weslambert
c1b7232a88
Fix for detections-alerts
2024-08-21 14:38:29 -04:00
weslambert
4afac201b9
Change ILM policy name
2024-08-21 13:25:26 -04:00
weslambert
1ed73b6f8e
Merge pull request #13526 from Security-Onion-Solutions/feature/tenable_io
...
Add Tenable IO
2024-08-21 09:03:33 -04:00
weslambert
e772497e12
Merge pull request #13511 from Security-Onion-Solutions/fix/logcheck_unprovisioned
...
Ignore older SOC logs before licenseStatus field
2024-08-16 14:48:56 -04:00
weslambert
205bbd9c61
Use more specific match
2024-08-16 14:31:11 -04:00
weslambert
224bc6b429
Ignore old SOC logs before licenseStatus
2024-08-16 14:15:10 -04:00
weslambert
dc197f6a5c
Add tenable settings
2024-08-15 23:06:53 -04:00
weslambert
f182833a8d
Add tenable_io
2024-08-15 23:03:32 -04:00
weslambert
61ab1f1ef2
Add tenable_io templates
2024-08-15 23:03:07 -04:00
Josh Brower
dea582f24a
Merge pull request #13487 from Security-Onion-Solutions/2.4/logcheck
...
Add influxdb known error
2024-08-15 11:57:59 -04:00
DefensiveDepth
b860bf753a
Add influxdb known error
2024-08-15 11:50:34 -04:00
Mike Reeves
b5690f6879
Merge pull request #13483 from Security-Onion-Solutions/TOoSmOotH-patch-2
...
Update registry version
2024-08-15 09:36:30 -04:00
Mike Reeves
a39ad55578
Update registry version
2024-08-15 09:34:20 -04:00
weslambert
4c276d1211
Merge pull request #13482 from Security-Onion-Solutions/fix/cluster_space_total_field
...
Update column number because of changes to API
2024-08-15 08:29:39 -04:00
weslambert
5f74b1b730
Update column number because of changes to API
2024-08-15 08:26:56 -04:00
Doug Burks
b9040eb0de
Merge pull request #13481 from Security-Onion-Solutions/dougburks-patch-1
...
Update so-elasticsearch-cluster-space-used for changes in _cat/alloca…
2024-08-15 08:20:09 -04:00
Doug Burks
ab63d5dbdb
Update so-elasticsearch-cluster-space-used for changes in _cat/allocation API
2024-08-15 08:01:22 -04:00
Josh Patterson
f233f13637
Merge pull request #13478 from Security-Onion-Solutions/fixsurivars
...
handle suricata network and port vars as string or list
2024-08-13 15:52:11 -04:00
m0duspwnens
c8a8236401
handle suricata network and port vars as string or list
2024-08-13 15:44:08 -04:00
Doug Burks
f5603b1274
Merge pull request #13473 from Security-Onion-Solutions/dougburks-patch-1
...
Update SECURITY.md
2024-08-13 08:50:03 -04:00
Doug Burks
1d27fcc50e
Update SECURITY.md
2024-08-13 08:48:49 -04:00
Jason Ertel
dd2926201d
Merge pull request #13470 from Security-Onion-Solutions/jertel/chgpw
...
fix issue with reset pw and mfa
2024-08-12 17:29:50 -04:00
Jason Ertel
ebcef8adbd
fix issue with reset pw and mfa
2024-08-12 13:35:06 -04:00
Doug Burks
ff14217d38
Merge pull request #13467 from Security-Onion-Solutions/dougburks-patch-1
...
FEATURE: Add warning to soup about ssh #13466
2024-08-12 09:23:28 -04:00
Doug Burks
46596f01fa
FEATURE: Add warning to soup about ssh #13466
2024-08-12 09:18:29 -04:00
Doug Burks
c1388a68f0
FEATURE: Add warning to soup about ssh #13466
2024-08-12 09:12:49 -04:00
Jason Ertel
374da11037
Merge pull request #13457 from Security-Onion-Solutions/jerte/fixrepos
...
fix repo path
2024-08-09 07:01:00 -04:00
Jason Ertel
caa8d9ecb0
fix repo path
2024-08-09 06:58:40 -04:00
coreyogburn
02c7de6b1a
Merge pull request #13453 from Security-Onion-Solutions/cogburn/ai-summaries
...
Cogburn/ai summaries
2024-08-08 14:55:11 -06:00
Corey Ogburn
c71b9f6e8f
Fix CopyPasta
...
Strelka annotations referenced ElastAlert. Fixed.
2024-08-08 13:31:08 -06:00
Corey Ogburn
8c1feccbe0
Tweak value
2024-08-08 12:53:51 -06:00
Corey Ogburn
5ee15c8b41
Tweak value
2024-08-08 12:00:07 -06:00
Corey Ogburn
5328f55322
Remove new config value
2024-08-08 11:43:15 -06:00
Corey Ogburn
712f904c43
Config for Repo Folder
...
The folder we checkout the AI Summary repo into should definitely exist.
2024-08-08 10:57:07 -06:00
Corey Ogburn
ccd7d86302
More AI Summaries Config/Annotations
...
Added aiRepoBranch to all 3 detection engines.
Added showUnreviewedAiSummaries to client parameters.
Added annotations.
2024-08-08 10:46:41 -06:00
Corey Ogburn
fc89604982
New Config Values/Annotations for Ai Summaries
...
Each engine pulls the same repo into the same location and shows the summaries.
Which repo and where to keep them is advanced, but turning AI summaries on or off is not.
2024-08-06 13:55:54 -06:00
Jorge Reyes
09f7329a21
Merge pull request #13443 from Security-Onion-Solutions/reyesj2/kfano
...
correct firewall annotation for kafka
2024-08-06 15:29:02 -04:00
reyesj2
cfd6676583
update kafka firewall annotations config
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2024-08-06 14:40:53 -04:00
Josh Patterson
3713ee9d93
Merge pull request #13441 from Security-Onion-Solutions/issue/13438
...
Issue/13438
2024-08-06 10:43:23 -04:00
m0duspwnens
009c8d55c3
unhold all verions for upgrade
2024-08-06 09:26:58 -04:00
m0duspwnens
c0c01f0d17
lock and unlock salt in soup
2024-08-05 16:50:19 -04:00
m0duspwnens
2fe5dccbb4
fix hold/unhold
2024-08-05 15:25:28 -04:00
m0duspwnens
c83a143eef
apply holds to salt each state run
2024-08-05 15:13:07 -04:00
Jason Ertel
56ef2a4e1c
Merge pull request #13430 from Security-Onion-Solutions/jertel/retryreposync
...
retry up to 5 times if reposync fails
2024-08-02 14:59:27 -04:00
Jason Ertel
c36e8abc19
retry up to 5 times if reposync fails
2024-08-02 14:52:08 -04:00
Jason Ertel
e76293acdb
Merge pull request #13429 from Security-Onion-Solutions/jertel/retryreposync
...
retry up to 5 times if reposync fails
2024-08-02 14:19:30 -04:00
Jason Ertel
5bdb4ed51b
retry up to 5 times if reposync fails
2024-08-02 14:17:14 -04:00
Josh Patterson
aaf5d76071
Merge pull request #13425 from Security-Onion-Solutions/salt3006.9
...
Salt3006.9
2024-08-02 13:37:07 -04:00
m0duspwnens
d9a696a411
run state from local
2024-08-01 14:02:21 -04:00
m0duspwnens
76ab4c92f0
use salt to install py modules during setup
2024-08-01 13:37:22 -04:00
