 Wes
|
bdf4b2c68d
|
Remove settings
|
2023-12-07 14:03:45 +00:00 |
|
|
Wes
|
e49fc0dd27
|
Remove more settings
|
2023-12-07 14:03:09 +00:00 |
|
|
Wes
|
f52da4a933
|
Remove close settings and cron
|
2023-12-07 13:58:39 +00:00 |
|
|
Wes
|
f38758a9c7
|
Remove close scripts
|
2023-12-07 13:52:25 +00:00 |
|
|
Wes
|
1ac3a2d2f1
|
Remove delete files and allow deletion of indices managed by ILM
|
2023-12-07 13:51:24 +00:00 |
|
|
Wes
|
965ced94c4
|
Remove close files
|
2023-12-07 13:48:08 +00:00 |
|
 weslambertandGitHub
|
fea5a3026d
|
Merge pull request #11955 from Security-Onion-Solutions/fix/sublime_analyzer_documentation
Sublime Analyzer Documentation
|
2023-12-06 13:27:03 -05:00 |
|
|
weslambertandGitHub
|
7f21bee0d4
|
Add README
|
2023-12-06 13:14:17 -05:00 |
|
|
weslambertandGitHub
|
ade3a46a9a
|
Add LocalFile link
|
2023-12-06 12:58:44 -05:00 |
|
|
weslambertandGitHub
|
e6a2e49d37
|
Add Sublime Platform
|
2023-12-06 12:57:59 -05:00 |
|
|
weslambertandGitHub
|
1438913f6a
|
Merge pull request #11954 from Security-Onion-Solutions/fix/sublime_analyzer_indentation
Fix indentation for rule_results
|
2023-12-06 12:50:44 -05:00 |
|
|
Wes
|
51fa4922b9
|
Fix indentation for rule_results
|
2023-12-06 17:37:07 +00:00 |
|
|
weslambertandGitHub
|
4becf3e20f
|
Merge pull request #11950 from Security-Onion-Solutions/fix/eml_observable
Add eml observable type
|
2023-12-06 08:30:27 -05:00 |
|
|
weslambertandGitHub
|
0334ef9677
|
Add eml observable type
|
2023-12-05 19:10:16 -05:00 |
|
|
weslambertandGitHub
|
0537e1b3f6
|
Merge pull request #11945 from Security-Onion-Solutions/feature/sublime_platform_analyzer
Sublime Platform Analyzer
|
2023-12-05 16:51:03 -05:00 |
|
|
Wes
|
6fff05b444
|
Remove pytest.ini
|
2023-12-05 20:14:17 +00:00 |
|
|
Wes
|
01a37df7fc
|
Add extra line
|
2023-12-05 20:02:12 +00:00 |
|
|
Wes
|
b3e78c9cc3
|
Update live flow option
|
2023-12-05 19:55:23 +00:00 |
|
|
Wes
|
d871b61150
|
Change author
|
2023-12-05 18:36:25 +00:00 |
|
|
Wes
|
b2536a64d8
|
Remove extra space
|
2023-12-05 18:33:00 +00:00 |
|
|
Wes
|
3d1eecfad6
|
Add Sublime Platform analyzer
|
2023-12-05 18:31:50 +00:00 |
|
|
weslambertandGitHub
|
55052c4811
|
Merge pull request #11919 from Security-Onion-Solutions/fix/remove_curator_changes
Remove Curator Changes
|
2023-12-01 11:15:23 -05:00 |
|
|
Wes
|
e36044e164
|
Remove close changes
|
2023-12-01 16:10:56 +00:00 |
|
|
Wes
|
6fa4a69753
|
Remove action changes
|
2023-12-01 16:10:07 +00:00 |
|
|
weslambertandGitHub
|
32b03f514e
|
Merge pull request #11907 from Security-Onion-Solutions/fix/curator_close
Curator close fixes
|
2023-11-30 11:05:49 -05:00 |
|
|
Wes
|
a605c5c62c
|
Ensure indices managed by ILM can be managed by Curator
|
2023-11-29 22:13:20 +00:00 |
|
|
Wes
|
2368e8b793
|
Fix action file names
|
