Mike Reeves
|
c4fea9cb9d
|
Update nginx.conf
|
2023-09-27 11:03:58 -04:00 |
|
Jason Ertel
|
af2ff2b07c
|
Merge pull request #11399 from Security-Onion-Solutions/jertel/lc
don't inspect imported zeek output
|
2023-09-27 09:45:39 -04:00 |
|
Jason Ertel
|
b47d915cb6
|
don't inspect imported zeek output
|
2023-09-27 09:30:19 -04:00 |
|
Jason Ertel
|
376d525ad7
|
Merge pull request #11398 from Security-Onion-Solutions/jertel/lc
skip zeek spool logs due to test data false positives
|
2023-09-26 22:01:50 -04:00 |
|
Jason Ertel
|
9c854a13cc
|
skip zeek spool logs due to test data false positives
|
2023-09-26 21:41:44 -04:00 |
|
Jason Ertel
|
ff780738fd
|
Merge pull request #11397 from Security-Onion-Solutions/jertel/lc
log check tool initial
|
2023-09-26 18:23:41 -04:00 |
|
Jason Ertel
|
2c8d413f16
|
log check tool initial
|
2023-09-26 18:14:37 -04:00 |
|
Jason Ertel
|
48801da44e
|
log check tool initial
|
2023-09-26 18:12:20 -04:00 |
|
Josh Patterson
|
641b8ef0b6
|
Merge pull request #11393 from Security-Onion-Solutions/issue/11390
Issue/11390
|
2023-09-26 13:26:42 -04:00 |
|
m0duspwnens
|
036a21ff17
|
Merge remote-tracking branch 'origin/2.4/dev' into issue/11390
|
2023-09-26 11:01:44 -04:00 |
|
m0duspwnens
|
2abf434ebe
|
create snapshots of default, local salt and pillars during soup. rsync soup with --delete
|
2023-09-26 10:56:20 -04:00 |
|
weslambert
|
4dc477cc1d
|
Merge pull request #11391 from Security-Onion-Solutions/fix/elasticsearch_strelka_image_version
Make scan.pe.image_version type of 'float'
|
2023-09-26 10:21:17 -04:00 |
|
Wes
|
0bba68769b
|
Make scan.pe.image_version type of 'float'
|
2023-09-26 14:05:12 +00:00 |
|
m0duspwnens
|
e25d1c0ff3
|
so-salt-minion-check is jinja template
|
2023-09-26 10:01:21 -04:00 |
|
weslambert
|
f9ace4791f
|
Merge pull request #11384 from Security-Onion-Solutions/fix/analyzers_testing
Add a note about testing analyzers outside of the Sensoroni Docker container
|
2023-09-25 14:48:45 -04:00 |
|
weslambert
|
7cb9b5f257
|
Add the blank line that was removed from the previous commit
|
2023-09-25 14:41:20 -04:00 |
|
weslambert
|
c95af6b992
|
Add a note about testing analyzers outside of the Sensoroni Docker container
|
2023-09-25 14:39:33 -04:00 |
|
weslambert
|
2fc4d2923d
|
Merge pull request #11289 from Security-Onion-Solutions/fix/elastic_agent_404
/app/dashboards to /kibana/app/dashboards
|
2023-09-25 09:11:50 -04:00 |
|
Wes
|
eeeae08ec8
|
/app/ to /app/dashboards/
|
2023-09-21 18:39:06 +00:00 |
|
Jason Ertel
|
220f25e206
|
Merge pull request #11369 from Security-Onion-Solutions/jertel-patch-1
Update soup to prune in background
|
2023-09-21 09:42:28 -04:00 |
|
Jason Ertel
|
fa3a79a787
|
Update soup to prune in background
|
2023-09-21 09:41:44 -04:00 |
|
Doug Burks
|
ca71add51b
|
Merge pull request #11363 from Security-Onion-Solutions/dougburks-patch-1
FIX: SOC Config sensoroni doc links should point to correct docs #11362
|
2023-09-20 08:29:30 -04:00 |
|
Doug Burks
|
3fa3f83007
|
Update soc_sensoroni.yaml
|
2023-09-20 08:22:52 -04:00 |
|
weslambert
|
377802410e
|
Merge pull request #11352 from Security-Onion-Solutions/fix/import_evtx_exists
