  weslambertandGitHub
|
bf07d56da6
|
Merge pull request #13341 from Security-Onion-Solutions/revert-13323-fix/agent_pipeline
Revert "Change pipeline version for agent"
|
2024-07-15 11:38:56 -04:00 |
|
|
weslambertandGitHub
|
cdbffa2323
|
Merge pull request #13342 from Security-Onion-Solutions/revert-13316-foxtrot
Revert "Elastic 8.14.2"
|
2024-07-15 11:38:48 -04:00 |
|
|
weslambertandGitHub
|
4e81860a13
|
Revert "Change pipeline version for agent"
|
2024-07-15 11:33:52 -04:00 |
|
|
weslambertandGitHub
|
fe1824aedd
|
Revert "Elastic 8.14.2"
|
2024-07-15 11:28:59 -04:00 |
|
|
weslambertandGitHub
|
ebf5159c95
|
Merge pull request #13323 from Security-Onion-Solutions/fix/agent_pipeline
Change pipeline version for agent
|
2024-07-10 13:01:29 -04:00 |
|
|
weslambertandGitHub
|
d432019ad9
|
Change version from 1.13.1 to 1.20.0
|
2024-07-10 12:48:08 -04:00 |
|
|
weslambertandGitHub
|
0db0754ee5
|
Merge pull request #13316 from Security-Onion-Solutions/foxtrot
Elastic 8.14.2
|
2024-07-10 08:53:03 -04:00 |
|
|
Wes
|
1f5a990b1e
|
Remove lines that aren't needed right now
|
2024-07-09 18:32:06 +00:00 |
|
|
weslambertandGitHub
|
7a2f01be53
|
Update VERSION
|
2024-07-09 13:58:13 -04:00 |
|
|
weslambertandGitHub
|
9716e09b83
|
Temp change for testing
|
2024-07-09 12:51:34 -04:00 |
|
|
Wes
|
669f68ad88
|
Fleet metric annotations
|
2024-07-09 15:39:59 +00:00 |
|
|
weslambertandGitHub
|
8615e5d5ea
|
Move enabled and index_clean back to the top
|
2024-07-08 16:50:06 -04:00 |
|
|
weslambertandGitHub
|
2dd5ff4333
|
Update VERSION
|
2024-07-08 16:19:53 -04:00 |
|
|
weslambertandGitHub
|
6a396ec1aa
|
Fix accidental double quote removal
|
2024-07-08 11:44:27 -04:00 |
|
|
weslambertandGitHub
|
34f558c023
|
Merge pull request #13314 from Security-Onion-Solutions/upgrade/elastic_8_14_2
Elastic 8.14.2
|
2024-07-08 10:02:02 -04:00 |
|
|
weslambertandGitHub
|
9504f0885a
|
Elastic 8.14.2
|
2024-07-08 09:49:07 -04:00 |
|
|
weslambertandGitHub
|
ef59678441
|
Elastic 8.14.2
|
2024-07-08 09:48:12 -04:00 |
|
|
weslambertandGitHub
|
c6f6811f47
|
Elastic 8.14.2
|
2024-07-08 09:47:34 -04:00 |
|
|
weslambertandGitHub
|
662df1208d
|
Merge pull request #13296 from Security-Onion-Solutions/fix/soc_ilm_policy
Change name for ILM
|
2024-07-02 09:06:11 -04:00 |
|
|
weslambertandGitHub
|
745b6775f1
|
Change name for ILM
|
2024-07-02 09:05:35 -04:00 |
|
|
weslambertandGitHub
|
176aaa8f3d
|
Merge pull request #13295 from Security-Onion-Solutions/fix/custom_windows_integration
Change name to winlog.winlogs
|
2024-07-02 09:03:52 -04:00 |
|
|
weslambertandGitHub
|
4d499be1a8
|
Change name
|
2024-07-02 08:47:29 -04:00 |
|
|
weslambertandGitHub
|
c27225d91f
|
Merge pull request #13290 from Security-Onion-Solutions/fix/elastic_template_changes
Changes for Elastic 8.14.1
|
2024-07-01 11:19:02 -04:00 |
|
|
Wes
|
1b47d5c622
|
Changes for Elastic 8.14.1
|
2024-07-01 15:16:58 +00:00 |
|
|
Wes
|
32d7927a49
|
Template changes for Elastic 8.14.1
|
2024-07-01 15:16:06 +00:00 |
|
|
weslambertandGitHub
|
7716f4aff8
