  weslambertandGitHub
|
cc66daba1a
|
Make sure optional integration pillar values are merged with defaults
|
2024-01-11 14:49:39 -05:00 |
|
|
weslambertandGitHub
|
7bdc306ad4
|
Merge pull request #12160 from Security-Onion-Solutions/feature/additional_integrations_3
Additional Supported Integrations #3
|
2024-01-11 12:26:14 -05:00 |
|
|
weslambertandGitHub
|
5e1e685ce0
|
Exclude Cisco failed_attempts pipeline
|
2024-01-11 10:52:30 -05:00 |
|
|
Wes
|
c89d674a92
|
Add settings for integrations
|
2024-01-11 14:18:06 +00:00 |
|
|
Wes
|
9b1ddcacb4
|
Add additional templates for integrations
|
2024-01-11 14:00:09 +00:00 |
|
|
Wes
|
5703023008
|
Add additional packages
|
2024-01-11 13:59:38 +00:00 |
|
|
weslambertandGitHub
|
cfb5c1c9d2
|
Merge pull request #12063 from Security-Onion-Solutions/fix/curator_log_check
Ignore Curator logs
|
2023-12-20 17:47:17 -05:00 |
|
|
weslambertandGitHub
|
244968ce23
|
Remove unnecessary blank lines
|
2023-12-20 17:30:15 -05:00 |
|
|
weslambertandGitHub
|
65f89b22b2
|
Ignore Curator logs
|
2023-12-20 17:28:55 -05:00 |
|
|
weslambertandGitHub
|
7684aadb87
|
Merge pull request #12062 from Security-Onion-Solutions/fix/curator_remove
Curator Remove Changes
|
2023-12-20 15:16:47 -05:00 |
|
|
Wes
|
188744357f
|
Remove post since function doesn't exist
|
2023-12-20 19:14:14 +00:00 |
|
|
Wes
|
4baf4657f6
|
Curator cleanup
|
2023-12-20 19:10:22 +00:00 |
|
|
Wes
|
1006710226
|
Change Curator disable config
|
2023-12-20 18:26:27 +00:00 |
|
|
weslambertandGitHub
|
cd661027a6
|
Remove post for 2.4.40
|
2023-12-20 12:23:20 -05:00 |
|
|
weslambertandGitHub
|
ba2c51bee2
|
Merge pull request #12052 from Security-Onion-Solutions/fix/analyzer_images
Fix analyzer images
|
2023-12-19 14:30:19 -05:00 |
|
|
Wes
|
62708ac97d
|
Add new image
|
2023-12-19 18:58:17 +00:00 |
|
|
Wes
|
f8fdc6d14e
|
Remove old image
|
2023-12-19 18:57:54 +00:00 |
|
|
Wes
|
15773bae34
|
Fix analyzer image links
|
2023-12-19 18:42:59 +00:00 |
|
|
Wes
|
c06de33318
|
Test EchoTrail image
|
2023-12-19 18:36:55 +00:00 |
|
|
Wes
|
41dc9df7cd
|
Add images for analyzers
|
2023-12-19 18:35:10 +00:00 |
|
|
weslambertandGitHub
|
69472e70b4
|
Merge pull request #12003 from HoangLongVu/2.4/dev
2.4/dev Analyzers for Threatfox, MalwareBazaar, Echotrail, Elasticsearch
|
2023-12-19 12:09:16 -05:00 |
|
|
Wes
|
85242651b2
|
Add Sublime image to assets and change link
|
2023-12-19 15:49:57 +00:00 |
|
|
Wes
|
6ab12ceec4
|
Add Elasticsearch image to assets and change link
|
2023-12-19 15:46:02 +00:00 |
|
|
Wes
|
bfcf7d4668
|
Add EchoTrail image to assets and change link
|
2023-12-19 15:42:23 +00:00 |
|
|
Wes
|
4a23832267
|
Don't require advanced options for required values
