Commit Graph

11263 Commits

Author SHA1 Message Date
Mike Reeves
e52b54720a Allow auth for redis check for tgraf 2023-01-04 14:26:24 -05:00
Mike Reeves
5afad52b3f Allow auth for redis check for tgraf 2023-01-04 14:18:08 -05:00
Mike Reeves
9bc08661c5 Allow auth for redis check for tgraf 2023-01-04 14:15:53 -05:00
Mike Reeves
48a3f4e261 Allow auth for redis check for tgraf 2023-01-04 14:14:10 -05:00
Doug Burks
723362e685 Merge pull request #9514 from Security-Onion-Solutions/fix/jinja-whitespace-2.4
fix jinja whitespace 2.4
2023-01-04 13:56:24 -05:00
doug
7ba4bdd87b fix jinja whitespace 2023-01-04 13:50:25 -05:00
Mike Reeves
831300b540 Require password auth for redis access 2023-01-04 11:02:40 -05:00
Doug Burks
4c1fc4c679 Merge pull request #9511 from Security-Onion-Solutions/fix/sysmon-fields-2.4
Improve default sysmon fields and add new network_connection fields
2023-01-04 07:58:16 -05:00
Doug Burks
5754365c6d Improve default sysmon fields and add new network_connection fields 2023-01-04 07:42:24 -05:00
Mike Reeves
761fbd0edf Merge pull request #9504 from Security-Onion-Solutions/TOoSmOotH-patch-4
Update soc_global.yaml
2023-01-03 12:24:58 -05:00
Mike Reeves
08d7b24fb4 Update soc_global.yaml 2023-01-03 12:17:51 -05:00
Mike Reeves
df89445ab5 Update soc_global.yaml 2023-01-03 12:17:14 -05:00
m0duspwnens
203e612452 enable icc and hostbinding on sosbridge 2023-01-03 11:21:05 -05:00
weslambert
2c3bd6e3fd Merge pull request #9502 from Security-Onion-Solutions/fix/elasticsearch_ingest_pipeline_rita_beacon_2_4
Update RITA beacon parsing
2023-01-03 11:14:04 -05:00
m0duspwnens
c35a3e122f add ip to container.add containers to sosbridge 2023-01-03 11:13:50 -05:00
Wes
c8ff2c7a06 Update RITA beacon parsing 2023-01-03 16:03:49 +00:00
Doug Burks
3c91d842f5 Merge pull request #9499 from Security-Onion-Solutions/fix/sysmon-parsing-2.4
FIX: Sysmon logs are missing event.category and event.dataset #8194
2023-01-03 09:05:55 -05:00
doug
4e5d1d587e update sysmon ingest parser and Sysmon File dashboard 2023-01-03 09:02:17 -05:00
Jason Ertel
8d797ad9df Merge pull request #9490 from Security-Onion-Solutions/kilo
Ensure create/update dates are both reset when an admin sets a user pass
2022-12-30 11:47:01 -05:00
Jason Ertel
a89976779d Ensure create/update dates are both reset when an admin sets a user's password 2022-12-30 11:30:09 -05:00
Mike Reeves
058b4013aa Merge pull request #9470 from Security-Onion-Solutions/kilo
Kilo
2022-12-23 10:37:22 -05:00
Jason Ertel
136867c96a ensure zombie pipe is destroyed before SOC restarts 2022-12-23 10:27:49 -05:00
Mike Reeves
1b946ced7f Merge pull request #9469 from Security-Onion-Solutions/TOoSmOotH-patch-3
Update soc_global.yaml
2022-12-23 08:58:07 -05:00
Mike Reeves
75ffd1f56b Update soc_global.yaml 2022-12-23 08:55:19 -05:00
Doug Burks
f335e7e477 Merge pull request #9466 from Security-Onion-Solutions/2.4/fix-grafana-playbook-links
Remove Grafana and Playbook links for Import mode
2022-12-22 16:09:46 -05:00
Doug Burks
5be074bbea Remove Grafana and Playbook links for Import mode 2022-12-22 15:45:25 -05:00
m0duspwnens
24876eecd9 change refs from sosnet to sosbridge 2022-12-22 14:02:40 -05:00
Mike Reeves
3f0ded0638 Merge pull request #9464 from Security-Onion-Solutions/mkr24
Add global annotation and influx support
2022-12-22 13:57:56 -05:00
Mike Reeves
cd77e71d8d Create annotation file for global settings 2022-12-22 13:37:41 -05:00
Mike Reeves
78f851e6c2 Create annotation file for global settings 2022-12-22 13:35:37 -05:00
Doug Burks
b02ba7edf7 Merge pull request #9463 from Security-Onion-Solutions/2.4/fix-grafana-eval
Enable Grafana in EVAL mode
2022-12-22 13:30:54 -05:00
m0duspwnens
90882ce1db disable docker from managing iptables 2022-12-22 13:26:10 -05:00
Mike Reeves
a924d48408 Specify Influxdb host 2022-12-22 13:12:19 -05:00
Mike Reeves
308228620a Specify Influxdb host 2022-12-22 13:05:33 -05:00
Mike Reeves
4620cd5edf Merge pull request #9462 from Security-Onion-Solutions/mkr24
Modify manager for repo
2022-12-22 13:01:58 -05:00
Doug Burks
2df4755fef Enable Grafana in EVAL mode 2022-12-22 12:54:57 -05:00
Mike Reeves
cf02b8e191 Modify manager for repo 2022-12-22 10:34:33 -05:00
Jason Ertel
a077645bb4 Merge branch '2.4/dev' into kilo 2022-12-22 10:27:13 -05:00
Jason Ertel
b6f37f8499 Correct indentation of client section 2022-12-22 10:26:51 -05:00
Doug Burks
f1d31a0c41 Merge pull request #9459 from Security-Onion-Solutions/2.4/fix-influxdb-telegraf
Make influxdb and telegraf consistent across import and eval modes
2022-12-22 10:26:36 -05:00
Doug Burks
e95034886e add influxdb and telegraf to import mode 2022-12-22 09:49:57 -05:00
Doug Burks
9352854fe4 enable influxdb for eval and import modes 2022-12-22 09:48:38 -05:00
Doug Burks
75e16963c8 add influxdb and telegraf to import mode 2022-12-22 09:47:47 -05:00
Doug Burks
dfd5947051 add influxdb and telegraf to import mode 2022-12-22 09:46:27 -05:00
m0duspwnens
b4908e2bb9 add iptables.jinja 2022-12-22 09:31:45 -05:00
Jason Ertel
ba13ad7151 Merge pull request #9454 from Security-Onion-Solutions/kilo
fix redis defaults to force string keys instead of numeric
2022-12-21 18:16:40 -05:00
Jason Ertel
38634fde17 fix redis defaults to force string keys instead of numeric 2022-12-21 18:15:17 -05:00
Jason Ertel
8b6006e9c3 fix redis defaults to force string keys instead of numeric 2022-12-21 18:14:18 -05:00
Jason Ertel
3fd210463e fix redis defaults to force string keys instead of numeric 2022-12-21 18:11:39 -05:00
Doug Burks
f99279ca24 Merge pull request #9453 from Security-Onion-Solutions/feature/improve-dashboards-2.4
FEATURE: Improve SOC Dashboards #9450 2.4
2022-12-21 15:46:11 -05:00