100 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Josh BrowerandGitHub	3fbab7c3af	Merge pull request #13223 from Security-Onion-Solutions/2.4/timeout ... Update defaults	2024-06-18 08:55:30 -04:00
DefensiveDepth	521cccaed6	Update defaults	2024-06-18 08:43:00 -04:00
Josh BrowerandGitHub	c540a4f257	Merge pull request #13208 from Security-Onion-Solutions/2.4/ruletemplates ... Update rule templates	2024-06-14 16:01:26 -04:00
DefensiveDepth	7af94c172f	Change spelling	2024-06-14 16:00:22 -04:00
DefensiveDepth	7556587e35	Update rule templates	2024-06-14 15:47:57 -04:00
Josh BrowerandGitHub	af11879545	Merge pull request #13205 from Security-Onion-Solutions/2.4/customsuricatasources ... Initial support for custom suricata urls and local rulesets	2024-06-14 13:50:06 -04:00
DefensiveDepth	c89f1c9d95	remove multiline	2024-06-14 13:48:55 -04:00
DefensiveDepth	b7ac599a42	set to empty	2024-06-14 13:21:36 -04:00
DefensiveDepth	8363877c66	move to custom rules	2024-06-14 12:41:44 -04:00
DefensiveDepth	4bcb4b5b9c	removed unneeded import	2024-06-14 09:32:34 -04:00
DefensiveDepth	68302e14b9	add to defaults and tweaks	2024-06-14 09:28:23 -04:00
DefensiveDepth	c1abc7a7f1	Update description	2024-06-14 08:51:34 -04:00
DefensiveDepth	484717d57d	initial support for custom suricata urls and local rulesets	2024-06-14 08:42:10 -04:00
Josh BrowerandGitHub	e90557d7dc	Merge pull request #13179 from Security-Onion-Solutions/2.4/fixintegritycheck ... Add new bind - suricata all.rules	2024-06-11 13:08:40 -04:00
DefensiveDepth	08d2a6242d	Add new bind - suricata all.rules	2024-06-11 10:03:33 -04:00
Josh BrowerandGitHub	ef10794e3b	Merge pull request #13089 from Security-Onion-Solutions/2.4/realert ... fix rsync	2024-05-29 11:12:45 -04:00
DefensiveDepth	0d034e7adc	fix rsync	2024-05-29 10:55:56 -04:00
Josh BrowerandGitHub	ca49943a7f	Merge pull request #13085 from Security-Onion-Solutions/2.4/soupchange ... Check to see if local exists	2024-05-28 10:25:46 -04:00
DefensiveDepth	ee4ca0d7a2	Check to see if local exists	2024-05-28 10:24:09 -04:00
Josh BrowerandGitHub	0d634f3b8e	Merge pull request #13084 from Security-Onion-Solutions/2.4/soupchange ... Fix fi	2024-05-28 10:05:33 -04:00
DefensiveDepth	f68ac23f0e	Fix fi ... Signed-off-by: DefensiveDepth <Josh@defensivedepth.com>	2024-05-28 10:03:31 -04:00
Josh BrowerandGitHub	825c4a9adb	Merge pull request #13083 from Security-Onion-Solutions/2.4/soupchange ... Backup .yml files too	2024-05-28 09:45:53 -04:00
DefensiveDepth	2a2b86ebe6	Dont overwrite	2024-05-28 09:43:45 -04:00
DefensiveDepth	74dfc25376	backup local rules	2024-05-28 09:29:10 -04:00
DefensiveDepth	81ee60e658	Backup .yml files too	2024-05-28 06:42:18 -04:00
Josh BrowerandGitHub	49fd84a3a7	Merge pull request #13081 from Security-Onion-Solutions/2.4/soupchange ... Dont bail - just wait for enter	2024-05-24 16:28:40 -04:00
DefensiveDepth	58b565558d	Dont bail - just wait for enter	2024-05-24 16:21:59 -04:00
Josh BrowerandGitHub	185fb38b2d	Merge pull request #13079 from Security-Onion-Solutions/2.4/sigmapipelineupdates ... Add IDH mappings	2024-05-24 14:48:22 -04:00
DefensiveDepth	550b3ee92d	Add IDH mappings	2024-05-24 14:46:24 -04:00
Josh BrowerandGitHub	29a87fd166	Merge pull request #13078 from Security-Onion-Solutions/2.4/socdefaultsdet ... Add instructions for sigma and yara repos	2024-05-24 13:02:01 -04:00
DefensiveDepth	f90d40b471	Fix typo	2024-05-24 12:56:17 -04:00
DefensiveDepth	4344988abe	Add instructions for sigma and yara repos	2024-05-24 12:54:36 -04:00
Josh BrowerandGitHub	979147a111	Merge pull request #13062 from Security-Onion-Solutions/2.4/backupscript ... Detections backup script	2024-05-24 10:06:56 -04:00
