m0duspwnens
b1ddaa7211
support installing specified version for rhel variants. remove bootstrap -x python3 since not needed
2024-11-14 09:07:41 -05:00
m0duspwnens
33fdc23965
remove salt repo files created by saltbootstrap
2024-11-12 11:31:42 -05:00
m0duspwnens
9e5d0e88de
fix soversion path
2024-11-11 15:56:01 -05:00
m0duspwnens
69245e4fad
have soup_scripts remove old salt repo file
2024-11-11 15:31:57 -05:00
m0duspwnens
7875406da1
update bootstrap-salt for broadcom changes
2024-11-11 10:54:51 -05:00
Josh Patterson
b3ce624fff
Merge pull request #13921 from Security-Onion-Solutions/reposynccron
...
only enable repo sync cron if OEL
2024-11-08 16:16:48 -05:00
m0duspwnens
ee4405e75e
only enable repo sync cron if OEL
2024-11-08 16:13:44 -05:00
Josh Brower
f7c3957a43
Merge pull request #13920 from Security-Onion-Solutions/2.4/templaterepos
...
Fix permissions
2024-11-08 15:34:56 -05:00
defensivedepth
dcbb0e48d4
make sure its owned by socore
2024-11-08 14:34:29 -05:00
defensivedepth
74b95a0bcc
Merge remote-tracking branch 'origin/2.4/dev' into 2.4/templaterepos
2024-11-08 09:20:11 -05:00
defensivedepth
8b70aa9f0e
Fix socore permissions
2024-11-08 09:19:41 -05:00
coreyogburn
9095595db1
Merge pull request #13915 from Security-Onion-Solutions/cogburn/source-dates
...
Source Dates
2024-11-07 14:55:48 -07:00
Corey Ogburn
8334fd9c46
Source Dates
2024-11-07 14:44:45 -07:00
Josh Brower
47f9b0021c
Merge pull request #13879 from Security-Onion-Solutions/2.4/templaterepos
...
Add local custom template
2024-11-07 15:40:36 -05:00
defensivedepth
f5bd8ab585
Rewrite docs
2024-11-07 15:33:47 -05:00
Jorge Reyes
356236ba4c
Merge pull request #13912 from Security-Onion-Solutions/crowdstrike
...
fix crowdstrike integration
2024-11-07 08:53:36 -06:00
defensivedepth
28d468dd41
Merge remote-tracking branch 'origin/2.4/dev' into 2.4/templaterepos
2024-11-07 07:25:01 -05:00
reyesj2
80b82b0bd6
missing replica 0
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2024-11-06 15:24:13 -06:00
reyesj2
039d5c22ac
fix: crowdstrike integration
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2024-11-06 14:35:41 -06:00
coreyogburn
07b867df76
Merge pull request #13904 from Security-Onion-Solutions/cogburn/ignored-sids
...
Cogburn/ignored sids
2024-11-05 12:30:08 -07:00
Corey Ogburn
52a144c052
Added Help Link to Annotation for IgnoredSidRanges
2024-11-05 12:11:17 -07:00
Corey Ogburn
25d55feeef
More Detailed Description
2024-11-05 11:41:14 -07:00
Corey Ogburn
5e48ccafce
Update Default Value
2024-11-05 11:11:34 -07:00
Corey Ogburn
69dd35c30a
Add Option for Ignoring Ranges of SIDs in Suricata Integrity Check
2024-11-04 14:31:53 -07:00
Josh Patterson
d37a8d51fa
Merge pull request #13900 from Security-Onion-Solutions/saltrepo
...
setup use new salt repo
2024-11-04 13:05:58 -05:00
m0duspwnens
6e14f7b626
fix pub key name
2024-11-04 11:14:00 -05:00
m0duspwnens
083c678400
new salt repo
2024-11-04 09:46:26 -05:00
Josh Brower
6ab05e7c05
Merge pull request #13890 from Security-Onion-Solutions/2.4/templatefix
...
timestamp fix
2024-10-31 10:59:45 -04:00
defensivedepth
7896f951f3
timestamp fix
2024-10-31 10:24:58 -04:00
Josh Brower
01932d873f
Merge pull request #13883 from Security-Onion-Solutions/2.4/lookuprev2
...
2.4/lookuprev2
2024-10-31 08:46:01 -04:00
Josh Brower
84a8477c5d
Merge pull request #13887 from Security-Onion-Solutions/2.4/soupedite
...
rm eaintegration state file
2024-10-30 17:15:07 -04:00
defensivedepth
6b468eaed3
rm eaintegration state file
2024-10-30 16:52:44 -04:00
defensivedepth
c509dab5f1
Use socore user
2024-10-30 11:03:14 -04:00
Josh Brower
1940901386
Merge pull request #13882 from Security-Onion-Solutions/ipmappingses
...
add so-ip-mappings index
2024-10-30 10:28:40 -04:00
reyesj2
36fc3bbd6d
add so-ip-mappings index
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2024-10-30 10:24:11 -04:00
defensivedepth
5406a263d5
Add local custom template
2024-10-29 19:42:06 -04:00
Josh Brower
ac359839e2
Merge pull request #13877 from Security-Onion-Solutions/2.4/lookuprev2
...
Initial support for local lookup
2024-10-29 11:22:39 -04:00
defensivedepth
4c5099d429
Initial support for local lookup
2024-10-29 10:27:54 -04:00
Josh Brower
6a3e5415cf
Merge pull request #13832 from Security-Onion-Solutions/2.4/sigmapipelines
...
Add process and file creation mappings
2024-10-28 18:30:21 -04:00
coreyogburn
2c4f65009c
Merge pull request #13873 from Security-Onion-Solutions/cogburn/tuning-notes
...
Tuning Notes
2024-10-28 15:37:06 -06:00
defensivedepth
f3ca5b1c42
Remove OS-specific mappings
2024-10-28 09:19:51 -04:00
Corey Ogburn
640f53d085
Cleanup
...
Fix indentation and trailing comma.
2024-10-24 17:05:36 -06:00
Corey Ogburn
1aa9d87c5d
Corrected
...
Put the note on the right model this time.
2024-10-24 17:05:36 -06:00
Corey Ogburn
e11c562022
Added Note to ES Mappings
2024-10-24 17:05:35 -06:00
coreyogburn
a76a2d8e9f
Merge pull request #13800 from Security-Onion-Solutions/cogburn/detection-status-hunt
...
Cogburn/detection status hunt
2024-10-24 16:31:59 -06:00
Corey Ogburn
6ce52bf9ab
Specify Defaults for detectionEngineStatusQueries
...
Specify the defaults as an example to the user.
2024-10-24 13:11:49 -06:00
Corey Ogburn
f67fcecc6e
Clean up StatusQueries String
2024-10-24 11:18:48 -06:00
Corey Ogburn
b7c392a244
Corrected a misspelling
2024-10-24 11:18:48 -06:00
Corey Ogburn
ad0b0a5e95
Refactor to String
...
To accomodate the config screen, the annotation now specifies it as a multiline string with a yaml syntax. The user can edit the yaml to add or remove queries. The UI will parse the YAML before use.
Also updated the IntegrityFailure queries to specify table columns more relevant to a sync failure than the default ones.
2024-10-24 11:18:47 -06:00
Corey Ogburn
c77b0afd8e
Move to Client/Detections
...
Added a basic annotation.
2024-10-24 11:18:47 -06:00
