Jason Ertel
|
66563a4da0
|
zeek networks will only ever have one HOME_NETWORKS setting
|
2024-05-01 09:31:11 -04:00 |
|
Jason Ertel
|
d0e140cf7b
|
zeek networks will only ever have one HOME_NETWORKS setting
|
2024-05-01 09:30:52 -04:00 |
|
Jason Ertel
|
87c6d0a820
|
zeek networks will only ever have one HOME_NETWORKS setting
|
2024-05-01 09:29:36 -04:00 |
|
Jason Ertel
|
72db369fbb
|
Merge branch '2.4/dev' into jertel/wf
|
2024-04-30 15:16:41 -04:00 |
|
Jason Ertel
|
84db82852c
|
annotation updates for custom settings
|
2024-04-30 15:14:56 -04:00 |
|
coreyogburn
|
ea4750d8ad
|
Merge pull request #12882 from Security-Onion-Solutions/cogburn/community-repos
Mark Repos as Community
|
2024-04-30 09:12:25 -06:00 |
|
Doug Burks
|
4d6124f982
|
FIX: Elasticsearch min_age regex #12885
|
2024-04-30 10:18:34 -04:00 |
|
Corey Ogburn
|
ddf662bdb4
|
Mark Repos as Community
Indicate that detection rules pulled from configured repos should be marked as Community rules.
|
2024-04-29 16:22:30 -06:00 |
|
reyesj2
|
fadb6e2aa9
|
Re-add original timestamp format + ignore failures with this processor
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-04-29 16:57:48 -04:00 |
|
reyesj2
|
192d91565d
|
Update final pipeline timestamp format for event.module system events
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-04-29 16:34:29 -04:00 |
|
DefensiveDepth
|
f2c3c928fc
|
Sigma pivot fix and cleanup
|
2024-04-29 08:49:05 -04:00 |
|
m0duspwnens
|
2c7eb3c755
|
only apply ulimits to suricata container if user enable mmap-locked
|
2024-04-25 10:05:59 -04:00 |
|
weslambert
|
b424426298
|
Exclude suricata
|
2024-04-25 09:14:18 -04:00 |
|
Josh Patterson
|
03f9160fcc
|
Merge pull request #12860 from Security-Onion-Solutions/issue/12856
allow for enabled/disable of so-elasticsearch-indices-delete cronjob
|
2024-04-25 09:07:44 -04:00 |
|
m0duspwnens
|
d50de804a8
|
update annotation
|
2024-04-25 09:04:34 -04:00 |
|
weslambert
|
983ef362e9
|
Merge pull request #12858 from Security-Onion-Solutions/fix/index_sorting
Change index sorting to account for older so-prefixed indices
|
2024-04-25 08:54:22 -04:00 |
|
Josh Brower
|
d88c1a5e0a
|
Merge pull request #12861 from Security-Onion-Solutions/2.4/detectionlogs
Add runtime status logs
|
2024-04-24 20:07:32 -04:00 |
|
weslambert
|
44afa55274
|
Fix comments about deletion
|
2024-04-24 17:41:37 -04:00 |
|
weslambert
|
ab832e4bb2
|
Include logstash-prefixed indices
|
2024-04-24 17:17:53 -04:00 |
|
DefensiveDepth
|
3c3ed8b5c5
|
Add runtime status logs
|
2024-04-24 16:33:47 -04:00 |
|
m0duspwnens
|
c9d9979f22
|
allow for enabled/disable of so-elasticsearch-indices-delete cronjob
|
2024-04-24 16:18:45 -04:00 |
|
m0duspwnens
|
73b5bb1a75
|
add memlock to so-suricata container
|
2024-04-24 15:35:17 -04:00 |
|
weslambert
|
59a02635ed
|
Change index sorting
|
2024-04-24 15:18:49 -04:00 |
|
m0duspwnens
|
13a6520a8c
|
mmap-locked default no
|
