1003 Commits

Author	SHA1	Message	Date
Wes	cd4bd6460a	Custom pipelines	2024-01-31 20:16:18 +00:00
Wes	12ab6338db	Add diagnostic	2024-01-25 20:16:52 +00:00
weslambert	cd54d4becb	Fix indent	2024-01-25 13:57:02 -05:00
weslambert	5f1c76f6ec	endpoint.diagnostic.collection	2024-01-25 09:46:25 -05:00
Wes	8426aad56d	Text mapping for scan.pe.flags	2024-01-24 15:10:42 +00:00
Wes	d23d367058	Make scan.pe.flags a string	2024-01-24 15:08:38 +00:00
Wes	80a3942245	Rename RITA pipelines	2024-01-22 20:15:48 +00:00
Wes	7118cc8dee	Add additional integration SOC configuration	2024-01-19 22:04:07 +00:00
Wes	05aa8b013a	Add additional integration to templates	2024-01-19 22:02:39 +00:00
Mike Reeves	efe8cfda95	Update suricata.common	2024-01-19 13:39:28 -05:00
Mike Reeves	08486e279c	Update suricata.common	2024-01-19 13:36:43 -05:00
Wes	e70ce50912	Change description	2024-01-17 14:06:16 +00:00
Wes	f6590ac0bf	Remove Suricata IKEv2 pipeline	2024-01-16 18:10:00 +00:00
Wes	ea64ce92d3	Add Suricata IKE pipeline	2024-01-16 18:09:46 +00:00
Wes	8a92b023b2	Add interface name	2024-01-16 18:09:16 +00:00
weslambert	252c51dafb	Change order of names	2024-01-12 16:45:18 -05:00
weslambert	a07e6e1058	OTX pulses	2024-01-12 16:43:33 -05:00
weslambert	3f9678056d	OTX pulses template	2024-01-12 16:42:32 -05:00
Wes	418f41c7e4	Add SOC configuration for metrics	2024-01-12 15:03:18 +00:00
Wes	5eae349938	Add endpoint metrics templates	2024-01-12 13:47:35 +00:00
Wes	c89d674a92	Add settings for integrations	2024-01-11 14:18:06 +00:00
Wes	9b1ddcacb4	Add additional templates for integrations	2024-01-11 14:00:09 +00:00
Josh Brower	5513e74807	comma	2024-01-09 08:12:33 -05:00
Josh Brower	31ee365a91	Fixup FIM events	2024-01-09 08:11:05 -05:00
weslambert	7684aadb87	Merge pull request #12062 from Security-Onion-Solutions/fix/curator_remove ... Curator Remove Changes	2023-12-20 15:16:47 -05:00
Wes	4baf4657f6	Curator cleanup	2023-12-20 19:10:22 +00:00
Doug Burks	6a1073b616	FIX: Update dashboard and hunt query for firewall logs #12021	2023-12-18 12:57:40 -05:00
Josh Patterson	45f50cc121	Merge pull request #12019 from Security-Onion-Solutions/fix/extrahosts ... fix extra_hosts	2023-12-14 12:03:07 -05:00
m0duspwnens	3dbf97944d	fix extra_hosts. https://github.com/Security-Onion-Solutions/securityonion/issues/12015	2023-12-14 10:26:29 -05:00
weslambert	5d3f2298b6	Merge pull request #12000 from Security-Onion-Solutions/feature/additional_integrations ... Additional Integrations #2	2023-12-13 13:23:34 -05:00
weslambert	8cf5d9c1a6	Annotations	2023-12-13 11:55:40 -05:00
weslambert	cdac2bfa16	Add Anomali, Cybersixgill, Snort, and ThreatQuotient	2023-12-13 11:03:25 -05:00
Doug Burks	d49d13289e	Update so-elastic-clear	2023-12-12 16:37:06 -05:00
Wes	54c3167b10	Delete data streams when necessary	2023-12-12 05:25:50 +00:00
Wes	b1721b6467	Fix directory	2023-12-11 21:43:25 +00:00
Wes	d203aec44a	Remove Curator	2023-12-08 19:37:06 +00:00
Doug Burks	ab0e6f9bec	update broken help links in SOC Config	2023-12-06 14:35:51 -05:00
Doug Burks	93fb10de86	Merge pull request #11897 from Security-Onion-Solutions/2.4/nids-rule-reference ... FIX: Update NIDS rule.reference in common.nids pipeline #11846	2023-11-29 12:19:12 -05:00
weslambert	9d63a47792	Certificate hash	2023-11-29 12:01:43 -05:00
weslambert	7001e90667	Client and server fingerprints	2023-11-29 12:00:46 -05:00
Doug Burks	0603e96c08	FIX: Update NIDS rule.reference in common.nids pipeline #11846	2023-11-29 09:46:11 -05:00
weslambert	02baa18502	Add metrics	2023-11-08 22:41:24 -05:00
weslambert	e39edab00d	Exclude osquery and display failed name	2023-11-08 20:55:08 -05:00
weslambert	acb6e84248	Don't load index template if component template doesn't exist	2023-11-08 20:34:08 -05:00
Jason Ertel	32079a7bce	Merge pull request #11734 from Security-Onion-Solutions/fix/elastic_scripts ... Improve error handling and add retry logic	2023-11-08 12:19:00 -05:00
Jason Ertel	d256be3eb3	allow template loads to partially succeed only on the initial attempt	2023-11-08 10:32:11 -05:00
Wes	653fda124f	Check expected with retry	2023-11-08 13:02:17 +00:00
Wes	b46e86c39b	Extend index template loading to 60 attempts and a total of ~5 minutes	2023-11-08 02:29:09 +00:00
Wes	de9f9549af	Extend template loading to 24 attempts and a total of ~2 minutes	2023-11-07 23:55:03 +00:00
weslambert	749e22e4b9	Fix if statement	2023-11-07 17:29:38 -05:00