203 Commits

Author	SHA1	Message	Date
m0duspwnens	dfe707ab64	fix issue/11610	2023-10-24 17:26:39 -04:00
Mike Reeves	4a3fc06a4d	Enable http2 for Suricata	2023-10-24 09:18:10 -04:00
Mike Reeves	710b800bc2	Update config.sls	2023-08-21 09:00:11 -04:00
m0duspwnens	30e3fbb41c	remove extra )	2023-08-09 11:21:16 -04:00
m0duspwnens	8844e305ab	use sensor.interface for suricata. make af-packet.interface ro in soc ui	2023-08-09 11:18:47 -04:00
m0duspwnens	20dedab4b2	remove previously add rules files	2023-08-08 15:03:06 -04:00
m0duspwnens	9118ac2b56	filter.rules to filters.rules	2023-08-08 13:59:43 -04:00
m0duspwnens	aab89d2483	rule-files does not go under profiling	2023-08-08 13:54:58 -04:00
m0duspwnens	b2e75e77e8	add local.rules and filter.rules to suricata defaults. add extraction.rules, local.rules and filter.rules for suricata metadata	2023-08-08 13:50:19 -04:00
m0duspwnens	743ed316f8	dont apply suricata.enabled on import nodes	2023-05-30 16:10:41 -04:00
Mike Reeves	38881231ac	Merge branch '2.4/dev' of https://github.com/Security-Onion-Solutions/securityonion into airgaps	2023-05-26 15:16:38 -04:00
m0duspwnens	5b4ec70ca6	fix typo on suricata annotations. add to global annotations	2023-05-26 09:37:57 -04:00
m0duspwnens	5c933910aa	simplify map for updating suricata config if md engine is suricata	2023-05-25 17:25:54 -04:00
m0duspwnens	a3c3f08511	convert list to dict to work better with ui. regex on suricata vars HOME_NET for soc	2023-05-25 17:00:48 -04:00
m0duspwnens	d99d4756c3	set defaults as example in soc ui for suricata cpu affinity	2023-05-25 11:11:53 -04:00
m0duspwnens	6505d3e2ce	update annotations for suricata	2023-05-25 11:03:37 -04:00
m0duspwnens	67a608ea56	adjust suricata defaults	2023-05-24 12:22:42 -04:00
Mike Reeves	c9db6c0f18	Add Suricata	2023-05-24 10:18:58 -04:00
Mike Reeves	cb0ed9ae6d	Merge branch '2.4/dev' of https://github.com/Security-Onion-Solutions/securityonion into airgaps	2023-05-24 10:04:15 -04:00
m0duspwnens	8995012c80	fix suricata sostatus	2023-05-24 09:52:07 -04:00
Mike Reeves	2c4ba2e8b2	Add Suricata	2023-05-24 09:35:50 -04:00
m0duspwnens	732d2aadf8	rename state to resolve conflicting / duplicate state ids	2023-05-24 08:58:43 -04:00
m0duspwnens	cc47f9a595	fix suricata thresholding	2023-05-23 11:16:32 -04:00
m0duspwnens	eb633be437	enable/disable suricata in ui. assign threads properly	2023-05-22 17:48:22 -04:00
Mike Reeves	cbd1c05929	Sbin Changes	2023-05-04 10:36:03 -04:00
Mike Reeves	e60e21d9ff	Move files out of common	2023-05-02 09:40:02 -04:00
m0duspwnens	1047462898	add identifiers for all cron.present	2023-04-13 16:25:47 -04:00
m0duspwnens	0fff3a5a11	suricata bpf	2023-03-20 17:31:56 -04:00
Wes	5fba3c5872	Add Suricata metadata configuration	2023-02-02 14:48:01 +00:00
Doug Burks	554754421c	Avoid unecessary Suricata processes in Import Mode	2023-01-10 16:48:06 -05:00
Jason Ertel	168cd00e1b	Handle suricata extracted with filecheck	2022-12-06 12:34:02 -05:00
Mike Reeves	de19a4dc53	Add Strelka Filecheck	2022-11-02 10:04:33 -04:00
m0duspwnens	b526532ab6	use global vars in states	2022-10-11 11:57:15 -04:00
doug	fee5a7bea9	initial quick OCD pass	2022-09-23 16:29:55 -04:00
Mike Reeves	85339d7cb1	Add helpLinks to everything	2022-09-20 15:43:34 -04:00
Mike Reeves	512c044d80	Thresholding	2022-09-19 16:53:51 -04:00
Mike Reeves	9a6fe3e8de	Add BPF	2022-09-16 08:36:44 -04:00
Mike Reeves	7d6e847f86	Fix Zeek PIllar	2022-09-15 13:11:03 -04:00
Mike Reeves	0351ef4ff5	Fix Suricata analyzers list	2022-09-15 10:48:08 -04:00
m0duspwnens	845d2e33bd	remove dupe afpacket	2022-09-15 10:44:39 -04:00
m0duspwnens	4cb955fe8d	jinja for the suricata outputs	2022-09-15 10:35:59 -04:00
Mike Reeves	8528645c2c	Update suricata_config.map.jinja	2022-09-14 15:02:55 -04:00
Mike Reeves	f8c1571a91	Update suricata_config.map.jinja	2022-09-14 14:43:04 -04:00
Mike Reeves	30a469ea63	Update afpacket.map.jinja	2022-09-14 14:36:13 -04:00
Mike Reeves	90ed4fd4cb	Fix Suricata	2022-09-14 14:18:10 -04:00
Mike Reeves	ee59822097	Fix Suricata	2022-09-14 14:15:50 -04:00
Mike Reeves	74a8bd17ea	Fix Suricata	2022-09-14 13:56:17 -04:00
Mike Reeves	a4dc63f3a4	Change how zeek and suri are populated in the minion file	2022-09-14 09:53:57 -04:00
Mike Reeves	df1a64b5e0	Modify more defaults	2022-09-13 11:45:59 -04:00
Mike Reeves	a32ff6f403	Modify Suricata defaults	2022-09-13 11:29:31 -04:00