DefensiveDepth	66725b11b3	Added unit tests	2024-05-24 09:55:10 -04:00
Josh BrowerandGitHub	a8c287c491	Merge pull request #13067 from Security-Onion-Solutions/2.4/fixpipeline ... Fix strelka rule.uuid	2024-05-23 07:53:14 -04:00
DefensiveDepth	8e7c487cb0	Fix strelka rule.uuid	2024-05-23 05:59:31 -04:00
Josh BrowerandGitHub	ce063cf435	Merge pull request #13063 from Security-Onion-Solutions/2.4/yarafix ... Fix casing issue	2024-05-22 18:51:54 -04:00
DefensiveDepth	a072e34cfe	Fix casing issue	2024-05-22 17:12:41 -04:00
DefensiveDepth	d19c1a514b	Detections backup script	2024-05-22 15:12:23 -04:00
Josh BrowerandGitHub	8b011b8d7e	Merge pull request #13053 from Security-Onion-Solutions/2.4/alertsefaults ... Add rule.uuid to default groupbys	2024-05-21 17:54:27 -04:00
DefensiveDepth	f9e9b825cf	Removed unneeded groupby	2024-05-21 17:53:20 -04:00
DefensiveDepth	3992ef1082	Add rule.uuid to default groupbys	2024-05-21 17:45:56 -04:00
Josh BrowerandGitHub	320ae641b1	Merge pull request #13023 from Security-Onion-Solutions/2.4/sigmapipelineupdates ... alphabetical order	2024-05-15 16:30:45 -04:00
DefensiveDepth	b4aec9a9d0	alphabetical order	2024-05-15 16:29:21 -04:00
Josh BrowerandGitHub	2419066dc8	Merge pull request #13001 from Security-Onion-Solutions/2.4/socdefaults ... 2.4/socdefaults	2024-05-13 13:39:31 -04:00
DefensiveDepth	e430de88d3	Change rule updates to 24h	2024-05-13 13:15:06 -04:00
DefensiveDepth	c4c38f58cb	Update descriptions	2024-05-13 13:13:57 -04:00
Josh BrowerandGitHub	47dc911b79	Merge pull request #12964 from Security-Onion-Solutions/2.4/agstrelka ... remove old yara airgap code	2024-05-08 08:45:16 -04:00
DefensiveDepth	6d2ecce9b7	remove old yara airgap code	2024-05-08 08:43:37 -04:00
Josh BrowerandGitHub	b997e44715	Merge pull request #12939 from Security-Onion-Solutions/2.4/detections-airgap ... Initial airgap support for detections	2024-05-06 15:46:29 -04:00
DefensiveDepth	be1758aea7	Fix license and folder	2024-05-06 12:22:44 -04:00
DefensiveDepth	26c6a98b45	Initial airgap support for detections	2024-05-06 08:43:01 -04:00
Josh BrowerandGitHub	6d5ff59657	Merge pull request #12929 from Security-Onion-Solutions/2.4/verifyexclude ... Exclude new sigma rules	2024-05-03 15:38:25 -04:00
DefensiveDepth	7f12d4c815	Exclude new sigma rules	2024-05-03 15:22:53 -04:00
Josh BrowerandGitHub	13ccb58f84	Merge pull request #12876 from Security-Onion-Solutions/2.4/sigmafix ... Sigma pivot fix and cleanup	2024-04-29 09:12:09 -04:00
DefensiveDepth	f2c3c928fc	Sigma pivot fix and cleanup	2024-04-29 08:49:05 -04:00
Josh BrowerandGitHub	d88c1a5e0a	Merge pull request #12861 from Security-Onion-Solutions/2.4/detectionlogs ... Add runtime status logs	2024-04-24 20:07:32 -04:00
DefensiveDepth	3c3ed8b5c5	Add runtime status logs	2024-04-24 16:33:47 -04:00
Josh BrowerandGitHub	fc1c41e5a4	Merge pull request #12841 from Security-Onion-Solutions/2.4/logfix ... Temp exclude yara runtime status log	2024-04-23 07:36:02 -04:00
DefensiveDepth	58ddd55123	Exclude yara runtime log	2024-04-23 07:28:07 -04:00
Josh BrowerandGitHub	64c43b1a55	Merge pull request #12805 from Security-Onion-Solutions/2.4/detectiondefaults ... Strelka fixes and more	2024-04-19 16:53:07 -04:00
DefensiveDepth	a237ef5d96	Update default queries	2024-04-19 16:33:35 -04:00
DefensiveDepth	6c6647629c	Refactor yara for compilation	2024-04-18 11:32:17 -04:00
DefensiveDepth	ff28476191	Fix compile_yara path	2024-04-16 13:10:17 -04:00
DefensiveDepth	8cc4d2668e	Move compile_yara	2024-04-16 12:52:14 -04:00
DefensiveDepth	dbfb178556	Add test	2024-04-16 12:22:53 -04:00