2023-11-29 22:06:11 +00:00 |
|
|
weslambertandGitHub
|
317b6cb614
|
Merge pull request #11902 from Security-Onion-Solutions/fix/hotfix_version
Update HOTFIX
|
2023-11-29 17:03:59 -05:00 |
|
|
weslambertandGitHub
|
a6d20bdc71
|
Update HOTFIX
|
2023-11-29 17:01:29 -05:00 |
|
|
weslambertandGitHub
|
1a4d009b7f
|
Merge pull request #11896 from Security-Onion-Solutions/feature/elastic_certificate_fingerprints
Add certificate fingerprints
|
2023-11-29 12:07:50 -05:00 |
|
|
weslambertandGitHub
|
9d63a47792
|
Certificate hash
|
2023-11-29 12:01:43 -05:00 |
|
|
weslambertandGitHub
|
7001e90667
|
Client and server fingerprints
|
2023-11-29 12:00:46 -05:00 |
|
|
weslambertandGitHub
|
a0573212c0
|
Merge pull request #11891 from Security-Onion-Solutions/fix/elastic_ignore_analyzer
Ignore analyzer log
|
2023-11-29 10:05:01 -05:00 |
|
|
weslambertandGitHub
|
5f79644aef
|
Ignore analyzer log
|
2023-11-29 10:02:13 -05:00 |
|
|
weslambertandGitHub
|
b6e2df45c7
|
Update HOTFIX
|
2023-11-16 14:48:00 -05:00 |
|
|
weslambertandGitHub
|
46c5bf40e0
|
Merge pull request #11804 from Security-Onion-Solutions/fix/kibana_corrupt_integration
Discard corrupt integration
|
2023-11-16 10:49:39 -05:00 |
|
|
Wes
|
3ed7b36865
|
Discard corrupt integration
|
2023-11-16 15:45:38 +00:00 |
|
|
weslambertandGitHub
|
aeb09b16db
|
Merge pull request #11760 from Security-Onion-Solutions/fix/elastic_packages
Add Elastic Agent package and upgrade packages when elasticfleet.packages list changes
|
2023-11-10 10:20:17 -05:00 |
|
|
weslambertandGitHub
|
583ec5176e
|
Add package check
|
2023-11-10 10:15:52 -05:00 |
|
|
weslambertandGitHub
|
4bb1dabb89
|
Add elastic_agent
|
2023-11-10 10:14:59 -05:00 |
|
|
weslambertandGitHub
|
02baa18502
|
Add metrics
|
2023-11-08 22:41:24 -05:00 |
|
|
weslambertandGitHub
|
e39edab00d
|
Exclude osquery and display failed name
|
2023-11-08 20:55:08 -05:00 |
|
|
weslambertandGitHub
|
acb6e84248
|
Don't load index template if component template doesn't exist
|
2023-11-08 20:34:08 -05:00 |
|
|
weslambertandGitHub
|
9df3a8fc18
|
Merge pull request #11740 from Security-Onion-Solutions/fix/elastic_templates
Remove template files
|
2023-11-08 15:20:01 -05:00 |
|
|
weslambertandGitHub
|
36098e6314
|
Remove template files
|
2023-11-08 14:32:58 -05:00 |
|
|
Wes
|
653fda124f
|
Check expected with retry
|
2023-11-08 13:02:17 +00:00 |
|
|
Wes
|
b46e86c39b
|
Extend index template loading to 60 attempts and a total of ~5 minutes
|
2023-11-08 02:29:09 +00:00 |
|
|
Wes
|
de9f9549af
|
Extend template loading to 24 attempts and a total of ~2 minutes
|
2023-11-07 23:55:03 +00:00 |
|
|
weslambertandGitHub
|
749e22e4b9
|
Fix if statement
|
2023-11-07 17:29:38 -05:00 |
|
|
weslambertandGitHub
|
69ec1987af
|
Fix if statement
|
2023-11-07 17:28:37 -05:00 |
|
|
Wes
