c1258f9a92
Merge remote-tracking branch 'origin/2.4/dev' into 2450soup
2024-02-13 11:09:24 -05:00
92634724c4
move rm
2024-02-13 11:09:08 -05:00
3efaba1104
modify soup to update soup scripts without using salt
2024-02-13 11:04:26 -05:00
ea80469c2d
Detection Default queries
2024-02-12 19:39:55 -05:00
0ad39a7e32
FEATURE: Add new SOC action to show process ancestry #12345
2024-02-12 19:18:29 -05:00
20d2f3b97e
Update Sublime action in defaults.yaml to use i18n
2024-02-12 19:13:32 -05:00
ccb14485a3
Fix conflicting id
2024-02-12 19:06:19 -05:00
5102269440
Update defaults
2024-02-12 16:44:54 -05:00
5a4e11b2f8
Update soup
...
Remove a function that isn't used any more
2024-02-12 16:09:47 -05:00
e713b4c660
Merge pull request #12346 from Security-Onion-Solutions/reyesj2-patch-1
...
Remove unused file
2024-02-12 16:07:31 -05:00
f91cb5b81f
Merge pull request #12290 from petiepooo/fix-remove-intca-symlink
...
fix: also remove intca symlink
2024-02-12 12:33:13 -05:00
4b697b2406
Remove unused file
2024-02-12 09:28:48 -05:00
c04f5a3f0f
Merge pull request #12268 from Security-Onion-Solutions/feature/fleet-artifacts
...
Feature/fleet artifacts
2024-02-12 08:58:14 -05:00
cc0f25a4f7
Wait for ES to be ready
2024-02-11 13:30:20 -05:00
eafb5cf15e
Change to file_root
2024-02-11 13:18:20 -05:00
2b2aa30ac1
Merge pull request #12332 from Security-Onion-Solutions/reyesj2/sod-putty
...
Add putty to SOD
2024-02-10 20:41:03 -05:00
66ac36a944
Update soup
2024-02-10 11:07:26 -05:00
feabb7c51f
Merge remote-tracking branch 'origin/2.4/dev' into feature/fleet-artifacts
2024-02-10 10:57:46 -05:00
64f6d0fba9
Updated Detection's ES Mappings
...
Detection's now have a License field and the Comment model is defined now.
2024-02-09 14:20:07 -07:00
94b6e781bb
Merge pull request #12337 from Security-Onion-Solutions/salt3006.6v2
...
Salt3006.6v2
2024-02-09 15:45:39 -05:00
304ae49251
fix source
2024-02-09 12:41:23 -05:00
213ac822a8
create dir and chown
2024-02-09 10:54:07 -05:00
2143881c0b
specify *.rules
2024-02-09 10:22:25 -05:00
5903ae596c
move suricata rules to /opt/so/rules/nids/suri
2024-02-09 09:47:23 -05:00
654602bf80
Fixup shell
2024-02-09 09:30:18 -05:00
3c9d6da1d8
add putty to sod packages.sls
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2024-02-08 22:05:37 -05:00
683abf0179
Rework naming
2024-02-08 13:24:25 -05:00
29174566f3
WIP: Updated Detection Mappings, Changed Engine to Language
...
Detection mappings updated to include the removal of Note and the addition of Tags, Ruleset, and Language.
SOC defaults updated to use language based queries rather than engine and show the language column instead of the engine column in results.
2024-02-08 09:44:56 -07:00
8d0e8789bd
Use salt file roots
2024-02-08 09:54:51 -05:00
503a09f150
Merge remote-tracking branch 'origin/2.4/dev' into feature/fleet-artifacts
2024-02-08 09:45:21 -05:00
81a3e95914
Fixup sigma pipelines
2024-02-07 16:42:16 -05:00
f02f61c6dd
Merge pull request #12325 from Security-Onion-Solutions/salt3006.6
...
Salt3006.6
2024-02-07 16:33:56 -05:00
d3d2305f00
FEATURE: Add new dashboards for community_id and firewall auth #12323
2024-02-07 16:08:27 -05:00
7e3187c0b8
Fixup sigma pipelines
2024-02-07 15:35:31 -05:00
b7b501d289
Add Sigma pipelines
2024-02-07 15:02:52 -05:00
6534f392a9
update backup filename
2024-02-07 14:25:28 -05:00
478fb6261e
Merge remote-tracking branch 'origin/2.4/dev' into salt3006.6
2024-02-07 14:15:11 -05:00
e42e07b245
update salt mine after salt-master restarts
2024-02-07 13:05:45 -05:00
f97d0f2f36
add /opt/so/rules/ to files_roots
2024-02-07 09:25:56 -05:00
24fd3ef8cc
uopdate error message
2024-02-06 16:22:13 -05:00
b3f6153667
update so-yaml tests
2024-02-06 16:15:54 -05:00
7106095128
FEATURE: Improve Correlate and Hunt actions on SOC Actions menu #12315
2024-02-06 15:39:23 -05:00
9d62ade32e
update so-yaml tests
2024-02-06 11:14:27 -05:00
2643ae08a7
add append to list
2024-02-05 17:54:30 -05:00
378c99ae88
Fix bindings
2024-02-02 18:27:49 -05:00
8f81c9eb68
Updating config for Detection(s)
2024-02-02 11:49:58 -07:00
fe196b5661
Add SOC Config for Detections
2024-02-01 12:22:50 -05:00
61ee41e431
Merge remote-tracking branch 'origin/2.4/dev' into salt3006.6
2024-02-01 11:07:06 -05:00
0d5db58c86
upgrade salt3006.6
2024-02-01 10:32:41 -05:00
3d478b92b2
Merge pull request #12294 from Security-Onion-Solutions/jppffa
...
Jppffa
2024-02-01 09:47:18 -05:00
m0duspwnens
Josh Brower
Doug Burks
Mike Reeves
Jorge Reyes
Corey Ogburn