weslambert
|
cce80eb2fb
|
Change pipeline to 1.8.0
|
2023-11-07 09:02:48 -05:00 |
|
Josh Brower
|
f6cd35e143
|
Set execute permissions
|
2023-11-06 08:03:31 -05:00 |
|
Jason Ertel
|
d010af9a24
|
Merge pull request #11718 from Security-Onion-Solutions/jertel/auto
disregard false positives
|
2023-11-04 16:32:02 -04:00 |
|
Jason Ertel
|
7a0b21647f
|
disregard false positives
|
2023-11-04 10:05:37 -04:00 |
|
Josh Patterson
|
610374816d
|
Merge pull request #11714 from Security-Onion-Solutions/change/so-minion
apply es and soc states to manager if new search or hn are added
|
2023-11-03 16:43:16 -04:00 |
|
Josh Brower
|
0086c24729
|
Upgrade Elastic Agent
|
2023-11-03 15:21:06 -04:00 |
|
m0duspwnens
|
9d2b84818f
|
apply es and soc states to manager if new search or hn are added
|
2023-11-03 15:00:13 -04:00 |
|
Mike Reeves
|
3d8663db66
|
Update soc_elasticsearch.yaml
|
2023-11-03 11:29:45 -04:00 |
|
Josh Brower
|
a8b0e41dbe
|
exit 0
|
2023-11-03 11:04:52 -04:00 |
|
Jason Ertel
|
1bc4b44be7
|
Merge pull request #11709 from Security-Onion-Solutions/jertel/auto
ignore malformed open canary log lines
|
2023-11-03 09:17:23 -04:00 |
|
Jason Ertel
|
1a3d4a2051
|
ignore malformed open canary log lines
|
2023-11-03 09:14:26 -04:00 |
|
Josh Brower
|
8c7767b381
|
Dont overwrite metadata
|
2023-11-03 08:41:33 -04:00 |
|
Wes
|
5bfef3f527
|
Add checkpoint and vsphere templates
|
2023-11-02 21:10:01 +00:00 |
|
Wes
|
3875970dc5
|
Add checkpoint and vsphere packages
|
2023-11-02 21:09:37 +00:00 |
|
Jason Ertel
|
7aa4f28524
|
Merge pull request #11702 from Security-Onion-Solutions/jertel/auto
ignore connectivity problems to docker containers during startup
|
2023-11-02 16:48:09 -04:00 |
|
Jason Ertel
|
96fdfb3829
|
ignore connectivity problems to docker containers during startup
|
2023-11-02 16:46:41 -04:00 |
|
weslambert
|
51e7861757
|
Don't source so-elastic-fleet-common if not there
|
2023-11-02 16:41:34 -04:00 |
|
Jason Ertel
|
6332df04d1
|
Merge pull request #11695 from Security-Onion-Solutions/jertel/auto
Jertel/auto
|
2023-11-02 13:07:09 -04:00 |
|
Jason Ertel
|
32701b5941
|
more log bypass
|
2023-11-02 12:50:12 -04:00 |
|
Josh Brower
|
0dec6693dc
|
Merge pull request #11678 from Security-Onion-Solutions/2.4/fleetreset
Add Elastic Fleet reset script
|
2023-11-02 11:33:58 -04:00 |
|
Jason Ertel
|
41a6ab5b4f
|
Merge pull request #11691 from Security-Onion-Solutions/jertel/auto
more log bypass
|
2023-11-02 10:41:17 -04:00 |
|
Jason Ertel
|
e18e0fd69a
|
more log bypass
|
2023-11-02 10:39:14 -04:00 |
|
Josh Patterson
|
9a76cfe3d3
|
Merge pull request #11690 from Security-Onion-Solutions/upgrade/salt3006.3v2
fix UPGRADECOMMAND used for distrib salt upgrade. remove unneeded vars
