9105 Commits

Author	SHA1	Message	Date
DefensiveDepth	ce0c9f846d	Remove containers from so-status	2024-03-27 16:13:52 -04:00
DefensiveDepth	ba262ee01a	Check to see if Playbook is enabled	2024-03-27 15:43:25 -04:00
DefensiveDepth	b571eeb8e6	Initial cut of .70 soup changes	2024-03-27 14:58:16 -04:00
Mike Reeves	d57f773072	Fix regex to allow ipv6 in bpfs	2024-03-27 09:36:42 -04:00
Doug Burks	e2caf4668e	FEATURE: Add Events table columns for event.module elastic_agent #12666	2024-03-26 16:08:41 -04:00
Josh Brower	63a58efba4	Merge pull request #12656 from Security-Onion-Solutions/2.4/detections-fixes ... Add bindings for sigma repos	2024-03-26 09:33:38 -04:00
DefensiveDepth	bbcd3116f7	Fixes	2024-03-26 09:31:46 -04:00
Josh Brower	9c12aa261e	Merge pull request #12660 from Security-Onion-Solutions/kilo ... Initial cut to remove Playbook and deps	2024-03-26 08:31:11 -04:00
DefensiveDepth	cc0f4847ba	Casing and validation	2024-03-26 08:10:57 -04:00
DefensiveDepth	7c4ea8a58e	Add Detections SOC Config	2024-03-26 07:39:39 -04:00
Doug Burks	20bd9a9701	FEATURE: Include additional groupby fields in Dashboards relating to sankey diagrams #12657	2024-03-26 07:39:24 -04:00
DefensiveDepth	94ee761207	Remove Playbook ref	2024-03-25 21:11:47 -04:00
DefensiveDepth	d7ecad4333	Initial cut to remove Playbook and deps	2024-03-25 19:42:31 -04:00
DefensiveDepth	49fa800b2b	Add bindings for sigma repos	2024-03-25 14:45:50 -04:00
weslambert	df058b3f4a	Merge branch '2.4/dev' into feature/pfsense_suricata	2024-03-25 10:08:03 -04:00
Wes	5e21da443f	Minor verbiage updates	2024-03-25 13:58:32 +00:00
Josh Patterson	7898277a9b	Merge pull request #12651 from Security-Onion-Solutions/issue/12637 ... Allow for additional af-packet tuning options for Suricata	2024-03-25 09:37:52 -04:00
m0duspwnens	029d8a0e8f	handle yes/no on checksum-checks	2024-03-25 09:30:41 -04:00
Josh Brower	b8d33ab983	Merge pull request #12639 from Security-Onion-Solutions/2.4/enable-detections ... Enable Detections	2024-03-25 09:30:01 -04:00
weslambert	e124791d5d	Merge pull request #12650 from Security-Onion-Solutions/fix/soc_template ... FIX: http.response.status_code	2024-03-25 09:29:19 -04:00
m0duspwnens	81f3d69eb9	remove mmap-locked.	2024-03-22 15:55:59 -04:00
Corey Ogburn	237946e916	Specify Folder in Rule Repo	2024-03-22 13:52:20 -06:00
Corey Ogburn	3d04d37030	Update ElastAlert Config with Default Repos	2024-03-22 13:52:20 -06:00
m0duspwnens	bb0da2a5c5	add additional suricata af-packet config items	2024-03-22 14:34:14 -04:00
Doug Burks	a78a304d4f	FEATURE: Add event.dataset to all Events column layouts #12641	2024-03-22 13:19:31 -04:00
DefensiveDepth	5ca9ec4b17	Enable Detections	2024-03-22 10:12:26 -04:00
weslambert	4e1543b6a8	Get only code	2024-03-22 09:56:21 -04:00
Jason Ertel	f889a089bf	disregard benign telegraf error	2024-03-22 09:48:27 -04:00
Doug Burks	2b019ec8fe	Merge pull request #12634 from Security-Onion-Solutions/dougburks-patch-1 ... FEATURE: Add Events column layout for event.module system #12628	2024-03-22 05:52:23 -04:00
Wes	5934829e0d	Include pfsense config	2024-03-21 20:08:33 +00:00
Wes	486a633dfe	Add pfsense Suricata config	2024-03-21 20:07:59 +00:00
weslambert	8429a364dc	Remove Strelka rules watch	2024-03-21 10:09:36 -04:00
weslambert	1568f57096	Remove Strelka config	2024-03-21 10:07:27 -04:00
weslambert	f431e9ae08	Remove Strelka config	2024-03-21 10:06:25 -04:00
Josh Brower	4b03d088c3	Merge pull request #12611 from Security-Onion-Solutions/2.4/enable-detections ... Change Detections defaults	2024-03-21 08:04:03 -04:00
DefensiveDepth	4a33234c34	Default update to 24 hours	2024-03-21 07:26:19 -04:00
Doug Burks	778997bed4	FEATURE: Add Events column layout for event.module system #12628	2024-03-20 17:07:37 -04:00
Doug Burks	f3b921342e	FIX: Annotations for BPF and Suricata PCAP #12626	2024-03-20 16:06:25 -04:00
Doug Burks	fff4d20e39	Update soc_suricata.yaml	2024-03-20 16:03:45 -04:00
Doug Burks	d2fb067110	FIX: Annotations for BPF and Suricata PCAP #12626	2024-03-20 15:57:32 -04:00
Doug Burks	876690a9f6	FIX: Annotations for BPF and Suricata PCAP #12626	2024-03-20 15:49:46 -04:00
DefensiveDepth	d84af803a6	Enable Autoupdates	2024-03-20 08:48:31 -04:00
DefensiveDepth	020eb47026	Change Detections defaults	2024-03-19 13:53:37 -04:00
Wes	c6df805556	Add SOC template	2024-03-18 14:53:36 +00:00
Mike Reeves	fd835f6394	Update soc_suricata.yaml	2024-03-14 11:36:45 -04:00
Mike Reeves	284e0d8435	Update soc_suricata.yaml	2024-03-14 11:33:47 -04:00
Jason Ertel	844cfe55cd	handle airgap when detections not enabled	2024-03-13 20:52:17 -04:00
Jason Ertel	927fe9039d	handle airgap when detections not enabled	2024-03-13 20:50:03 -04:00
Jason Ertel	275a678fa1	removed unused property	2024-03-13 13:49:44 -04:00
Josh Patterson	b9702d02db	Update init.sls	2024-03-13 11:24:26 -04:00