|
2023-12-19 15:14:33 +00:00 |
|
|
Wes
|
614589153b
|
Update Malwarebazaar test and comply with flake8
|
2023-12-19 02:57:35 +00:00 |
|
|
Wes
|
8f6b1a07b7
|
Don't use soup for removing Curator files
|
2023-12-18 20:54:24 +00:00 |
|
|
Wes
|
6c92672566
|
Remove Curator configuration and scripts
|
2023-12-18 20:53:56 +00:00 |
|
|
Wes
|
aba5893965
|
Add disabled state for Curator
|
2023-12-18 20:50:49 +00:00 |
|
|
Wes
|
6a4e05d60f
|
Remove control characters
|
2023-12-15 20:53:51 +00:00 |
|
|
Wes
|
981f3642a0
|
Update tests
|
2023-12-15 20:53:19 +00:00 |
|
|
Wes
|
020472085b
|
ThreatFox test
|
2023-12-15 15:16:44 +00:00 |
|
|
Wes
|
8aaeee20b9
|
Fix import
|
2023-12-15 14:40:25 +00:00 |
|
|
Wes
|
e32de6893b
|
Remove control characters
|
2023-12-15 14:27:27 +00:00 |
|
|
Wes
|
f05eb742dd
|
Fix patch
|
2023-12-15 14:26:33 +00:00 |
|
|
Wes
|
cd3a661dd6
|
Set malwarebazaar.py to be executable
|
2023-12-15 14:17:33 +00:00 |
|
|
weslambertandGitHub
|
55c957170d
|
Reduce complexity
|
2023-12-15 09:00:31 -05:00 |
|
|
weslambertandGitHub
|
d0d671a828
|
Merge pull request #12020 from Security-Onion-Solutions/fix/integration_force
Add force option to integrations
|
2023-12-14 13:44:32 -05:00 |
|
|
Wes
|
22fcccef1c
|
Add force option
|
2023-12-14 16:53:19 +00:00 |
|
|
weslambertandGitHub
|
5d3f2298b6
|
Merge pull request #12000 from Security-Onion-Solutions/feature/additional_integrations
Additional Integrations #2
|
2023-12-13 13:23:34 -05:00 |
|
|
weslambertandGitHub
|
8cf5d9c1a6
|
Annotations
|
2023-12-13 11:55:40 -05:00 |
|
|
weslambertandGitHub
|
cdac2bfa16
|
Add Anomali, Cybersixgill, Snort, and ThreatQuotient
|
2023-12-13 11:03:25 -05:00 |
|
|
weslambertandGitHub
|
b0a69d30c9
|
Add Anomali, Cybersixgill, Snort, and ThreatQuotient packages
|
2023-12-13 10:44:03 -05:00 |
|
|
weslambertandGitHub
|
e95932f28c
|
Merge pull request #11990 from Security-Onion-Solutions/fix/remove_curator
Remove Curator
|
2023-12-12 12:31:16 -05:00 |
|
|
Wes
|
bbe091fa14
|
Fix accidental change
|
2023-12-12 15:08:47 +00:00 |
|
|
Wes
|
54c3167b10
|
Delete data streams when necessary
|
2023-12-12 05:25:50 +00:00 |
|
|
Wes
|
b1721b6467
|
Fix directory
|
2023-12-11 21:43:25 +00:00 |
|
|
Wes
|
f7373ed79c
|
Stop Curator, remove scripts and status
|
2023-12-11 19:20:52 +00:00 |
|
|
Wes
|
d203aec44a
|
Remove Curator
|
2023-12-08 19:37:06 +00:00 |
|
|
weslambertandGitHub
|
b80d7fd610
|
Merge pull request #11967 from Security-Onion-Solutions/fix/close_remove
Remove Curator close configuration
|
2023-12-07 15:05:38 -05:00 |
|
|
Wes
|
849e9e14ad
|
Change soup to remove delete actions and run post_to_2.4.40
|
2023-12-07 16:49:44 +00:00 |
|
|
Wes
|
0ebc8c7beb
|
Change path
