Commit Graph

6603 Commits

Author SHA1 Message Date
Doug Burks
c1dfb9f935 Add missing Zeek log to filebeat defaults.yaml 2023-01-06 14:27:40 -05:00
Doug Burks
10e82c5f1c Remove line numbers from vi 2023-01-06 14:23:54 -05:00
Mike Reeves
2e53476a06 Merge pull request #9516 from Security-Onion-Solutions/mkr24
Add PW auth for Redis
2023-01-04 14:50:27 -05:00
Mike Reeves
275aead5b9 Allow auth for redis check for tgraf 2023-01-04 14:30:28 -05:00
Mike Reeves
e52b54720a Allow auth for redis check for tgraf 2023-01-04 14:26:24 -05:00
Mike Reeves
5afad52b3f Allow auth for redis check for tgraf 2023-01-04 14:18:08 -05:00
Mike Reeves
9bc08661c5 Allow auth for redis check for tgraf 2023-01-04 14:15:53 -05:00
Mike Reeves
48a3f4e261 Allow auth for redis check for tgraf 2023-01-04 14:14:10 -05:00
doug
7ba4bdd87b fix jinja whitespace 2023-01-04 13:50:25 -05:00
Mike Reeves
831300b540 Require password auth for redis access 2023-01-04 11:02:40 -05:00
Doug Burks
5754365c6d Improve default sysmon fields and add new network_connection fields 2023-01-04 07:42:24 -05:00
Mike Reeves
08d7b24fb4 Update soc_global.yaml 2023-01-03 12:17:51 -05:00
Mike Reeves
df89445ab5 Update soc_global.yaml 2023-01-03 12:17:14 -05:00
Wes
c8ff2c7a06 Update RITA beacon parsing 2023-01-03 16:03:49 +00:00
doug
4e5d1d587e update sysmon ingest parser and Sysmon File dashboard 2023-01-03 09:02:17 -05:00
Jason Ertel
a89976779d Ensure create/update dates are both reset when an admin sets a user's password 2022-12-30 11:30:09 -05:00
Mike Reeves
058b4013aa Merge pull request #9470 from Security-Onion-Solutions/kilo
Kilo
2022-12-23 10:37:22 -05:00
Jason Ertel
136867c96a ensure zombie pipe is destroyed before SOC restarts 2022-12-23 10:27:49 -05:00
Mike Reeves
75ffd1f56b Update soc_global.yaml 2022-12-23 08:55:19 -05:00
Mike Reeves
3f0ded0638 Merge pull request #9464 from Security-Onion-Solutions/mkr24
Add global annotation and influx support
2022-12-22 13:57:56 -05:00
Mike Reeves
cd77e71d8d Create annotation file for global settings 2022-12-22 13:37:41 -05:00
Mike Reeves
78f851e6c2 Create annotation file for global settings 2022-12-22 13:35:37 -05:00
Mike Reeves
a924d48408 Specify Influxdb host 2022-12-22 13:12:19 -05:00
Mike Reeves
308228620a Specify Influxdb host 2022-12-22 13:05:33 -05:00
Doug Burks
2df4755fef Enable Grafana in EVAL mode 2022-12-22 12:54:57 -05:00
Jason Ertel
a077645bb4 Merge branch '2.4/dev' into kilo 2022-12-22 10:27:13 -05:00
Jason Ertel
b6f37f8499 Correct indentation of client section 2022-12-22 10:26:51 -05:00
Doug Burks
e95034886e add influxdb and telegraf to import mode 2022-12-22 09:49:57 -05:00
Doug Burks
9352854fe4 enable influxdb for eval and import modes 2022-12-22 09:48:38 -05:00
Doug Burks
75e16963c8 add influxdb and telegraf to import mode 2022-12-22 09:47:47 -05:00
Doug Burks
dfd5947051 add influxdb and telegraf to import mode 2022-12-22 09:46:27 -05:00
Jason Ertel
38634fde17 fix redis defaults to force string keys instead of numeric 2022-12-21 18:15:17 -05:00
Jason Ertel
8b6006e9c3 fix redis defaults to force string keys instead of numeric 2022-12-21 18:14:18 -05:00
Jason Ertel
3fd210463e fix redis defaults to force string keys instead of numeric 2022-12-21 18:11:39 -05:00
Doug Burks
f99279ca24 Merge pull request #9453 from Security-Onion-Solutions/feature/improve-dashboards-2.4
FEATURE: Improve SOC Dashboards #9450 2.4
2022-12-21 15:46:11 -05:00
Doug Burks
69415a0d8d Improve Strelka dashboard 2022-12-21 15:34:35 -05:00
Doug Burks
506556f0d2 Improve Firewall dashboard 2022-12-21 15:29:09 -05:00
Doug Burks
d7b2c88201 Improve Software dashboard 2022-12-21 15:24:58 -05:00
Doug Burks
4519c533a2 Improve Intel dashboard 2022-12-21 15:20:27 -05:00
Josh Patterson
8d35e0120e Merge pull request #9451 from Security-Onion-Solutions/2.4/so-kibana-config-load
need space between curl.config and -X
2022-12-21 15:11:54 -05:00
m0duspwnens
6d6fa4c1e3 need space between curl.config and -X 2022-12-21 15:06:56 -05:00
Doug Burks
3a367d69f4 Improve FTP dashboard 2022-12-21 14:37:17 -05:00
Doug Burks
a4f1f75306 Improve NIDS Alerts dashboard 2022-12-21 14:33:01 -05:00
Jason Ertel
5a5c565fae Merge pull request #9449 from Security-Onion-Solutions/kilo
Ensure user/pass values are quoted due to symbol chars appearing in values
2022-12-21 14:02:38 -05:00
Jason Ertel
0889d49025 Ensure user/pass values are quoted due to symbol chars appearing in the values 2022-12-21 14:00:10 -05:00
Doug Burks
3d1ce4ef10 Improve SOC dashboards 2022-12-21 13:26:04 -05:00
Jason Ertel
33a1aea729 Merge pull request #9448 from Security-Onion-Solutions/kilo
improve so-status rendering on terminals that only support 8 colors
2022-12-21 10:14:47 -05:00
Jason Ertel
8e63909edf improve so-status rendering on terminals that only support 8 colors 2022-12-21 10:11:38 -05:00
Mike Reeves
ab9edd4e6b Merge pull request #9421 from Security-Onion-Solutions/mkr24
Redis defaults.yaml
2022-12-21 09:15:49 -05:00
Mike Reeves
e1d0f99a14 Modify redis config defaults 2022-12-20 22:00:10 -05:00