Commit Graph

10858 Commits

Author SHA1 Message Date
Josh Brower
b7e97eceb3 Fix link for FleetDM standalone nodes 2023-02-09 14:08:48 -05:00
Josh Brower
450e02e874 Merge pull request #9749 from Security-Onion-Solutions/fleetdm-fix
FleetDM Upgrade Fix
2023-02-09 09:30:22 -05:00
Josh Brower
09bebf08d6 Fix FleetDM SOC Link 2023-02-09 09:10:50 -05:00
Josh Brower
4dd54cea6c Use correct variable name 2023-02-08 16:58:47 -05:00
Josh Brower
e07f4bd0ed Workaround for FleetDM PW Req 2023-02-08 13:03:33 -05:00
Mike Reeves
6adb586bb4 Merge pull request #9734 from Security-Onion-Solutions/TOoSmOotH-patch-1
Update VERSION
2023-02-07 09:07:06 -05:00
Mike Reeves
2f99821736 Update VERSION 2023-02-07 09:05:16 -05:00
Mike Reeves
2ff284fc7f Merge pull request #9729 from Security-Onion-Solutions/2.3.210
2.3.210
2023-02-06 16:36:06 -05:00
Mike Reeves
5d0a3ef205 2.3.210 2023-02-06 16:32:45 -05:00
Mike Reeves
ac9c10dd3a 2.3.210 2023-02-06 15:46:27 -05:00
weslambert
d4d67b545d Merge pull request #9699 from Security-Onion-Solutions/fix/strelka_yara_exclusion
Add 'configured_vulns_ext_vars.yar' to exclusion list
2023-02-01 14:38:29 -05:00
weslambert
2dced35800 Add 'configured_vulns_ext_vars.yar' to exclusion list 2023-02-01 14:24:20 -05:00
Josh Patterson
c2a04a79c5 Merge pull request #9697 from Security-Onion-Solutions/23mysqlpy
23mysqlpy
2023-02-01 14:17:24 -05:00
m0duspwnens
d43346a084 hold python mysql 2023-02-01 14:11:27 -05:00
m0duspwnens
0c4a27d120 lock python36-mysql-1.3.12-2.el7 version 2023-02-01 12:33:19 -05:00
Doug Burks
b4530ffffe Merge pull request #9681 from Security-Onion-Solutions/fix/suricata-dhcp-parsing-2.3
2.3: Improve Suricata DHCP parsing and dashboard
2023-01-31 10:18:49 -05:00
Doug Burks
d12aa0ed56 Move host.domain table to end of DHCP tables 2023-01-31 07:14:18 -05:00
Doug Burks
17bcf50ccb update Suricata DHCP parser to set server.address 2023-01-30 15:57:47 -05:00
Doug Burks
48401f6a3f Merge pull request #9675 from Security-Onion-Solutions/dougburks-patch-1
Update soup for 2.3.210
2023-01-30 09:17:47 -05:00
Doug Burks
a96825f43e Update soup for 2.3.210 2023-01-30 09:16:00 -05:00
Doug Burks
2d48ae7bca Merge pull request #9656 from Security-Onion-Solutions/2.3/elastic-8.6.1
UPGRADE: Elastic 8.6.1 #9594 (2.3)
2023-01-26 16:24:33 -05:00
Doug Burks
0ff519ed2f Update to Elastic 8.6.1 2023-01-26 16:09:13 -05:00
Doug Burks
127533492f Update to Elastic 8.6.1 2023-01-26 16:08:15 -05:00
Mike Reeves
7d4b4a8bd4 Merge pull request #9585 from Security-Onion-Solutions/TOoSmOotH-patch-1
Update VERSION
2023-01-17 09:40:46 -05:00
Mike Reeves
e9fa84d71b Update VERSION 2023-01-17 09:39:35 -05:00
Mike Reeves
9718e61a6a Merge pull request #9576 from Security-Onion-Solutions/2.3.200
2.3.200
2023-01-13 16:12:20 -05:00
Mike Reeves
22ec638e85 2.3.200 2023-01-13 16:08:27 -05:00
Doug Burks
7b0c22f967 Merge pull request #9568 from Security-Onion-Solutions/fix/soup-thehive-errors
soup should continue even if thehive errors
2023-01-12 13:28:41 -05:00
Doug Burks
672cab858e Continue even if thehive errors 2023-01-12 12:48:16 -05:00
Josh Brower
29312d595b Merge pull request #9559 from Security-Onion-Solutions/idh-skins
Fix mispelling
2023-01-11 11:04:29 -05:00
Josh Brower
b54f2e8752 Fix mispelling 2023-01-11 10:59:50 -05:00
Josh Brower
1470e120ef Merge pull request #9540 from Security-Onion-Solutions/idhskins
bug fix - idh skins
2023-01-09 15:49:04 -05:00
Josh Brower
2c747ec837 make sure dir is created 2023-01-09 13:46:10 -05:00
Josh Brower
8cb5cd5fee Merge pull request #9214 from Security-Onion-Solutions/idhskins
Custom IDH HTTP Skins
2023-01-06 15:14:14 -05:00
Doug Burks
a4bae77973 Merge pull request #9271 from Njinx/dev
so-status runs some code before checking for root privileges
2023-01-04 16:05:34 -05:00
Doug Burks
96a568f57f Merge pull request #9515 from Security-Onion-Solutions/fix/so-common-references-2.3
fix so-common references
2023-01-04 14:31:57 -05:00
doug
7dcdcc18a5 fix so-common references 2023-01-04 14:28:47 -05:00
Doug Burks
10fc8de9f9 Merge pull request #9513 from Security-Onion-Solutions/fix/jinja-whitespace-2.3
fix jinja whitespace 2.3
2023-01-04 13:56:17 -05:00
doug
3482df5ee1 fix jinja whitespace 2023-01-04 13:33:51 -05:00
Doug Burks
9ea3d6bb1f Merge pull request #9512 from Security-Onion-Solutions/fix/copyright-year-2023
Update Copyright year
2023-01-04 12:50:30 -05:00
doug
a67a254edc update Copyright year 2023-01-04 12:44:18 -05:00
Doug Burks
08a5a9ab31 Merge pull request #9510 from Security-Onion-Solutions/fix/sysmon-fields-2.3
Improve default sysmon fields and add new network_connection fields
2023-01-04 07:58:04 -05:00
Doug Burks
e3d32c7871 Improve default sysmon fields and add new network_connection fields 2023-01-04 07:38:18 -05:00
weslambert
20d6ce1ce9 Merge pull request #9501 from Security-Onion-Solutions/fix/elasticsearch_ingest_pipeline_rita_beacon
Update RITA beacon parsing
2023-01-03 11:13:55 -05:00
Wes
bd114eb1c4 Update RITA beacon parsing 2023-01-03 16:01:35 +00:00
Doug Burks
55c6fc422b Merge pull request #9497 from Security-Onion-Solutions/fix/sysmon-parsing-2.3
FIX: Sysmon logs are missing event.category and event.dataset #8194
2023-01-03 08:56:16 -05:00
doug
5d060f9832 update Sysmon File dashboard 2022-12-31 14:10:02 -05:00
doug
edcbfd17f5 update sysmon parser 2022-12-30 16:20:06 -05:00
Doug Burks
ff4850d9ce Merge pull request #9452 from Security-Onion-Solutions/feature/improve-dashboards-2.3
FEATURE: Improve SOC Dashboards #9450 2.3
2022-12-21 15:46:21 -05:00
Doug Burks
3e1a5b6329 Improve Strelka dashboard 2022-12-21 15:34:06 -05:00