Commit Graph

805 Commits

Author SHA1 Message Date
m0duspwnens
6bd4860f19 fix path 2022-09-27 09:57:01 -04:00
m0duspwnens
42b03ca6df add missing soc things 2022-09-27 09:53:48 -04:00
Jason Ertel
556ddc2ee4 sync in background 2022-09-27 09:24:34 -04:00
Jason Ertel
8e175b2d3f add manual sync 2022-09-27 07:05:04 -04:00
Jason Ertel
0ad1a1a262 so-user and salt-relay updates for user management 2022-09-26 14:57:33 -04:00
doug
fee5a7bea9 initial quick OCD pass 2022-09-23 16:29:55 -04:00
m0duspwnens
c77fcc74c1 merge in 2.4./firewall changes 2022-09-22 10:55:39 -04:00
Mike Reeves
85339d7cb1 Add helpLinks to everything 2022-09-20 15:43:34 -04:00
Doug Burks
0137004344 Fix releaseNotesUrl in defaults.yaml 2022-09-20 15:16:53 -04:00
Doug Burks
530c497800 Update motd.md 2022-09-20 15:16:04 -04:00
Doug Burks
df18f8f886 Merge pull request #8779 from Security-Onion-Solutions/2.4/dev
2.4/dev
2022-09-20 13:32:54 +00:00
Josh Brower
120fdef173 Hunt Query - Elastic Agent Live Osquery Logs 2022-09-20 08:27:47 -04:00
Josh Brower
3eb4adc5c3 Hunt Query - Elastic Agent Live Osquery Logs 2022-09-19 20:12:47 -04:00
Josh Brower
b38804840d Merge pull request #8772 from Security-Onion-Solutions/2.4/grafana-ids
Grafana SOC Redirect
2022-09-19 16:02:41 -04:00
Josh Brower
80919827c6 Fixup index patterns 2022-09-19 15:55:23 -04:00
Josh Patterson
0367365225 Merge pull request #8773 from Security-Onion-Solutions/fix/soc2.4
fix some soc defaults
2022-09-19 15:54:25 -04:00
m0duspwnens
30afc88322 fix some soc defaults 2022-09-19 15:51:29 -04:00
Josh Brower
ea7979cfdd Add Elastic Agent datastreams to SOC index 2022-09-19 15:33:15 -04:00
doug
fdffac83e1 sysmon fix by bryant 2022-09-19 14:47:45 -04:00
Jason Ertel
9542a5ada2 complete rewrite of so-status 2022-09-16 17:46:52 -04:00
Jason Ertel
deb19d24b8 Always use local docs 2022-09-13 14:24:35 -04:00
Jason Ertel
d1eb7ef849 Always use local docs 2022-09-13 14:23:50 -04:00
Jason Ertel
d12ff79af0 Remove comments to avoid confusing config viewers within SOC 2022-09-13 12:08:19 -04:00
Jason Ertel
d2fc712400 Initial SOC annotations 2022-09-13 11:49:19 -04:00
Jason Ertel
21c7f940d7 Update copyrights 2022-09-13 11:48:25 -04:00
Josh Brower
9f99939bda Add links to tools menu 2022-09-12 09:28:10 -04:00
m0duspwnens
b5fb7596b0 add salt bind for soc 2022-09-09 14:44:41 -04:00
m0duspwnens
0f2e9764ab add saltPipe 2022-09-09 14:39:20 -04:00
m0duspwnens
5ccc103083 fix soc dashboards and things 2022-09-09 14:31:04 -04:00
m0duspwnens
5bb001281b soc defaults changes - client child of server 2022-09-08 15:57:18 -04:00
Jason Ertel
b7bbe7d69f Add copyright notice 2022-09-08 10:27:56 -04:00
Jason Ertel
193c3fc4cd Add salt relay 2022-09-08 10:26:39 -04:00
Jason Ertel
df6ba5cbe9 initial salt relay script for comms with soc 2022-09-07 16:19:16 -04:00
Mike Reeves
2bd9dd80e2 Move In Day 2022-09-07 09:06:25 -04:00
Doug Burks
94c637449d FIX: Improve default dashboards #8136 2022-06-21 12:53:06 -04:00
Doug Burks
dce415297c improve readability in motd.md 2022-06-04 06:59:09 -04:00
Doug Burks
de126647f8 Update motd.md to include links to Dashboards and Cases 2022-06-04 06:55:08 -04:00
Doug Burks
83bff5ee87 add bar and pie examples to overview dashboard in dashboards.queries.json 2022-06-03 15:02:40 -04:00
Doug Burks
4a886338c8 fix description field for default dashboard in dashboards.queries.json 2022-06-03 11:10:01 -04:00
Doug Burks
7da1802eae Add sankey diagram to default dashboard in dashboards.queries.json 2022-06-03 11:03:48 -04:00
Doug Burks
269b16bbfd https://github.com/Security-Onion-Solutions/securityonion/issues/8049 2022-05-31 16:51:05 -04:00
Doug Burks
cd382a1b25 FIX: Elastalert query in Hunt #8049 2022-05-31 16:50:32 -04:00
Doug Burks
e1c9b0d108 FIX: Elastalert query in Hunt #8049 2022-05-31 16:47:52 -04:00
Doug Burks
9a98667e85 FIX: Elastalert query in Hunt #8049 2022-05-31 16:47:11 -04:00
doug
5cbb50a781 update dashboards.queries.json and hunt.queries.json 2022-05-16 08:33:48 -04:00
Doug Burks
6ed3f42449 remove duplicate showSubtitle from hunt.queries.json 2022-05-12 09:23:00 -04:00
Jason Ertel
31c04aabdd Disable MRU queries on dashboards 2022-05-09 15:06:43 -04:00
Jason Ertel
3f35dc54d2 Disable actions on dashboards group-by tables 2022-05-09 11:44:39 -04:00
Jason Ertel
0786191fc9 Add dashboard ref to soc.json 2022-05-06 15:16:27 -04:00
Jason Ertel
105c95909c Dashboard queries 2022-05-04 19:32:06 -04:00