Commit Graph

14623 Commits

Author SHA1 Message Date
Jason Ertel 8c54a19698 Merge pull request #12560 from Security-Onion-Solutions/jertel/email
auto-convert email addresses to lowercase during setup
2024-03-11 14:06:52 -04:00
Jason Ertel cd28c00d67 auto-convert email addresses to lowercase during setup 2024-03-11 13:47:31 -04:00
Jason Ertel b5d8df7fb2 auto-convert email addresses to lowercase during setup 2024-03-11 13:45:57 -04:00
m0duspwnens 907cf9f992 transition pcap 2024-03-11 12:20:28 -04:00
Josh Patterson 4355d5b659 Merge pull request #12544 from Security-Onion-Solutions/jertel/status
pcap improvements
2024-03-11 10:29:33 -04:00
Jorge Reyes 2ca96c7f4c Merge pull request #12555 from Security-Onion-Solutions/reyesj2-patch-osc
Create local salt directory
2024-03-11 09:40:20 -04:00
reyesj2 a8403c63c7 Create local salt dir for stig
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
2024-03-11 09:35:54 -04:00
weslambert 34d5954e16 Fix indent 2024-03-11 09:12:05 -04:00
Jorge Reyes f4725bf6d4 Merge pull request #12553 from Security-Onion-Solutions/reyesj2-patch-osc
Run scan against default scap security guide so that resulting score is accurate
2024-03-11 07:52:07 -04:00
Doug Burks b622cf8d23 Merge pull request #12545 from Security-Onion-Solutions/dougburks-patch-1
Update soc_pcap.yaml
2024-03-08 16:45:29 -05:00
Doug Burks a892352b61 Update soc_pcap.yaml 2024-03-08 16:43:29 -05:00
Jason Ertel a55e04e64a pcap improvements 2024-03-08 15:48:53 -05:00
Josh Brower 4a9e8265ce Merge remote-tracking branch 'origin/2.4/dev' into kilo 2024-03-08 14:48:04 -05:00
coreyogburn 68ba9a89cf Merge pull request #12542 from Security-Onion-Solutions/cogburn/yara-license
Updated RulesRepo for New Strelka Structure
2024-03-08 11:42:49 -07:00
Corey Ogburn 6f05c3976b Updated RulesRepo for New Strelka Structure 2024-03-08 11:29:46 -07:00
Doug Burks b6b6fc45e7 Merge pull request #12527 from Security-Onion-Solutions/TOoSmOotH-patch-7
Fix Space Free for Steno
2024-03-08 12:40:15 -05:00
Doug Burks e1b27a930e Merge pull request #12540 from Security-Onion-Solutions/dougburks-patch-1
FIX: Update SOC annotations for Stenographer PCAP #12539
2024-03-08 12:32:15 -05:00
Doug Burks 6680e023e4 Update soc_pcap.yaml 2024-03-08 12:16:59 -05:00
Wes e8ae609012 Add Strelka rules watch back 2024-03-08 16:27:17 +00:00
Wes fc66a54902 Add Strelka download and update scripts back 2024-03-08 16:26:14 +00:00
Wes 4e32935991 Add Strelka config back 2024-03-08 16:24:37 +00:00
Josh Patterson 7ec887a327 Merge pull request #12537 from Security-Onion-Solutions/issue/12535
allow managersearch to receiver redis and 5644
2024-03-08 10:13:27 -05:00
m0duspwnens 3eb6fe2df9 allow managersearch to receiver redis and 5644 2024-03-08 09:52:12 -05:00
Jason Ertel 6d06aa8ed6 Merge pull request #12526 from Security-Onion-Solutions/jertel/status
unswap files
2024-03-07 14:49:17 -05:00
Mike Reeves 06257b9c4a Update so-minion 2024-03-07 14:32:46 -05:00
Jason Ertel 40574982e4 unswap files 2024-03-07 14:25:43 -05:00
Jason Ertel e2567dcf8d Merge pull request #12521 from Security-Onion-Solutions/jertel/status
gracefully handle status check failure on ubuntu
2024-03-07 13:29:48 -05:00
Jason Ertel fffef9b621 gracefully handle status check failure on ubuntu 2024-03-07 12:31:51 -05:00
weslambert 1633527695 Merge pull request #12519 from Security-Onion-Solutions/fix/error_message_system_syslog
Add error.message mapping for system.syslog
2024-03-07 10:47:33 -05:00
Wes 005930f7fd Add error.message mapping for system.syslog 2024-03-07 15:41:23 +00:00
Mike Reeves b5f1733e97 Merge pull request #12513 from Security-Onion-Solutions/newsuripcap
Change Factoring for so-minion pcap disk space
2024-03-07 10:14:34 -05:00
m0duspwnens 70f3ce0536 change how maxfiles is calculated 2024-03-06 17:32:06 -05:00
reyesj2 17a75d5bd2 Run stig post remediate scan against default ol9 scap-security-guide.
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
2024-03-06 17:19:01 -05:00
m0duspwnens 583227290f fix max-files calc 2024-03-06 15:18:22 -05:00
m0duspwnens cf232534ca move suricata.pcap to suricata.config.outputs.pcap-log 2024-03-06 14:42:07 -05:00
Mike Reeves 7f1e786e3d Consolidate PCAP settings 2024-03-06 12:56:09 -05:00
Mike Reeves 9a413a2e31 Fix location of repo 2024-03-06 12:42:22 -05:00
Jason Ertel 8f36a8a4b6 Merge pull request #12514 from Security-Onion-Solutions/jertel/annotations
detections annotations
2024-03-06 11:10:21 -05:00
Jason Ertel 1cbac11fae detections annotations 2024-03-06 11:08:03 -05:00
Mike Reeves ad12093429 Fix percent calc 2024-03-06 11:05:06 -05:00
Jason Ertel 167aff24f6 detections annotations 2024-03-06 11:03:52 -05:00
Josh Brower 9e671621db Merge pull request #12510 from Security-Onion-Solutions/2.4/excludedetections
Add Exclusion toggle
2024-03-06 10:56:29 -05:00
Mike Reeves 4dfa1a5626 Move Suricata around 2024-03-06 10:35:10 -05:00
Mike Reeves f836d6a61d Update so-minion 2024-03-06 10:06:17 -05:00
Mike Reeves a63fca727c Update soc_suricata.yaml 2024-03-06 10:02:06 -05:00
Mike Reeves f58c104d89 Update so-minion 2024-03-06 09:51:56 -05:00
Jason Ertel 5acefb5d18 Merge pull request #12511 from Security-Onion-Solutions/jertel/annotations
PCAP annotations
2024-03-06 08:40:24 -05:00
Jason Ertel 0f12297f50 add new pcap annotations 2024-03-06 08:19:42 -05:00
Jason Ertel 12653eec8c add new pcap annotations 2024-03-06 08:14:33 -05:00
Josh Brower 1b47537a3f Add Exclusion toggle 2024-03-06 07:16:50 -05:00