|
Elastic 8.14.1
|
2024-06-27 10:49:52 -04:00 |
|
|
weslambertandGitHub
|
8eb6dcc5b7
|
Elastic 8.14.1
|
2024-06-27 10:49:06 -04:00 |
|
|
weslambertandGitHub
|
847638442b
|
Elastic 8.14.1
|
2024-06-27 10:48:28 -04:00 |
|
|
weslambertandGitHub
|
5743189eef
|
Elastic 8.14.1
|
2024-06-27 10:47:46 -04:00 |
|
|
weslambertandGitHub
|
81d874c6ae
|
Update VERSION
|
2024-06-27 10:42:58 -04:00 |
|
|
weslambertandGitHub
|
71ed9204ff
|
Merge pull request #13275 from Security-Onion-Solutions/fix/elastic_8_10_4
Revert back to 8.10.4
|
2024-06-27 09:16:54 -04:00 |
|
|
weslambertandGitHub
|
222ebbdec1
|
Revert back to 8.10.4
|
2024-06-27 09:05:29 -04:00 |
|
|
weslambertandGitHub
|
260d4e44bc
|
Revert back to 8.10.4
|
2024-06-27 09:04:07 -04:00 |
|
|
weslambertandGitHub
|
0c5b3f7c1c
|
Revert back to 8.10.4
|
2024-06-27 09:03:28 -04:00 |
|
|
weslambertandGitHub
|
feee80cad9
|
Revert back to 8.10.4
|
2024-06-27 09:01:55 -04:00 |
|
|
weslambertandGitHub
|
e59d124c82
|
Merge pull request #13271 from Security-Onion-Solutions/upgrade/elastic
Elastic 8.14.1
|
2024-06-26 14:47:54 -04:00 |
|
|
Wes
|
13d4738e8f
|
Elastic 8.14.1
|
2024-06-26 18:39:53 +00:00 |
|
|
weslambertandGitHub
|
abdfbba32a
|
Elastic 8.14.1
|
2024-06-26 14:06:24 -04:00 |
|
|
weslambertandGitHub
|
7d0a961482
|
Elastic 8.14.1
|
2024-06-26 14:00:54 -04:00 |
|
|
weslambertandGitHub
|
0f226cc08e
|
Elastic 8.14.1
|
2024-06-26 13:59:23 -04:00 |
|
|
weslambertandGitHub
|
6141c7a849
|
Merge pull request #13246 from Security-Onion-Solutions/fix/detections_license_none
Add option for detections without a license
|
2024-06-21 15:59:09 -04:00 |
|
|
weslambertandGitHub
|
bf91030204
|
Add option for detections without license
|
2024-06-21 15:33:11 -04:00 |
|
|
weslambertandGitHub
|
964fef1aab
|
Merge pull request #13117 from Security-Onion-Solutions/fix/items_and_lists
Add templates for .items and .lists indices
|
2024-05-31 16:34:29 -04:00 |
|
|
Wes
|
a8c231ad8c
|
Add component templates
|
2024-05-31 17:47:01 +00:00 |
|
|
Wes
|
f396247838
|
Add index templates and lifecycle policies
|
2024-05-31 17:46:19 +00:00 |
|
|
weslambertandGitHub
|
5d9c0dd8b5
|
Merge pull request #13101 from Security-Onion-Solutions/fix/separate_suricata
Separate Suricata alerts into a specific data stream
|
2024-05-30 16:30:55 -04:00 |
|
|
Wes
|
2c635bce62
|
Set index for Suricata alerts
|
2024-05-30 17:02:31 +00:00 |
|
|
Wes
|
e831354401
|
Add Suricata alerts setting for configuration
|
2024-05-30 17:00:11 +00:00 |
|
|
Wes
|
55c5ea5c4c
|
Add template for Suricata alerts
|
2024-05-30 16:58:56 +00:00 |
|
|
weslambertandGitHub
|
b415810485
|
Merge pull request #13061 from Security-Onion-Solutions/fix/tab_casing
Change tab casing to be consistent with other whiptail prompts
|
2024-05-22 13:44:09 -04:00 |
|
|
weslambertandGitHub
|
3cfd710756
|
Change tab casing to be consistent with other whiptail prompts
|
2024-05-22 13:41:32 -04:00 |
|
|
weslambertandGitHub
|
556fdfdcf9
|
Merge pull request #13052 from Security-Onion-Solutions/fix/add_rule_uuid
