Mike Reeves
388486ec08
Update init.sls
2022-11-02 10:06:13 -04:00
Mike Reeves
f74aee6a03
Update init.sls
2022-11-01 13:21:12 -04:00
Mike Reeves
16d8e9e5a0
Fix soup and perms updates
2022-11-01 09:05:26 -04:00
Mike Reeves
ee1f55361e
Add soup and perms updates
2022-10-31 16:33:38 -04:00
Mike Reeves
cb33464668
Merge pull request #9033 from Security-Onion-Solutions/strelkafix
...
Add Filechecks
2022-10-31 15:49:40 -04:00
Mike Reeves
06ddae13b5
Update filecheck
2022-10-31 15:41:57 -04:00
Mike Reeves
16d3dead04
Update sensor-rotate.conf
2022-10-31 15:33:10 -04:00
Mike Reeves
f7043f3f62
Update init.sls
2022-10-31 15:25:38 -04:00
Mike Reeves
bf41f2984a
Update init.sls
2022-10-31 14:58:55 -04:00
Mike Reeves
86ca3602f3
Update init.sls
2022-10-31 14:44:01 -04:00
Mike Reeves
416c28fded
Update init.sls
2022-10-31 14:42:23 -04:00
Mike Reeves
297373877a
Update init.sls
2022-10-31 14:36:40 -04:00
Mike Reeves
db9b93a96c
Update init.sls
2022-10-31 14:35:02 -04:00
Mike Reeves
5635375d8d
Update init.sls
2022-10-31 14:30:11 -04:00
Mike Reeves
07e72e4013
Update filecheck
2022-10-31 13:47:49 -04:00
Mike Reeves
518d2aaa9c
Update filecheck.yaml
2022-10-31 13:45:00 -04:00
Mike Reeves
e93e2995b7
Update filecheck
2022-10-31 13:42:18 -04:00
Mike Reeves
d2eb61a830
Update filecheck.yaml
2022-10-31 13:41:45 -04:00
Mike Reeves
4c5a2c0610
Update filecheck
2022-10-31 13:36:42 -04:00
Mike Reeves
e9e7362005
Add Filechecks
2022-10-31 12:57:08 -04:00
weslambert
a170c194c8
Remove JA3er references
2022-10-26 10:18:10 -04:00
Wes
a91e3b601c
Remove JA3er since it is no longer a valid service
2022-10-25 18:48:37 +00:00
Wes
4940421297
Add PyYAML .whl files back since they were 'deleted' in the previous commit
2022-10-25 18:47:51 +00:00
Wes
58b4a8fbab
Change PyYAML .whl file name to comply with Joliet's 240-character limit
2022-10-25 18:47:02 +00:00
Mike Reeves
bd7e12f682
Merge pull request #8952 from Njinx/dev
...
FEATURE: so-pcap-export can run without needing to be attached to a TTY
2022-10-25 14:38:48 -04:00
weslambert
0087768946
Revert "Change PyYAML .whl file name to comply with Joliet's 240-character limit/threshold"
2022-10-24 16:47:30 -04:00
Wes
1caac3f0b0
Add PyYAML .whl files back since they were 'deleted' in the previous commit.
2022-10-24 18:06:19 +00:00
Wes
54a5dd6cbd
Change name of PyYAML .whl file to remain under Joliet's 240-character limit/threshold
2022-10-24 18:05:15 +00:00
Jason Ertel
05e271af47
update soup for 2.3.181
2022-10-21 11:52:54 -04:00
Ben Allen
f13f05eb94
Run without needing to be attached to a TTY
2022-10-19 14:11:11 -04:00
Doug Burks
f4042263a3
Remove destination_geo.organization_name from Sysmon Network sankey diagram
2022-10-13 08:59:10 -04:00
Doug Burks
7401008523
Update soup for 2.3.180
2022-10-11 12:58:37 -04:00
doug
454a7a4799
FEATURE: Add new Sysmon dashboards #8870
2022-10-07 11:52:49 -04:00
Doug Burks
ab17cbee31
Update Elastic to 8.4.3
2022-10-07 07:03:10 -04:00
Doug Burks
9991f0cf95
update Elastic to 8.4.3
2022-10-07 07:02:24 -04:00
Mike Reeves
b8355b3a03
Update soup
2022-09-22 09:10:12 -04:00
bryant-treacle
535b9f86db
Merge pull request #8633 from Security-Onion-Solutions/bryant-sysmon
...
Fix issues: 8591-8953
2022-09-19 11:53:34 -04:00
Josh Brower
e171dd52b8
Upgrade Elastic to 8.4.1
2022-08-30 16:11:40 -04:00
Josh Brower
27a837369d
Upgrade Elastic to 8.4.1
2022-08-30 16:09:57 -04:00
bryant-treacle
82dff3e9da
Fix issues: 8591-8953
2022-08-30 13:48:53 +00:00
Mike Reeves
76cca8594d
Merge pull request #8623 from Security-Onion-Solutions/TOoSmOotH-patch-6
...
Update soup
2022-08-29 09:50:06 -04:00
weslambert
5c9c95ba1f
Merge pull request #8622 from Security-Onion-Solutions/fix/strelka_yara_gen_webshells_ignore
...
Ignore gen_webshells.yar
2022-08-29 09:40:51 -04:00
Mike Reeves
e62bebeafe
Update soup
2022-08-29 09:39:41 -04:00
weslambert
8a0e92cc6f
Add 'gen_webshells.yar' and re-arrange to put ignored rules in alphabetical order
2022-08-29 09:37:29 -04:00
Mike Reeves
30b9868de1
Update soup
2022-08-29 09:32:46 -04:00
weslambert
f00d9074ff
Allow local modification acceptance prompt to be skipped when passing 'skip-prompt' as a parameter value to check_local_mods() function
2022-08-19 16:07:14 -04:00
Mike Reeves
fea2b481e3
Update rulecat.conf
2022-08-19 13:12:49 -04:00
weslambert
fbf0803906
Update verbiage around major Elasticsearch version and not requiring Elastalert index maintenance
2022-08-18 09:16:22 -04:00
weslambert
5deda45b66
Update elastalert_indices_check() function to only delete Elastalert indices if major Elasticsearch version is less than 8
...
Update elastalert_indices_check() function to only delete Elastalert indices if major Elasticsearch version is less than 8. Also clean up the output to only emit one notification regarding index deletion, and additional verbiage around function operation.
2022-08-18 09:11:38 -04:00
m0duspwnens
2dfd41bd3c
remove pipeline time panel - https://github.com/Security-Onion-Solutions/securityonion/issues/8369
2022-08-17 09:17:27 -04:00