -05:00
Doug Burks	7da0ccf5a6	add more endpoint.events.x entries to merged.map.jinja	2024-02-23 15:35:53 -05:00
Doug Burks	65cdc1dc86	Merge pull request #12423 from Security-Onion-Solutions/jppfiec ... convert _x_ to . for soc ui to config	2024-02-23 15:22:16 -05:00
m0duspwnens	573d565976	convert _x_ to . for soc ui to config	2024-02-23 15:03:44 -05:00
Doug Burks	b8baca417b	add endpoint_x_events_x_process to defaults.yaml	2024-02-23 14:03:04 -05:00
Josh Brower	d04aa06455	Fix source.ip	2024-02-22 14:01:02 -05:00
Mike Reeves	1824d7b36d	Merge pull request #12416 from Security-Onion-Solutions/TOoSmOotH-patch-2 ... Fix Loss Calculation for Stenographer	2024-02-22 12:52:36 -05:00
Mike Reeves	e7914fc5a1	Update stenoloss.sh	2024-02-22 12:49:06 -05:00
Mike Reeves	759b2ff59e	Manage the repos	2024-02-22 10:03:51 -05:00
Josh Brower	c886e72793	Imphash mappings	2024-02-22 08:59:33 -05:00
Josh Brower	0a9022ba6a	Add hash mappings	2024-02-21 17:07:08 -05:00
Josh Patterson	d2f7946377	Merge pull request #12411 from Security-Onion-Solutions/issue/12382 ... nest under policy	2024-02-21 16:28:04 -05:00
coreyogburn	eb3432fb8b	Merge pull request #12412 from Security-Onion-Solutions/kilo ... Initial Support for Detections Module	2024-02-21 14:08:11 -07:00
Josh Brower	927ea0c9ec	Update VERSION	2024-02-21 15:56:12 -05:00
m0duspwnens	162785575c	nest under policy	2024-02-21 15:28:24 -05:00
Jason Ertel	152e7937db	Merge pull request #12408 from Security-Onion-Solutions/jertel/24template ... add missing template	2024-02-21 13:24:34 -05:00
Jason Ertel	25570e6ec2	add missing template	2024-02-21 13:18:39 -05:00
Josh Brower	1952f0f232	Merge remote-tracking branch 'origin/2.4/dev' into kilo	2024-02-21 13:11:49 -05:00
Mike Reeves	9ca0f586ae	Manage the repos	2024-02-21 11:45:02 -05:00
Jason Ertel	29778438f0	Merge pull request #12396 from Security-Onion-Solutions/jertel/glm ... add lock threads	2024-02-21 07:18:05 -05:00
Jason Ertel	6c6a362fcc	add lock threads	2024-02-20 19:14:18 -05:00
Mike Reeves	89010dacab	Merge pull request #12348 from Security-Onion-Solutions/TOoSmOotH-patch-4 ... Update soup	2024-02-20 12:10:09 -05:00
Jason Ertel	78d41c5342	Merge pull request #12386 from Security-Onion-Solutions/jertel/corricon ... replace correlate icon to avoid confusion with searcheng.in	2024-02-20 10:39:38 -05:00
Jason Ertel	4b314c8715	replace correlate icon to avoid confusion with searcheng.in	2024-02-20 10:30:09 -05:00
Mike Reeves	ed0773604c	Merge pull request #12385 from Security-Onion-Solutions/TOoSmOotH-patch-1 ... Update VERSION	2024-02-20 10:14:45 -05:00
Mike Reeves	07fcfab7ec	Update VERSION	2024-02-20 10:14:11 -05:00
Mike Reeves	5c96e30087	Merge pull request #12383 from Security-Onion-Solutions/2.4.50 ... 2.4.50	2024-02-20 09:50:09 -05:00
Mike Reeves	18b4fcca75	2.4.50	2024-02-20 09:47:05 -05:00
Josh Brower	ffb3cc87b7	Default ruleset; Descriptions	2024-02-16 11:55:10 -05:00
Josh Brower	e4dcb4a8dd	Merge remote-tracking branch 'origin/cogburn/detection_playbooks' into kilo	2024-02-15 17:50:37 -05:00
Corey Ogburn	c64f37ab67	sigmaRulePackages is now a string array	2024-02-15 10:34:07 -07:00
Josh Brower	686304f24a	Merge remote-tracking branch 'origin/2.4/dev' into kilo	2024-02-15 09:47:51 -05:00
Josh Patterson	0765320839	Merge pull request #12360 from Security-Onion-Solutions/2450soup ... `2450soup	2024-02-14 14:37:28 -05:00
m0duspwnens	a2b17d2348	move jinja to top	2024-02-14 14:27:41 -05:00
m0duspwnens	c1f467a068	handle airgap	2024-02-14 14:22:18 -05:00
m0duspwnens	7d5932ee5e	Merge remote-tracking branch 'origin/2.4/dev' into 2450soup	2024-02-14 13:29:39 -05:00
m0duspwnens	79e98e508f	pass in UPDATE_DIR as a pillar	2024-02-14 13:28:12 -05:00
Josh Patterson	cf6266a92b	Merge pull request #12354 from Security-Onion-Solutions/2450soup ... modify soup to update soup scripts using salt	2024-02-13 16:23:57 -05:00