|
570624da7e
|
Remove RETURN_CODE
|
2023-11-07 21:09:29 +00:00 |
|
|
Wes
|
7772657b4b
|
Remove RETURN_CODE
|
2023-11-07 21:06:35 +00:00 |
|
|
Wes
|
1676c84f9c
|
Use the retry function so-elasticsearch-query
|
2023-11-07 19:56:50 +00:00 |
|
|
weslambertandGitHub
|
1dcca0bfd3
|
Change pipeline to 1.13.1
|
2023-11-07 12:17:51 -05:00 |
|
|
Wes
|
0b4a246ddb
|
State file changes and retry logic
|
2023-11-07 16:44:42 +00:00 |
|
|
weslambertandGitHub
|
f97dc70fcb
|
Merge pull request #11732 from Security-Onion-Solutions/fix/elastic_agent_template
Change pipeline to 1.8.0
|
2023-11-07 09:08:25 -05:00 |
|
|
weslambertandGitHub
|
cce80eb2fb
|
Change pipeline to 1.8.0
|
2023-11-07 09:02:48 -05:00 |
|
|
Wes
|
c30a0d5b5b
|
Better error handling and state file management
|
2023-11-06 14:29:01 +00:00 |
|
|
Wes
|
74eda68d84
|
Exit if unable to communicate with Elasticsearch
|
2023-11-06 13:16:35 +00:00 |
|
|
weslambertandGitHub
|
96582add5e
|
Merge pull request #11704 from Security-Onion-Solutions/feature/integrations_checkpoint_vsphere
Checkpoint and VSphere Integrations
|
2023-11-02 17:17:03 -04:00 |
|
|
Wes
|
5bfef3f527
|
Add checkpoint and vsphere templates
|
2023-11-02 21:10:01 +00:00 |
|
|
Wes
|
3875970dc5
|
Add checkpoint and vsphere packages
|
2023-11-02 21:09:37 +00:00 |
|
|
weslambertandGitHub
|
ac593e4632
|
Merge pull request #11701 from Security-Onion-Solutions/fix/elastic_templates_common
Don't source so-elastic-fleet-common if not there
|
2023-11-02 16:43:27 -04:00 |
|
|
weslambertandGitHub
|
51e7861757
|
Don't source so-elastic-fleet-common if not there
|
2023-11-02 16:41:34 -04:00 |
|
|
weslambertandGitHub
|
e10f043b1c
|
Merge pull request #11688 from Security-Onion-Solutions/fix/integrations_roles
Add eval and import roles
|
2023-11-02 09:58:40 -04:00 |
|
|
weslambertandGitHub
|
65735fc4d3
|
Add eval and import roles
|
2023-11-02 09:54:01 -04:00 |
|
|
weslambertandGitHub
|
f9e2940181
|
Merge pull request #11676 from Security-Onion-Solutions/feature/sublime_platform_integration
Sublime Platform Integration
|
2023-11-01 16:13:57 -04:00 |
|
|
Wes
|
f33079f1e3
|
Make settings global
|
2023-11-01 20:09:56 +00:00 |
|
|
Wes
|
c32935e2e6
|
Remove optional integration from configuration if not enabled
|
2023-11-01 17:02:43 +00:00 |
|
|
Wes
|
655c88cd09
|
Make sure enabled_nodes is populated
|
2023-11-01 16:47:51 +00:00 |
|
|
Wes
|
bca1194a46
|
Sublime SOC Action
|
2023-11-01 14:01:55 +00:00 |
|
|
Wes
|
a0926b7b87
|
Load optional integrations
|
2023-11-01 13:59:24 +00:00 |
|
|
Wes
|
44e45843bf
|
Change optional integration Fleet configuration
|
2023-11-01 13:52:38 +00:00 |
|
|
Wes
|
9701d0ac20
|
Optional integration Fleet configuration
|
2023-11-01 13:47:20 +00:00 |
|
|
Wes
|
23ee9c2bb0
|
Sublime Platform integration
|