Add rule.uuid for YARA matches
|
2024-05-21 17:09:49 -04:00 |
|
|
weslambertandGitHub
|
f4490fab58
|
Add rule.uuid for YARA matches
|
2024-05-21 17:05:39 -04:00 |
|
|
weslambertandGitHub
|
5aaf44ebb2
|
Merge pull request #13049 from Security-Onion-Solutions/fix/detections_alerts_component_template
Exclude detections from template name matching
|
2024-05-21 13:45:19 -04:00 |
|
|
weslambertandGitHub
|
deb140e38e
|
Exclude detections from template name matching
|
2024-05-21 13:38:52 -04:00 |
|
|
weslambertandGitHub
|
17518b90ca
|
Merge pull request #13036 from Security-Onion-Solutions/fix/yara_compile_report
Create YARA compile report for SOC integrity check
|
2024-05-17 16:15:21 -04:00 |
|
|
weslambertandGitHub
|
d9edff38df
|
Create compile report for SOC integrity check
|
2024-05-17 16:10:10 -04:00 |
|
|
weslambertandGitHub
|
6dec9b4cf7
|
Merge pull request #12986 from Security-Onion-Solutions/fix/old_strelka
Remove old Strelka configuration for YARA
|
2024-05-14 09:27:19 -04:00 |
|
|
weslambertandGitHub
|
13062099b3
|
Remove YARA script update and reference to exclusions
|
2024-05-13 18:04:16 -04:00 |
|
|
weslambertandGitHub
|
7250fb1188
|
Merge pull request #13004 from Security-Onion-Solutions/fix/detections_alerts_indices
FIX: Detections alerts indices
|
2024-05-13 17:02:52 -04:00 |
|
|
weslambertandGitHub
|
d606f259d1
|
Add detection alerts
|
2024-05-13 14:25:11 -04:00 |
|
|
weslambertandGitHub
|
c8870eae65
|
Add detection alerts template
|
2024-05-13 14:23:47 -04:00 |
|
|
weslambertandGitHub
|
26b5a39912
|
Change index to detections.alerts
|
2024-05-13 12:59:17 -04:00 |
|
|
Wes
|
6ed82d7b29
|
Remove YARA download in setup
|
2024-05-09 17:27:46 +00:00 |
|
|
Wes
|
ea4cf42913
|
Remove old YARA update script
|
2024-05-09 17:26:54 +00:00 |
|
|
Wes
|
8a34f5621c
|
Remove old YARA download script
|
2024-05-09 17:26:45 +00:00 |
|
|
Wes
|
823ff7ce11
|
Remove exclusions and repos
|
2024-05-09 17:03:13 +00:00 |
|
|
weslambertandGitHub
|
cdc47cb1cd
|
Merge pull request #12975 from Security-Onion-Solutions/fix/strelka_watch
Use state
|
2024-05-08 16:39:49 -04:00 |
|
|
weslambertandGitHub
|
01a68568a6
|
Use state
|
2024-05-08 16:37:13 -04:00 |
|
|
weslambertandGitHub
|
b916465b06
|
Merge pull request #12974 from Security-Onion-Solutions/fix/strelka_yara
Account for 0 active rules and change watch
|
2024-05-08 15:59:20 -04:00 |
|
|
weslambertandGitHub
|
0567b93534
|
Remove mode
|
2024-05-08 15:39:59 -04:00 |
|
|
Wes
|
77e2117051
|
Account for 0 active rules and change watch
|
2024-05-08 18:47:52 +00:00 |
|
|
weslambertandGitHub
|
bc24227732
|
Merge pull request #12955 from Security-Onion-Solutions/fix/cef
Add CEF
|
2024-05-07 11:23:53 -04:00 |
|
|
weslambertandGitHub
|
2e70d157e2
|
Add ref
|
2024-05-07 11:13:51 -04:00 |
|
|
weslambertandGitHub
|
23da1f6ee9
|
Merge pull request #12951 from Security-Onion-Solutions/fix/remove_watch
Remove watch
|
2024-05-07 09:23:56 -04:00 |
|
|
Wes
|
bee8c2c1ce
|
Remove watch
|
2024-05-07 13:21:59 +00:00 |
|
|
weslambertandGitHub