Josh BrowerandGitHub	5e8b16569f	Merge pull request #12793 from Security-Onion-Solutions/2.4/detectiondefaults ... Add docs for ruleset change	2024-04-12 13:54:06 -04:00
DefensiveDepth	f5e42e73af	Add docs for ruleset change	2024-04-12 13:30:20 -04:00
Josh BrowerandGitHub	5b81a73e58	Merge pull request #12791 from Security-Onion-Solutions/2.4/detectiondefaults ... Fix fingerprint paths	2024-04-12 09:01:38 -04:00
DefensiveDepth	49ccd86c39	Fix fingerprint paths	2024-04-12 08:35:44 -04:00
Josh BrowerandGitHub	ae09869417	Merge pull request #12780 from Security-Onion-Solutions/2.4/detectiondefaults ... Enable Detections Adv by default	2024-04-11 09:32:34 -04:00
DefensiveDepth	1c5f02ade2	Update annotations	2024-04-11 09:21:08 -04:00
DefensiveDepth	ed97aa4e78	Enable Detections Adv by default	2024-04-11 08:21:20 -04:00
Josh BrowerandGitHub	b9474b9352	Merge pull request #12766 from Security-Onion-Solutions/2.4/sigma-pipeline ... Ship Defender logs + more	2024-04-08 16:35:24 -04:00
DefensiveDepth	376efab40c	Ship Defender logs	2024-04-08 14:01:38 -04:00
Josh BrowerandGitHub	8e38c3763e	Merge pull request #12756 from Security-Onion-Solutions/2.4/detections-defaults ... Use list not string	2024-04-04 17:00:38 -04:00
DefensiveDepth	ca807bd6bd	Use list not string	2024-04-04 16:58:39 -04:00
Josh BrowerandGitHub	f72cbd5f23	Merge pull request #12755 from Security-Onion-Solutions/2.4/detections-defaults ... 2.4/detections defaults	2024-04-04 11:33:59 -04:00
Josh BrowerandGitHub	1d7e47f589	Merge pull request #12682 from Security-Onion-Solutions/2.4/soup-playbook ... 2.4/soup playbook	2024-04-04 11:28:09 -04:00
DefensiveDepth	49d5fa95a2	Detections tweaks	2024-04-04 11:26:44 -04:00
DefensiveDepth	c2f7f7e3a5	Remove dup line	2024-04-04 08:52:30 -04:00
DefensiveDepth	07cb0c7d46	Merge remote-tracking branch 'origin/2.4/dev' into 2.4/soup-playbook	2024-04-04 08:51:09 -04:00
Josh BrowerandGitHub	1017838cfc	Merge pull request #12748 from Security-Onion-Solutions/2.4/exclude-elastalert ... Exclude Elastalert EQL errors	2024-04-04 06:57:22 -04:00
DefensiveDepth	1d221a574b	Exclude Elastalert EQL errors	2024-04-04 06:48:25 -04:00
DefensiveDepth	f66cca96ce	YARA casing	2024-04-03 16:17:29 -04:00
Josh BrowerandGitHub	fbdcc53fe0	Merge pull request #12732 from Security-Onion-Solutions/2.4/detections-defaults ... Feature - auto-enabled Sigma rules	2024-04-03 09:01:09 -04:00
DefensiveDepth	a8f25150f6	Feature - auto-enabled Sigma rules	2024-04-03 08:21:50 -04:00
Josh BrowerandGitHub	1001aa665d	Merge pull request #12720 from Security-Onion-Solutions/2.4/detections-defaults ... Add default columns	2024-04-02 09:21:06 -04:00
DefensiveDepth	7f488422b0	Add default columns	2024-04-02 09:13:27 -04:00
DefensiveDepth	32b8649c77	Add more error checking	2024-03-28 14:31:02 -04:00
DefensiveDepth	9c5ba92589	Check if container is running first	2024-03-28 13:23:40 -04:00
DefensiveDepth	d2c9e0ea4a	Cleanup	2024-03-28 13:04:48 -04:00
DefensiveDepth	ce0c9f846d	Remove containers from so-status	2024-03-27 16:13:52 -04:00
DefensiveDepth	ba262ee01a	Check to see if Playbook is enabled	2024-03-27 15:43:25 -04:00
DefensiveDepth	b571eeb8e6	Initial cut of .70 soup changes	2024-03-27 14:58:16 -04:00
Josh BrowerandGitHub	63a58efba4	Merge pull request #12656 from Security-Onion-Solutions/2.4/detections-fixes ... Add bindings for sigma repos	2024-03-26 09:33:38 -04:00
DefensiveDepth	bbcd3116f7	Fixes	2024-03-26 09:31:46 -04:00
Josh BrowerandGitHub	9c12aa261e	Merge pull request #12660 from Security-Onion-Solutions/kilo ... Initial cut to remove Playbook and deps	2024-03-26 08:31:11 -04:00
DefensiveDepth	cc0f4847ba	Casing and validation	2024-03-26 08:10:57 -04:00
DefensiveDepth	7c4ea8a58e	Add Detections SOC Config	2024-03-26 07:39:39 -04:00