2023-11-01 13:41:40 +00:00 |
|
|
Wes
|
51247be6b9
|
Sublime Platform integration defaults
|
2023-11-01 13:37:52 +00:00 |
|
|
Wes
|
4dc64400c5
|
Support document_id
|
2023-11-01 13:36:32 +00:00 |
|
|
Wes
|
ae45d40eca
|
Add Sublime Platform ingest pipeline
|
2023-11-01 13:34:30 +00:00 |
|
|
weslambertandGitHub
|
5a85003952
|
Merge pull request #11664 from Security-Onion-Solutions/fix/elastic_import
Add import roles
|
2023-10-31 10:47:13 -04:00 |
|
|
weslambertandGitHub
|
c354924b68
|
Add import roles
|
2023-10-31 10:05:29 -04:00 |
|
|
weslambertandGitHub
|
ed6473a34b
|
Add roles for eval mode
|
2023-10-30 20:41:49 -04:00 |
|
|
weslambertandGitHub
|
9a1e95cd09
|
Merge pull request #11648 from Security-Onion-Solutions/fix/ilm_remove_policy
Remove ILM policies for Cases and OSQuery manager indices
|
2023-10-27 17:28:59 -04:00 |
|
|
weslambertandGitHub
|
76dd6f07ab
|
Remove policy for OSQuery manager indices
|
2023-10-27 17:26:33 -04:00 |
|
|
weslambertandGitHub
|
c955f9210a
|
Remove policy for Cases indices
|
2023-10-27 17:24:27 -04:00 |
|
|
Wes
|
891ea997e7
|
Add lifecycle policies and warm settings
|
2023-10-26 12:25:37 +00:00 |
|
|
weslambertandGitHub
|
0c2b3f3c62
|
Merge pull request #11600 from Security-Onion-Solutions/fix/suricata_pkt_src
Parse pkt_src for Suricata logs
|
2023-10-23 15:51:30 -04:00 |
|
|
weslambertandGitHub
|
660020cc76
|
Parse pkt_src for Suricata logs
|
2023-10-23 15:45:41 -04:00 |
|
|
weslambertandGitHub
|
5119e6c45a
|
Merge pull request #11570 from Security-Onion-Solutions/feature/additional_integrations
Additional integrations
|
2023-10-19 09:30:40 -04:00 |
|
|
Wes
|
c135f886a9
|
Remove Carbon Black Cloud integration
|
2023-10-18 20:41:34 +00:00 |
|
|
Wes
|
28b7a24cc1
|
Add templates for integrations
|
2023-10-18 20:36:04 +00:00 |
|
|
Wes
|
767a54c91b
|
Add pkgs
|
2023-10-18 20:07:26 +00:00 |
|
|
weslambertandGitHub
|
f0e380870d
|
Merge pull request #11567 from Security-Onion-Solutions/fix/mhr_docs
Add note regarding DNS resolver
|
2023-10-18 13:46:25 -04:00 |
|
|
weslambertandGitHub
|
34717fb65e
|
Add note regarding DNS resolver
|
2023-10-18 13:44:09 -04:00 |
|
|
weslambertandGitHub
|
830b5b9a21
|
Merge pull request #11560 from Security-Onion-Solutions/foxtrot
Elastic 8.10.4
|
2023-10-17 13:47:21 -04:00 |
|
|
weslambertandGitHub
|
06e731c762
|
Update VERSION
|
2023-10-17 13:33:12 -04:00 |
|
|
weslambertandGitHub
|
be2a829524
|
Elastic 8.10.4
|
2023-10-17 10:49:03 -04:00 |
|
|
weslambertandGitHub
|
8cab242ad0
|
Elastic 8.10.4
|
2023-10-17 10:48:31 -04:00 |
|
|
weslambertandGitHub
|
99054a2687
|
Elastic 8.10.4
|
2023-10-17 10:47:26 -04:00 |
|
|
weslambertandGitHub
|
adcb7840bd
|
Elastic 8.10.3
|
2023-10-17 10:38:20 -04:00 |
|
|
weslambertandGitHub
|
8db6fef92d
|
Elastic 8.10.3
|
2023-10-17 10:35:36 -04:00 |
|