|
2023-12-07 15:17:51 +00:00 |
|
|
Wes
|
e0801282eb
|
Remove files
|
2023-12-07 14:07:26 +00:00 |
|
|
Wes
|
bdf4b2c68d
|
Remove settings
|
2023-12-07 14:03:45 +00:00 |
|
|
Wes
|
e49fc0dd27
|
Remove more settings
|
2023-12-07 14:03:09 +00:00 |
|
|
Wes
|
f52da4a933
|
Remove close settings and cron
|
2023-12-07 13:58:39 +00:00 |
|
|
Wes
|
f38758a9c7
|
Remove close scripts
|
2023-12-07 13:52:25 +00:00 |
|
|
Wes
|
1ac3a2d2f1
|
Remove delete files and allow deletion of indices managed by ILM
|
2023-12-07 13:51:24 +00:00 |
|
|
Wes
|
965ced94c4
|
Remove close files
|
2023-12-07 13:48:08 +00:00 |
|
|
weslambertandGitHub
|
fea5a3026d
|
Merge pull request #11955 from Security-Onion-Solutions/fix/sublime_analyzer_documentation
Sublime Analyzer Documentation
|
2023-12-06 13:27:03 -05:00 |
|
|
weslambertandGitHub
|
7f21bee0d4
|
Add README
|
2023-12-06 13:14:17 -05:00 |
|
|
weslambertandGitHub
|
ade3a46a9a
|
Add LocalFile link
|
2023-12-06 12:58:44 -05:00 |
|
|
weslambertandGitHub
|
e6a2e49d37
|
Add Sublime Platform
|
2023-12-06 12:57:59 -05:00 |
|
|
weslambertandGitHub
|
1438913f6a
|
Merge pull request #11954 from Security-Onion-Solutions/fix/sublime_analyzer_indentation
Fix indentation for rule_results
|
2023-12-06 12:50:44 -05:00 |
|
|
Wes
|
51fa4922b9
|
Fix indentation for rule_results
|
2023-12-06 17:37:07 +00:00 |
|
|
weslambertandGitHub
|
4becf3e20f
|
Merge pull request #11950 from Security-Onion-Solutions/fix/eml_observable
Add eml observable type
|
2023-12-06 08:30:27 -05:00 |
|
|
weslambertandGitHub
|
0334ef9677
|
Add eml observable type
|
2023-12-05 19:10:16 -05:00 |
|
|
weslambertandGitHub
|
0537e1b3f6
|
Merge pull request #11945 from Security-Onion-Solutions/feature/sublime_platform_analyzer
Sublime Platform Analyzer
|
2023-12-05 16:51:03 -05:00 |
|
|
Wes
|
6fff05b444
|
Remove pytest.ini
|
2023-12-05 20:14:17 +00:00 |
|
|
Wes
|
01a37df7fc
|
Add extra line
|
2023-12-05 20:02:12 +00:00 |
|
|
Wes
|
b3e78c9cc3
|
Update live flow option
|
2023-12-05 19:55:23 +00:00 |
|
|
Wes
|
d871b61150
|
Change author
|
2023-12-05 18:36:25 +00:00 |
|
|
Wes
|
b2536a64d8
|
Remove extra space
|
2023-12-05 18:33:00 +00:00 |
|
|
Wes
|
3d1eecfad6
|
Add Sublime Platform analyzer
|
2023-12-05 18:31:50 +00:00 |
|
|
weslambertandGitHub
|
55052c4811
|
Merge pull request #11919 from Security-Onion-Solutions/fix/remove_curator_changes
Remove Curator Changes
|
2023-12-01 11:15:23 -05:00 |
|
|
Wes
|
e36044e164
|
Remove close changes
|
2023-12-01 16:10:56 +00:00 |
|
|
Wes
|
6fa4a69753
|
Remove action changes
|
2023-12-01 16:10:07 +00:00 |
|
|
weslambertandGitHub
|
32b03f514e
|
Merge pull request #11907 from Security-Onion-Solutions/fix/curator_close