Fix EVTX Imports
|
2023-09-19 16:11:22 -04:00 |
|
Wes
|
2e0ea3f374
|
Set final pipeline
|
2023-09-19 13:33:12 +00:00 |
|
Wes
|
508260bd46
|
Use event.created for timestamp
|
2023-09-19 13:32:03 +00:00 |
|
Wes
|
a1e963f834
|
Reverse timestamps where necessary
|
2023-09-19 13:28:20 +00:00 |
|
Jason Ertel
|
8a98040008
|
Merge pull request #11351 from Security-Onion-Solutions/jertel/auto
ignore debian apt update output
|
2023-09-19 09:26:31 -04:00 |
|
Jason Ertel
|
47e611682a
|
ignore debian apt update output
|
2023-09-19 09:24:12 -04:00 |
|
Wes
|
5bac1e4d15
|
Show correct dates and Kibana URL for already processed EVTX files
|
2023-09-18 21:31:15 +00:00 |
|
Jason Ertel
|
ad025b9683
|
Merge pull request #11345 from Security-Onion-Solutions/jertel/auto
ensure all binds are present to avoid volume sprawl
|
2023-09-18 15:34:57 -04:00 |
|
Josh Patterson
|
3e97ddc22d
|
Merge pull request #11344 from Security-Onion-Solutions/fix/idstoolextra_env
fix idstool extra_env for container
|
2023-09-18 15:29:33 -04:00 |
|
m0duspwnens
|
151e8bfc4e
|
fix idstool extra_env for container
|
2023-09-18 15:21:45 -04:00 |
|
Jason Ertel
|
a914a02273
|
prune unused volumes during upgrade
|
2023-09-18 14:43:02 -04:00 |
|
Jason Ertel
|
bb3632d1b2
|
fix bind if statement
|
2023-09-18 14:38:15 -04:00 |
|
Jason Ertel
|
66bb1272ae
|
avoid volume sprawl
|
2023-09-18 13:39:56 -04:00 |
|
Jason Ertel
|
bbef96ac25
|
use unique name
|
2023-09-18 12:12:57 -04:00 |
|
Jason Ertel
|
f9cbde10a6
|
avoid volume sprawl
|
2023-09-18 11:19:21 -04:00 |
|
weslambert
|
fe1bae96ed
|
Merge pull request #11297 from Security-Onion-Solutions/fix/soc_idh
Change description to indicate that opencanary modules only apply to IDH nodes
|
2023-09-15 11:16:06 -04:00 |
|
weslambert
|
eab6173a31
|
Merge pull request #11329 from Security-Onion-Solutions/fix/elastic_templates_clean
Clean component template directory
|
2023-09-15 11:00:17 -04:00 |
|
Wes
|
98499c3963
|
Clean component template directory
|
2023-09-15 13:51:46 +00:00 |
|
Josh Patterson
|
26da525ebe
|
Merge pull request #11328 from Security-Onion-Solutions/fix/checkreq
improvents for checking system requirements
|
2023-09-15 09:17:04 -04:00 |
|
m0duspwnens
|
c65c9777bd
|
improvents for checking system requirements
|
2023-09-14 17:42:25 -04:00 |
|
Josh Brower
|
af68af7f18
|
Merge pull request #11317 from Security-Onion-Solutions/2.4/fixes
Regex & Transform Role
|
2023-09-14 10:59:56 -04:00 |
|
defensivedepth
|
0c11a9b733
|
Add transform role
|
2023-09-14 09:33:17 -04:00 |
|
defensivedepth
|
59d077f3ff
|
Fix regex
|
2023-09-14 08:32:17 -04:00 |
|
Jason Ertel
|
6383712731
|
Merge pull request #11315 from Security-Onion-Solutions/jertel/auto
exclude docker pull unauth errors from failing setup
|
2023-09-14 07:41:59 -04:00 |
|
Jason Ertel
|
e067b7134e
|
exclude docker pull unauth errors from failing setup since they'll be retried
|
2023-09-14 07:38:07 -04:00 |
|
Mike Reeves
|
183c530c82
|
Merge pull request #11308 from Security-Onion-Solutions/pcapfree
Update so-minion
|
2023-09-13 13:47:21 -04:00 |
|
Mike Reeves
|
33d68478b6
|
Update so-minion
|
2023-09-13 11:48:16 -04:00 |
|