|
2023-11-02 10:28:29 -04:00 |
|
m0duspwnens
|
6c4dc7cc09
|
fix UPGRADECOMMAND used for distrib salt upgrade. remove unneeded vars
|
2023-11-02 10:23:03 -04:00 |
|
Josh Brower
|
5388b92865
|
Refactor & cleanup
|
2023-11-02 10:20:32 -04:00 |
|
Jason Ertel
|
f932444101
|
Merge pull request #11689 from Security-Onion-Solutions/jertel/auto
more log bypass
|
2023-11-02 10:02:13 -04:00 |
|
Jason Ertel
|
1d2518310d
|
more log bypass
|
2023-11-02 09:59:45 -04:00 |
|
weslambert
|
65735fc4d3
|
Add eval and import roles
|
2023-11-02 09:54:01 -04:00 |
|
Josh Brower
|
c230cf4eb7
|
Formatting
|
2023-11-01 17:00:32 -04:00 |
|
Josh Brower
|
344dd7d61f
|
Add Elastic Fleet reset script
|
2023-11-01 16:50:20 -04:00 |
|
weslambert
|
f9e2940181
|
Merge pull request #11676 from Security-Onion-Solutions/feature/sublime_platform_integration
Sublime Platform Integration
|
2023-11-01 16:13:57 -04:00 |
|
Wes
|
f33079f1e3
|
Make settings global
|
2023-11-01 20:09:56 +00:00 |
|
Wes
|
c32935e2e6
|
Remove optional integration from configuration if not enabled
|
2023-11-01 17:02:43 +00:00 |
|
Wes
|
655c88cd09
|
Make sure enabled_nodes is populated
|
2023-11-01 16:47:51 +00:00 |
|
m0duspwnens
|
4d7b1095b7
|
Merge remote-tracking branch 'origin/2.4/dev' into fix/soupagrepo
|
2023-11-01 10:31:59 -04:00 |
|
m0duspwnens
|
338146fedd
|
fix repo update during soup for airgap
|
2023-11-01 10:19:56 -04:00 |
|
Wes
|
bca1194a46
|
Sublime SOC Action
|
2023-11-01 14:01:55 +00:00 |
|
Wes
|
a0926b7b87
|
Load optional integrations
|
2023-11-01 13:59:24 +00:00 |
|
Wes
|
44e45843bf
|
Change optional integration Fleet configuration
|
2023-11-01 13:52:38 +00:00 |
|
Wes
|
9701d0ac20
|
Optional integration Fleet configuration
|
2023-11-01 13:47:20 +00:00 |
|
Wes
|
23ee9c2bb0
|
Sublime Platform integration
|
2023-11-01 13:41:40 +00:00 |
|
Wes
|
51247be6b9
|
Sublime Platform integration defaults
|
2023-11-01 13:37:52 +00:00 |
|
Wes
|
4dc64400c5
|
Support document_id
|
2023-11-01 13:36:32 +00:00 |
|
Wes
|
ae45d40eca
|
Add Sublime Platform ingest pipeline
|
2023-11-01 13:34:30 +00:00 |
|
Mike Reeves
|
497294c363
|
Delete salt/common/tools/sbin/so-zeek-logs
|
2023-10-31 12:57:10 -04:00 |
|
Mike Reeves
|
cc3a69683c
|
Delete salt/manager/tools/sbin/so-allow-view
|
2023-10-31 12:55:47 -04:00 |
|
Mike Reeves
|
0c98bd96c7
|
Delete salt/idstools/tools/sbin/so-rule
UI does this now
|
2023-10-31 12:52:00 -04:00 |
|
Jason Ertel
|
c420e198fb
|
ignore specific Suricata errors
|
2023-10-31 11:18:39 -04:00 |
|
weslambert
|
c354924b68
|
Add import roles
|
2023-10-31 10:05:29 -04:00 |
|
weslambert
|
ed6473a34b
|
Add roles for eval mode
|
2023-10-30 20:41:49 -04:00 |
|