|
a5e89c0854
|
Merge pull request #12947 from Security-Onion-Solutions/fix/strelka_yara_distributed
Fix YARA rules for distributed deployments
|
2024-05-06 15:53:08 -04:00 |
|
|
weslambertandGitHub
|
a25e43db8f
|
Merge pull request #12948 from Security-Onion-Solutions/fix/strelka_yara_watch
Restart Strelka backend when YARA rules change
|
2024-05-06 15:52:57 -04:00 |
|
|
Wes
|
1e48955376
|
Restart when rules change
|
2024-05-06 19:39:03 +00:00 |
|
|
Wes
|
5056ec526b
|
Add compiled directory
|
2024-05-06 19:27:38 +00:00 |
|
|
Wes
|
d2fa77ae10
|
Update compile script
|
2024-05-06 19:10:41 +00:00 |
|
|
Wes
|
445fb31634
|
Add manager SLS
|
2024-05-06 19:09:37 +00:00 |
|
|
Wes
|
5aa611302a
|
Handle YARA rules for distributed deployments
|
2024-05-06 19:08:01 +00:00 |
|
|
weslambertandGitHub
|
956ae7a7ae
|
Merge pull request #12909 from Security-Onion-Solutions/fix/detection_mappings
Update mappings for detection fields
|
2024-05-01 16:15:40 -04:00 |
|
|
Wes
|
3285ae9366
|
Update mappings for detection fields
|
2024-05-01 20:11:56 +00:00 |
|
|
weslambertandGitHub
|
e6f45161c1
|
Merge pull request #12900 from Security-Onion-Solutions/fix/cold_min_age
Cold min_age to 60d
|
2024-05-01 11:24:48 -04:00 |
|
|
weslambertandGitHub
|
fe2edeb2fb
|
30d to 60d
|
2024-05-01 11:01:59 -04:00 |
|
|
weslambertandGitHub
|
6294f751ee
|
Cold min_age to 60d
|
2024-05-01 10:59:41 -04:00 |
|
|
weslambertandGitHub
|
cc17de2184
|
Merge pull request #12864 from Security-Onion-Solutions/fix/exclude_suricata
Exclude suricata from disk space-based index deletion
|
2024-04-25 09:23:38 -04:00 |
|
|
weslambertandGitHub
|
b424426298
|
Exclude suricata
|
2024-04-25 09:14:18 -04:00 |
|
|
weslambertandGitHub
|
983ef362e9
|
Merge pull request #12858 from Security-Onion-Solutions/fix/index_sorting
Change index sorting to account for older so-prefixed indices
|
2024-04-25 08:54:22 -04:00 |
|
|
weslambertandGitHub
|
44afa55274
|
Fix comments about deletion
|
2024-04-24 17:41:37 -04:00 |
|
|
weslambertandGitHub
|
ab832e4bb2
|
Include logstash-prefixed indices
|
2024-04-24 17:17:53 -04:00 |
|
|
weslambertandGitHub
|
59a02635ed
|
Change index sorting
|
2024-04-24 15:18:49 -04:00 |
|
|
weslambertandGitHub
|
428fe787c4
|
Merge pull request #12852 from Security-Onion-Solutions/fix/elastic_max_age
Remove hot max_age
|
2024-04-24 10:15:06 -04:00 |
|
|
weslambertandGitHub
|
1b3a0a3de8
|
Remove hot max_age
|
2024-04-24 10:11:02 -04:00 |
|
|
weslambertandGitHub
|
96ec285241
|
Merge pull request #12848 from Security-Onion-Solutions/fix/elastic_annotation
Fix description, regex, and type for cold, warm, and hot
|
2024-04-24 09:22:05 -04:00 |
|
|
weslambertandGitHub
|
75b5e16696
|
Update description, type, and regex
|
2024-04-24 09:14:39 -04:00 |
|
|
weslambertandGitHub
|
8a0a435700
|
Fix warm description
|
2024-04-24 08:35:19 -04:00 |
|
|
weslambertandGitHub
|
bef408b944
|
Merge pull request #12844 from Security-Onion-Solutions/fix/elastic_annotation
Fix warm description
|
2024-04-23 10:47:04 -04:00 |
|