Curator close fixes
|
2023-11-30 11:05:49 -05:00 |
|
|
Wes
|
a605c5c62c
|
Ensure indices managed by ILM can be managed by Curator
|
2023-11-29 22:13:20 +00:00 |
|
|
Wes
|
2368e8b793
|
Fix action file names
|
2023-11-29 22:06:11 +00:00 |
|
|
weslambertandGitHub
|
317b6cb614
|
Merge pull request #11902 from Security-Onion-Solutions/fix/hotfix_version
Update HOTFIX
|
2023-11-29 17:03:59 -05:00 |
|
|
weslambertandGitHub
|
a6d20bdc71
|
Update HOTFIX
|
2023-11-29 17:01:29 -05:00 |
|
|
weslambertandGitHub
|
1a4d009b7f
|
Merge pull request #11896 from Security-Onion-Solutions/feature/elastic_certificate_fingerprints
Add certificate fingerprints
|
2023-11-29 12:07:50 -05:00 |
|
|
weslambertandGitHub
|
9d63a47792
|
Certificate hash
|
2023-11-29 12:01:43 -05:00 |
|
|
weslambertandGitHub
|
7001e90667
|
Client and server fingerprints
|
2023-11-29 12:00:46 -05:00 |
|
|
weslambertandGitHub
|
a0573212c0
|
Merge pull request #11891 from Security-Onion-Solutions/fix/elastic_ignore_analyzer
Ignore analyzer log
|
2023-11-29 10:05:01 -05:00 |
|
|
weslambertandGitHub
|
5f79644aef
|
Ignore analyzer log
|
2023-11-29 10:02:13 -05:00 |
|
|
weslambertandGitHub
|
b6e2df45c7
|
Update HOTFIX
|
2023-11-16 14:48:00 -05:00 |
|
|
weslambertandGitHub
|
46c5bf40e0
|
Merge pull request #11804 from Security-Onion-Solutions/fix/kibana_corrupt_integration
Discard corrupt integration
|
2023-11-16 10:49:39 -05:00 |
|
|
Wes
|
3ed7b36865
|
Discard corrupt integration
|
2023-11-16 15:45:38 +00:00 |
|
|
weslambertandGitHub
|
aeb09b16db
|
Merge pull request #11760 from Security-Onion-Solutions/fix/elastic_packages
Add Elastic Agent package and upgrade packages when elasticfleet.packages list changes
|
2023-11-10 10:20:17 -05:00 |
|
|
weslambertandGitHub
|
583ec5176e
|
Add package check
|
2023-11-10 10:15:52 -05:00 |
|
|
weslambertandGitHub
|
4bb1dabb89
|
Add elastic_agent
|
2023-11-10 10:14:59 -05:00 |
|
|
weslambertandGitHub
|
02baa18502
|
Add metrics
|
2023-11-08 22:41:24 -05:00 |
|
|
weslambertandGitHub
|
e39edab00d
|
Exclude osquery and display failed name
|
2023-11-08 20:55:08 -05:00 |
|
|
weslambertandGitHub
|
acb6e84248
|
Don't load index template if component template doesn't exist
|
2023-11-08 20:34:08 -05:00 |
|
|
weslambertandGitHub
|
9df3a8fc18
|
Merge pull request #11740 from Security-Onion-Solutions/fix/elastic_templates
Remove template files
|
2023-11-08 15:20:01 -05:00 |
|
|
weslambertandGitHub
|
36098e6314
|
Remove template files
|
2023-11-08 14:32:58 -05:00 |
|
|
Wes
|
653fda124f
|
Check expected with retry
|
2023-11-08 13:02:17 +00:00 |
|
|
Wes
|
b46e86c39b
|
Extend index template loading to 60 attempts and a total of ~5 minutes
|
2023-11-08 02:29:09 +00:00 |
|