6688 Commits

Author	SHA1	Message	Date
Mike Reeves	73ae48d28e	Merge pull request #9539 from Security-Onion-Solutions/mkr24 ... Changes to accept minion	2023-01-09 11:17:45 -05:00
Mike Reeves	0e1e9ff343	Changes to accept minion	2023-01-09 11:15:29 -05:00
Doug Burks	c1dfb9f935	Add missing Zeek log to filebeat defaults.yaml	2023-01-06 14:27:40 -05:00
Doug Burks	10e82c5f1c	Remove line numbers from vi	2023-01-06 14:23:54 -05:00
m0duspwnens	d4c6834cd0	merge with 2.4/dev	2023-01-06 14:01:58 -05:00
m0duspwnens	4aacc6d1db	change role names in so-firewall-minion	2023-01-06 11:09:09 -05:00
m0duspwnens	cb1822a62d	change ref to DOCKER.sosrange	2023-01-05 15:57:06 -05:00
m0duspwnens	f10238da42	fw changes	2023-01-04 16:06:14 -05:00
Mike Reeves	2e53476a06	Merge pull request #9516 from Security-Onion-Solutions/mkr24 ... Add PW auth for Redis	2023-01-04 14:50:27 -05:00
Mike Reeves	275aead5b9	Allow auth for redis check for tgraf	2023-01-04 14:30:28 -05:00
Mike Reeves	e52b54720a	Allow auth for redis check for tgraf	2023-01-04 14:26:24 -05:00
Mike Reeves	5afad52b3f	Allow auth for redis check for tgraf	2023-01-04 14:18:08 -05:00
Mike Reeves	9bc08661c5	Allow auth for redis check for tgraf	2023-01-04 14:15:53 -05:00
Mike Reeves	48a3f4e261	Allow auth for redis check for tgraf	2023-01-04 14:14:10 -05:00
doug	7ba4bdd87b	fix jinja whitespace	2023-01-04 13:50:25 -05:00
Mike Reeves	831300b540	Require password auth for redis access	2023-01-04 11:02:40 -05:00
Doug Burks	5754365c6d	Improve default sysmon fields and add new network_connection fields	2023-01-04 07:42:24 -05:00
Mike Reeves	08d7b24fb4	Update soc_global.yaml	2023-01-03 12:17:51 -05:00
Mike Reeves	df89445ab5	Update soc_global.yaml	2023-01-03 12:17:14 -05:00
m0duspwnens	203e612452	enable icc and hostbinding on sosbridge	2023-01-03 11:21:05 -05:00
m0duspwnens	c35a3e122f	add ip to container.add containers to sosbridge	2023-01-03 11:13:50 -05:00
Wes	c8ff2c7a06	Update RITA beacon parsing	2023-01-03 16:03:49 +00:00
doug	4e5d1d587e	update sysmon ingest parser and Sysmon File dashboard	2023-01-03 09:02:17 -05:00
Jason Ertel	a89976779d	Ensure create/update dates are both reset when an admin sets a user's password	2022-12-30 11:30:09 -05:00
Mike Reeves	058b4013aa	Merge pull request #9470 from Security-Onion-Solutions/kilo ... Kilo	2022-12-23 10:37:22 -05:00
Jason Ertel	136867c96a	ensure zombie pipe is destroyed before SOC restarts	2022-12-23 10:27:49 -05:00
Mike Reeves	75ffd1f56b	Update soc_global.yaml	2022-12-23 08:55:19 -05:00
m0duspwnens	24876eecd9	change refs from sosnet to sosbridge	2022-12-22 14:02:40 -05:00
Mike Reeves	3f0ded0638	Merge pull request #9464 from Security-Onion-Solutions/mkr24 ... Add global annotation and influx support	2022-12-22 13:57:56 -05:00
Mike Reeves	cd77e71d8d	Create annotation file for global settings	2022-12-22 13:37:41 -05:00
Mike Reeves	78f851e6c2	Create annotation file for global settings	2022-12-22 13:35:37 -05:00
m0duspwnens	90882ce1db	disable docker from managing iptables	2022-12-22 13:26:10 -05:00
Mike Reeves	a924d48408	Specify Influxdb host	2022-12-22 13:12:19 -05:00
Mike Reeves	308228620a	Specify Influxdb host	2022-12-22 13:05:33 -05:00
Doug Burks	2df4755fef	Enable Grafana in EVAL mode	2022-12-22 12:54:57 -05:00
Jason Ertel	a077645bb4	Merge branch '2.4/dev' into kilo	2022-12-22 10:27:13 -05:00
Jason Ertel	b6f37f8499	Correct indentation of client section	2022-12-22 10:26:51 -05:00
Doug Burks	e95034886e	add influxdb and telegraf to import mode	2022-12-22 09:49:57 -05:00
Doug Burks	9352854fe4	enable influxdb for eval and import modes	2022-12-22 09:48:38 -05:00
Doug Burks	75e16963c8	add influxdb and telegraf to import mode	2022-12-22 09:47:47 -05:00
Doug Burks	dfd5947051	add influxdb and telegraf to import mode	2022-12-22 09:46:27 -05:00
m0duspwnens	b4908e2bb9	add iptables.jinja	2022-12-22 09:31:45 -05:00
Jason Ertel	38634fde17	fix redis defaults to force string keys instead of numeric	2022-12-21 18:15:17 -05:00
Jason Ertel	8b6006e9c3	fix redis defaults to force string keys instead of numeric	2022-12-21 18:14:18 -05:00
Jason Ertel	3fd210463e	fix redis defaults to force string keys instead of numeric	2022-12-21 18:11:39 -05:00
Doug Burks	f99279ca24	Merge pull request #9453 from Security-Onion-Solutions/feature/improve-dashboards-2.4 ... FEATURE: Improve SOC Dashboards #9450 2.4	2022-12-21 15:46:11 -05:00
Doug Burks	69415a0d8d	Improve Strelka dashboard	2022-12-21 15:34:35 -05:00
Doug Burks	506556f0d2	Improve Firewall dashboard	2022-12-21 15:29:09 -05:00
Doug Burks	d7b2c88201	Improve Software dashboard	2022-12-21 15:24:58 -05:00
Doug Burks	4519c533a2	Improve Intel dashboard	2022-12-21 15:20:27 -05:00