2024-04-24 13:50:12 -04:00 |
|
m0duspwnens
|
4b7f826a2a
|
quote is so true becomes yes
|
2024-04-24 13:29:55 -04:00 |
|
m0duspwnens
|
0bd0c7b1ec
|
allow for mmap-locked to be configured
|
2024-04-24 13:26:25 -04:00 |
|
weslambert
|
1b3a0a3de8
|
Remove hot max_age
|
2024-04-24 10:11:02 -04:00 |
|
weslambert
|
75b5e16696
|
Update description, type, and regex
|
2024-04-24 09:14:39 -04:00 |
|
weslambert
|
8a0a435700
|
Fix warm description
|
2024-04-24 08:35:19 -04:00 |
|
weslambert
|
691b02a15e
|
Fix warm description
|
2024-04-23 10:40:09 -04:00 |
|
DefensiveDepth
|
58ddd55123
|
Exclude yara runtime log
|
2024-04-23 07:28:07 -04:00 |
|
Jorge Reyes
|
d402943403
|
Merge pull request #12773 from Security-Onion-Solutions/reyesj2/kismet
Kismet integration for WiFi devices
|
2024-04-22 15:59:22 -04:00 |
|
Josh Brower
|
64c43b1a55
|
Merge pull request #12805 from Security-Onion-Solutions/2.4/detectiondefaults
Strelka fixes and more
|
2024-04-19 16:53:07 -04:00 |
|
DefensiveDepth
|
a237ef5d96
|
Update default queries
|
2024-04-19 16:33:35 -04:00 |
|
Doug Burks
|
406dda6051
|
Update so-elasticsearch-cluster-space-used
|
2024-04-18 11:48:15 -04:00 |
|
Doug Burks
|
229a989914
|
Update so-elasticsearch-cluster-space-total
|
2024-04-18 11:47:01 -04:00 |
|
DefensiveDepth
|
6c6647629c
|
Refactor yara for compilation
|
2024-04-18 11:32:17 -04:00 |
|
Doug Burks
|
8d9aae1983
|
FEATURE: Add queue=True to so-checkin so that it will wait for any running states #12815
|
2024-04-18 09:28:30 -04:00 |
|
Mike Reeves
|
67a57e9df7
|
Update limited-analyst.json
|
2024-04-17 13:14:45 -04:00 |
|
DefensiveDepth
|
ff28476191
|
Fix compile_yara path
|
2024-04-16 13:10:17 -04:00 |
|
DefensiveDepth
|
8cc4d2668e
|
Move compile_yara
|
2024-04-16 12:52:14 -04:00 |
|
DefensiveDepth
|
dbfb178556
|
Add test
|
2024-04-16 12:22:53 -04:00 |
|
Josh Brower
|
5e8b16569f
|
Merge pull request #12793 from Security-Onion-Solutions/2.4/detectiondefaults
Add docs for ruleset change
|
2024-04-12 13:54:06 -04:00 |
|
DefensiveDepth
|
f5e42e73af
|
Add docs for ruleset change
|
2024-04-12 13:30:20 -04:00 |
|
Josh Brower
|
5b81a73e58
|
Merge pull request #12791 from Security-Onion-Solutions/2.4/detectiondefaults
Fix fingerprint paths
|
2024-04-12 09:01:38 -04:00 |
|
DefensiveDepth
|
49ccd86c39
|
Fix fingerprint paths
|
2024-04-12 08:35:44 -04:00 |
|
reyesj2
|
55cf90f477
|
merge 2.4/dev
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-04-11 14:44:59 -04:00 |
|
reyesj2
|
c269fb90ac
|
Added a Kismet Wifi devices dashboard for an overview of kismet data
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-04-11 14:41:54 -04:00 |
|
Mike Reeves
|
1250a728ac
|
Merge pull request #12769 from Security-Onion-Solutions/TOoSmOotH-patch-3
Update analyst.json
|
2024-04-11 14:30:17 -04:00 |
|
reyesj2
|
68e016090b
|
Fix network.wireless.ssid not parsing
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-04-11 13:21:54 -04:00 |
|