9659 Commits

Author	SHA1	Message	Date
reyesj2	81ce762250	delete commented block ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2024-06-24 14:06:48 -04:00
reyesj2	cb727bf48d	remove unused sbin_jinja from kafka config ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2024-06-24 13:45:13 -04:00
reyesj2	680e84851b	Re-add manager sbin_jinja file recurse ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2024-06-24 12:27:52 -04:00
reyesj2	ea771ed21b	update firewall ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2024-06-24 12:01:01 -04:00
reyesj2	c332cd777c	remove import/heavynode artifact caused by kafka cert not existing but being bound in docker. (empty dir created) ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2024-06-24 08:50:37 -04:00
Mike Reeves	9fce85c988	Merge pull request #13245 from Security-Onion-Solutions/proxysoup ... Fix soup for proxy servers	2024-06-21 16:13:02 -04:00
weslambert	bf91030204	Add option for detections without license	2024-06-21 15:33:11 -04:00
Mike Reeves	9577c3f59d	Make soup use reposync from the repo	2024-06-21 15:24:54 -04:00
Mike Reeves	77dedc575e	Make soup use reposync from the repo	2024-06-21 15:20:07 -04:00
Mike Reeves	0295b8d658	Make soup use reposync from the repo	2024-06-21 15:11:23 -04:00
Mike Reeves	6a9d78fa7c	Make soup use reposync from the repo	2024-06-21 15:10:44 -04:00
Mike Reeves	b84521cdd2	Make soup use reposync from the repo	2024-06-21 14:49:16 -04:00
Mike Reeves	ff4679ec08	Make soup use reposync from the repo	2024-06-21 14:45:06 -04:00
Mike Reeves	c5ce7102e8	Make soup use reposync from the repo	2024-06-21 14:41:27 -04:00
Mike Reeves	70c001e22b	Update so-repo-sync	2024-06-21 13:37:36 -04:00
Mike Reeves	aae1b69093	Update soc_manager.yaml	2024-06-21 12:35:01 -04:00
reyesj2	2eea671857	more precise wording in kafka annotation ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2024-06-20 16:16:55 -04:00
reyesj2	73acfbf864	update kafka annotations ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2024-06-20 16:02:45 -04:00
Doug Burks	07b9011636	Update defaults.yaml to put Process actions in logical order	2024-06-20 10:09:27 -04:00
Matthew Wright	bc2b3b7f8f	Merge pull request #13236 from Security-Onion-Solutions/mwright/licenseDropdown ... Added license presets to defaults.yaml file	2024-06-18 18:05:15 -04:00
unknown	ea02a2b868	Added license presets to defaults.yaml file	2024-06-18 16:52:00 -04:00
Jorge Reyes	ba3a6cbe87	Merge pull request #13234 from Security-Onion-Solutions/reyesj2-patch-4 ... update receiver node allowed states	2024-06-18 15:55:32 -04:00
reyesj2	268dcbe00b	update receiver node allowed states ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2024-06-18 15:44:51 -04:00
Josh Patterson	6be97f13d0	Merge pull request #13233 from Security-Onion-Solutions/minefunc ... fix ca mine_function	2024-06-18 13:58:35 -04:00
m0duspwnens	a2bb220043	fix x509 mine_function	2024-06-18 12:33:33 -04:00
reyesj2	911d6dcce1	update kafka output policy only on eligible grid types ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2024-06-18 12:09:59 -04:00
Doug Burks	de18bf06c3	FEATURE: Add new Process actions #13226	2024-06-18 10:36:41 -04:00
Jorge Reyes	73473d671d	Merge pull request #13222 from Security-Onion-Solutions/reyesj2-patch-3 ... update profile	2024-06-18 09:16:35 -04:00
DefensiveDepth	521cccaed6	Update defaults	2024-06-18 08:43:00 -04:00
reyesj2	35da3408dc	update profile ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2024-06-17 15:53:49 -04:00
reyesj2	2afc947d6c	suppress fleet policy update in soup ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2024-06-17 14:12:33 -04:00
Doug Burks	93ced0959c	FEATURE: Add more links and descriptions to SOC MOTD #13216	2024-06-17 09:25:01 -04:00
Doug Burks	6f13fa50bf	FEATURE: Add more links and descriptions to SOC MOTD #13216	2024-06-17 09:24:32 -04:00
Doug Burks	3bface12e0	FEATURE: Add more links and descriptions to SOC MOTD #13216	2024-06-17 09:23:14 -04:00
Doug Burks	b584c8e353	FEATURE: Add more links and descriptions to SOC MOTD #13216	2024-06-17 09:13:17 -04:00
reyesj2	4d1f2c2bc1	fix kafka elastic fleet output policy setup ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2024-06-14 23:04:08 -04:00
reyesj2	0b1175b46c	kafka logstash input plugin handle empty brokers list ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2024-06-14 23:03:36 -04:00
reyesj2	4e50dabc56	refix typos ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2024-06-14 23:03:06 -04:00
Jason Ertel	ce45a5926a	Merge pull request #13207 from Security-Onion-Solutions/kaffix ... Standalone logstash error	2024-06-14 18:01:35 -04:00
DefensiveDepth	7af94c172f	Change spelling	2024-06-14 16:00:22 -04:00
DefensiveDepth	7556587e35	Update rule templates	2024-06-14 15:47:57 -04:00
reyesj2	a0030b27e2	add additional retries to elasticfleet scripts ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2024-06-14 15:34:40 -04:00
reyesj2	8080e05444	on fresh install kafka nodes pillar may not have populated. Avoiding this by only generating kafka input pipeline when kafka nodes pillar is not empty ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2024-06-14 14:17:26 -04:00
DefensiveDepth	c89f1c9d95	remove multiline	2024-06-14 13:48:55 -04:00
DefensiveDepth	b7ac599a42	set to empty	2024-06-14 13:21:36 -04:00
DefensiveDepth	8363877c66	move to custom rules	2024-06-14 12:41:44 -04:00
DefensiveDepth	4bcb4b5b9c	removed unneeded import	2024-06-14 09:32:34 -04:00
DefensiveDepth	68302e14b9	add to defaults and tweaks	2024-06-14 09:28:23 -04:00
DefensiveDepth	c1abc7a7f1	Update description	2024-06-14 08:51:34 -04:00
DefensiveDepth	484717d57d	initial support for custom suricata urls and local rulesets	2024-06-14 08:42:10 -04:00