Commit Graph

10657 Commits

Author SHA1 Message Date
Mike Reeves 16d8e9e5a0 Fix soup and perms updates 2022-11-01 09:05:26 -04:00
Mike Reeves ee1f55361e Add soup and perms updates 2022-10-31 16:33:38 -04:00
Mike Reeves cb33464668 Merge pull request #9033 from Security-Onion-Solutions/strelkafix
Add Filechecks
2022-10-31 15:49:40 -04:00
Mike Reeves 06ddae13b5 Update filecheck 2022-10-31 15:41:57 -04:00
Mike Reeves 16d3dead04 Update sensor-rotate.conf 2022-10-31 15:33:10 -04:00
Mike Reeves f7043f3f62 Update init.sls 2022-10-31 15:25:38 -04:00
Mike Reeves bf41f2984a Update init.sls 2022-10-31 14:58:55 -04:00
Mike Reeves 86ca3602f3 Update init.sls 2022-10-31 14:44:01 -04:00
Mike Reeves 416c28fded Update init.sls 2022-10-31 14:42:23 -04:00
Mike Reeves 297373877a Update init.sls 2022-10-31 14:36:40 -04:00
Mike Reeves db9b93a96c Update init.sls 2022-10-31 14:35:02 -04:00
Mike Reeves 5635375d8d Update init.sls 2022-10-31 14:30:11 -04:00
Mike Reeves 07e72e4013 Update filecheck 2022-10-31 13:47:49 -04:00
Mike Reeves 518d2aaa9c Update filecheck.yaml 2022-10-31 13:45:00 -04:00
Mike Reeves e93e2995b7 Update filecheck 2022-10-31 13:42:18 -04:00
Mike Reeves d2eb61a830 Update filecheck.yaml 2022-10-31 13:41:45 -04:00
Mike Reeves 4c5a2c0610 Update filecheck 2022-10-31 13:36:42 -04:00
Mike Reeves e9e7362005 Add Filechecks 2022-10-31 12:57:08 -04:00
Peter Di Giorgio b97c822800 Add zeek.bacnet_discovery and zeek.bacnet_property 2022-10-27 15:40:52 -07:00
Peter Di Giorgio 71e3b2d1fb Create zeek.bacnet 2022-10-27 15:40:07 -07:00
Peter Di Giorgio 326ba710ce Add logs for bacnet
bacnet
bacnet_discovery
bacnet_property
2022-10-27 15:38:32 -07:00
Peter Di Giorgio 1ea6feca37 Add icsnpp-bacnet 2022-10-27 15:31:38 -07:00
Peter Di Giorgio c524442172 Merge pull request #9008 from Security-Onion-Solutions/master
Synch Foxtrot with 2.3.181 Release
2022-10-26 13:10:01 -07:00
weslambert 8e4d0db738 Merge pull request #9002 from Security-Onion-Solutions/fix/remove_ja3er_references
Remove JA3er references
2022-10-26 10:21:54 -04:00
weslambert a170c194c8 Remove JA3er references 2022-10-26 10:18:10 -04:00
Peter Di Giorgio 2b51d72585 Rename zeek.read_write_multiple_registers to zeek.modbus_read_write_multiple_registers 2022-10-25 17:20:01 -07:00
weslambert 0d71006f40 Merge pull request #8997 from Security-Onion-Solutions/fix/sensoroni_analyzers_pyyaml_wheel_name
Fix PyYAML .whl file name and remove JA3er analyzer
2022-10-25 14:57:35 -04:00
Wes a91e3b601c Remove JA3er since it is no longer a valid service 2022-10-25 18:48:37 +00:00
Wes 4940421297 Add PyYAML .whl files back since they were 'deleted' in the previous commit 2022-10-25 18:47:51 +00:00
Wes 58b4a8fbab Change PyYAML .whl file name to comply with Joliet's 240-character limit 2022-10-25 18:47:02 +00:00
Mike Reeves bd7e12f682 Merge pull request #8952 from Njinx/dev
FEATURE: so-pcap-export can run without needing to be attached to a TTY
2022-10-25 14:38:48 -04:00
Mike Reeves 64e43f07b9 Merge pull request #8993 from Security-Onion-Solutions/TOoSmOotH-patch-3
Update VERSION
2022-10-25 14:36:45 -04:00
Mike Reeves 2d84e2e977 Update VERSION 2022-10-25 14:35:52 -04:00
Mike Reeves 465a1a82d7 Merge pull request #8981 from Security-Onion-Solutions/dev
2.3.181
2.3.181-20221021
2022-10-25 14:30:50 -04:00
Peter Di Giorgio 61d36d584f Add Modbus, DNP3, BZAR, and oui-logging 2022-10-25 07:10:52 -07:00
Peter Di Giorgio 2d343110cc Add DNP3 and Modbus extensions to zeeklogs.sls 2022-10-25 07:09:11 -07:00
Peter Di Giorgio 4502e2c260 Remove logs for OT parsers 2022-10-24 23:16:18 -07:00
Peter Di Giorgio beb67847f9 Remove modbus,bzar,dnp3,oui-logging 2022-10-24 23:14:32 -07:00
Peter Di Giorgio 9cdc29c482 Fix Syntax for zeeklogs pillar 2022-10-24 14:30:15 -07:00
weslambert 292f66138b Merge pull request #8983 from Security-Onion-Solutions/revert-8982-fix/sensoroni_analyzers_pyyaml_wheel_name
Revert "Change PyYAML .whl file name to comply with Joliet's 240-character limit/threshold"
2022-10-24 16:49:19 -04:00
weslambert 0087768946 Revert "Change PyYAML .whl file name to comply with Joliet's 240-character limit/threshold" 2022-10-24 16:47:30 -04:00
Peter Di Giorgio 01d177366d Fix Zeek Pillar 2022-10-24 12:00:43 -07:00
weslambert 712340a027 Merge pull request #8982 from Security-Onion-Solutions/fix/sensoroni_analyzers_pyyaml_wheel_name
Change PyYAML .whl file name to comply with Joliet's 240-character limit/threshold
2022-10-24 14:14:45 -04:00
Wes 1caac3f0b0 Add PyYAML .whl files back since they were 'deleted' in the previous commit. 2022-10-24 18:06:19 +00:00
Wes 54a5dd6cbd Change name of PyYAML .whl file to remain under Joliet's 240-character limit/threshold 2022-10-24 18:05:15 +00:00
Mike Reeves 6570177b0c Merge pull request #8979 from Security-Onion-Solutions/2.3.181
2.3.181
2022-10-24 11:39:08 -04:00
Mike Reeves f7ed992f24 2.3.181 2022-10-24 11:33:31 -04:00
Mike Reeves 4a18f8d18a 2.3.181 2022-10-24 11:32:19 -04:00
Peter Di Giorgio 24cf481f4a Merge pull request #8973 from lock-wire/patch-3
Add Modbus, DNP3, BZAR, and oui-logging
2022-10-21 18:06:13 -07:00
Peter Di Giorgio cd4e0c1f8e Add DNP3 and Modbus extensions to zeeklogs.sls
Add DNP3 and Modbus extenstions to zeeklogs to ensure filebeat.yml is configured properly to ship lots.  Need to move these behind the OT flag.
2022-10-21 14:19:21 -07:00