16257 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Jorge Reyes	95d3a2d834	Merge pull request #14328 from Security-Onion-Solutions/reyesj2-patch-2 ... install bc package	2025-03-04 09:03:02 -06:00
reyesj2	e1c8bee71a	install bc package	2025-03-04 08:58:41 -06:00
Doug Burks	1c96449ad9	Merge pull request #14327 from Security-Onion-Solutions/dougburks-patch-1 ... FIX: Elastic Agent Security Events dashboard should reference user.effective.name #14325	2025-03-04 07:10:41 -05:00
Doug Burks	44535cba8c	FIX: Elastic Agent Security Events dashboard should reference user.effective.name #14325	2025-03-04 06:46:56 -05:00
Jorge Reyes	3f4a5a1b28	Merge pull request #14320 from Security-Onion-Solutions/reyesj2/zeekparslin ... zeek traceroute & ntp	2025-03-03 10:56:15 -06:00
reyesj2	4bd83f8983	zeek traceroute & ntp ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2025-03-03 10:48:06 -06:00
Doug Burks	206acbe618	Merge pull request #14312 from Security-Onion-Solutions/dougburks-patch-1 ... FIX: SOC Actions for process.entity_id value must be quoted #14311	2025-03-03 07:09:45 -05:00
Doug Burks	e53f4fd1f1	Update defaults.yaml to quote the process.entity_id value	2025-03-02 05:54:30 -05:00
Jorge Reyes	573a2a5595	Merge pull request #14307 from Security-Onion-Solutions/reyesj2/esmngdint	2025-02-27 17:13:26 -06:00
reyesj2	9bc64bf453	managed int multiline input	2025-02-27 16:48:07 -06:00
Mike Reeves	2ffaf2f601	Add hunt queries	2025-02-27 12:42:03 -05:00
Mike Reeves	4696152f78	Add hunt queries	2025-02-27 12:31:51 -05:00
Mike Reeves	a0944f8359	Add hunt queries	2025-02-27 12:17:57 -05:00
Mike Reeves	1fdbe987b8	Add hunt queries	2025-02-27 12:15:37 -05:00
Mike Reeves	40303c2d78	Add hunt queries	2025-02-27 12:10:59 -05:00
Mike Reeves	4b5048bd80	Add hunt queries	2025-02-27 11:57:57 -05:00
Mike Reeves	9d31050907	roll back SOC changes	2025-02-27 11:32:59 -05:00
Mike Reeves	e930d1dec6	roll back SOC changes	2025-02-27 11:28:06 -05:00
Mike Reeves	1d3bae4a7a	Add additional entries for actions	2025-02-27 11:15:51 -05:00
Mike Reeves	d950e4ebb3	Add additional entries for actions	2025-02-27 11:11:56 -05:00
Mike Reeves	3ba82bd5a4	Fix actions	2025-02-27 11:04:47 -05:00
Jason Ertel	bc969c1ca2	Merge pull request #14302 from Security-Onion-Solutions/jertel/wip ... more false positives	2025-02-27 08:00:49 -05:00
Jason Ertel	772aa7379f	more false positives	2025-02-27 07:55:22 -05:00
Mike Reeves	6c00cdd726	Fix healthlink	2025-02-26 16:15:00 -05:00
Mike Reeves	8bc500e4da	soc	2025-02-26 14:16:42 -05:00
Mike Reeves	25217c3262	soc	2025-02-26 14:14:25 -05:00
Mike Reeves	0c2797ecdc	soc	2025-02-26 13:49:30 -05:00
Mike Reeves	101f6e744a	sensoroni	2025-02-26 13:44:35 -05:00
Mike Reeves	c5e0b8a42e	sensoroni	2025-02-26 13:40:24 -05:00
Mike Reeves	6d7e0a7a72	sensoroni	2025-02-26 13:39:18 -05:00
Mike Reeves	2bc2e86b01	actions	2025-02-26 13:36:16 -05:00
Mike Reeves	6fec217068	actions	2025-02-26 13:34:32 -05:00
Mike Reeves	ee1af39c55	elastalert	2025-02-26 13:17:08 -05:00
Mike Reeves	a5ae481ea4	globals	2025-02-26 13:10:57 -05:00
Jorge Reyes	f8d19301be	Merge pull request #14300 from Security-Onion-Solutions/betrfix ... default capinfos to use start/end time arg	2025-02-26 08:32:46 -06:00
reyesj2	80fed1e045	default capinfos to use start/end time arg	2025-02-25 21:47:56 -06:00
Jason Ertel	a94d657251	Merge pull request #14296 from Security-Onion-Solutions/jertel/wip ... annotation/config updates	2025-02-25 17:04:13 -05:00
Jason Ertel	9dafa062f8	annotation/config updates	2025-02-25 17:00:41 -05:00
Jorge Reyes	c8a6aa42fb	Merge pull request #14290 from Security-Onion-Solutions/reyesj2-patch-41 ... allow installing integrations that require an elastic license	2025-02-24 15:24:38 -06:00
reyesj2	17edc06987	allow installing integrations that require an elastic license	2025-02-24 14:45:43 -06:00
Jorge Reyes	a60afdbaa5	Merge pull request #14288 from Security-Onion-Solutions/reyesj2-patch-41 ... missing metadata field	2025-02-24 10:31:42 -06:00
reyesj2	e2772e899e	component template missing metadata field	2025-02-24 10:24:11 -06:00
Jorge Reyes	43f86e5e37	Merge pull request #14287 from Security-Onion-Solutions/reyesj2-patch-41 ... elasticsearch templates load	2025-02-24 09:11:58 -06:00
reyesj2	d7c06e5ff4	run elasticsearch state, right before completing soup to ensure templates for optional integrations are loaded	2025-02-24 09:02:56 -06:00
reyesj2	3f2b0973af	manually create unused logs-soc@package for successful elasticsearch templates load	2025-02-24 08:59:59 -06:00
Josh Brower	ac841077c2	Merge pull request #14281 from Security-Onion-Solutions/2.4/patch3 ... Remove old defend json	2025-02-23 15:03:05 -05:00
Josh Brower	6d0350793d	Remove old defend json	2025-02-23 14:02:17 -05:00
Jason Ertel	d74f9183a0	Merge pull request #14279 from Security-Onion-Solutions/jertel/wip ... ensure override for nmcli exists in /etc	2025-02-21 17:13:56 -05:00
Jason Ertel	7155ccaf96	ensure override for nmcli exists in /etc	2025-02-21 17:10:39 -05:00
Jorge Reyes	64996db86b	Merge pull request #14277 from Security-Onion-Solutions/reyesj2-patch-40 ... move removal of eaintegrations.txt to up_to_2.4.130	2025-02-21 14:07:31 -06:00