reyesj2
|
d35ffef503
|
merge 2.4/dev
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2025-01-17 11:23:54 -06:00 |
|
Jorge Reyes
|
6c80fd0e18
|
Merge pull request #14116 from Security-Onion-Solutions/reyesj2-patch-8
update global@custom
|
2025-01-15 14:23:40 -06:00 |
|
reyesj2
|
b3b7fb8f29
|
add null check and move tag lookup to .contains() in global@custom
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2025-01-15 12:16:11 -06:00 |
|
reyesj2
|
dab56f0882
|
update fleet-optional-integrations-load
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2025-01-14 15:24:59 -06:00 |
|
Jorge Reyes
|
846f2485db
|
Merge pull request #14111 from Security-Onion-Solutions/reyesj2-patch-1
update http query
|
2025-01-14 08:26:43 -06:00 |
|
Jorge Reyes
|
107ca38268
|
fix http query for "includes" function
|
2025-01-14 08:24:07 -06:00 |
|
Jorge Reyes
|
35547b476f
|
update http query
|
2025-01-14 08:13:27 -06:00 |
|
Jorge Reyes
|
ad765200c3
|
Merge pull request #14105 from Security-Onion-Solutions/reyesj2/moarzeekparse
Additional Zeek parsing & cloudflare_logpush integration
|
2025-01-13 11:37:21 -06:00 |
|
reyesj2
|
4618256442
|
include okta-mappings in so-logs-okta.system index template
|
2025-01-13 11:32:27 -06:00 |
|
reyesj2
|
323ef1d5d6
|
add missing lifecycle name to trend_micro_vision_one indices
|
2025-01-13 09:29:22 -06:00 |
|
reyesj2
|
a5b1648b68
|
add missing lifecycle name to crowdstrike indices
|
2025-01-13 09:26:16 -06:00 |
|
reyesj2
|
14c920a258
|
fix hidden ldap menu subtitle
|
2025-01-13 09:23:32 -06:00 |
|
reyesj2
|
4f92b7ced1
|
add support for cloudflare_logpush integration
|
2025-01-13 09:23:05 -06:00 |
|
Josh Brower
|
5ec2006c9e
|
Merge pull request #14102 from Security-Onion-Solutions/2.4/nav-airgap
Fix folder perm
|
2025-01-10 16:20:18 -05:00 |
|
Joshua Brower
|
dcdf31eee8
|
Fix folder perm
|
2025-01-10 16:15:17 -05:00 |
|
reyesj2
|
e60a1e4357
|
zeek ldap & ldap_search parsing
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2025-01-09 16:06:10 -06:00 |
|
Josh Brower
|
2de1f0464f
|
Merge pull request #14091 from Security-Onion-Solutions/2.4/nav-airgap
Refactor Navigator Airgap
|
2025-01-09 11:59:50 -05:00 |
|
Joshua Brower
|
bcb92b63e3
|
Move json files to container image
|
2025-01-09 10:58:40 -05:00 |
|
Jorge Reyes
|
412397fa7b
|
Merge pull request #14089 from Security-Onion-Solutions/reyesj2/moarzeekparse
|
2025-01-08 17:45:14 -06:00 |
|
reyesj2
|
0e87351a9c
|
add zeek.quic mappings
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2025-01-08 16:18:53 -06:00 |
|
Josh Brower
|
71f4150c27
|
Merge pull request #14013 from Security-Onion-Solutions/2.4/navigator
Refactor Navigator for Detections
|
2025-01-07 13:34:19 -05:00 |
|
Joshua Brower
|
a2caf7425d
|
Add config options
|
2025-01-07 13:22:14 -05:00 |
|
Joshua Brower
|
6fa11a38ef
|
Update defaults
|
2025-01-07 13:14:50 -05:00 |
|
Joshua Brower
|
e3f75215b6
|
Merge remote-tracking branch 'origin/2.4/dev' into 2.4/navigator
|
2025-01-07 13:06:49 -05:00 |
|
reyesj2
|
a21535b0a2
|
run elasticsearch state to sync templates
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2025-01-06 21:33:07 -06:00 |
|
Jason Ertel
|
d14b6e6d7d
|
Merge pull request #14077 from Security-Onion-Solutions/jertel/wip
invalidate user sessions when an admin changes the user's password
|
2025-01-06 17:26:56 -05:00 |
|
Jason Ertel
|
bd96b5d722
|
invalidate user sessions when an admin changes the user's password
|
2025-01-06 17:23:10 -05:00 |
|
reyesj2
|
b97619b8f9
|
Merge remote-tracking branch 'origin/2.4/dev' into reyesj2/es-integ-tmp
|
2025-01-06 14:44:35 -06:00 |
|
reyesj2
|
3d3f0460fa
|
move addon integration script run to elasticfleet state
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2025-01-06 14:42:16 -06:00 |
|
reyesj2
|
0d49dee46e
|
update version to foxtrot
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2025-01-06 11:22:51 -06:00 |
|
reyesj2
|
9fe3f6042f
|
Remove individual integrations ip mappings component template. Replaced with global mappings
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2025-01-06 10:44:22 -06:00 |
|
reyesj2
|
cdd4a1ff1f
|
fixes addon integration map file
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2025-01-03 16:06:22 -06:00 |
|
Josh Brower
|
8408a53b82
|
Merge remote-tracking branch 'origin/2.4/dev' into 2.4/navigator
|
2025-01-02 16:13:34 -05:00 |
|
Jorge Reyes
|
5969e9accc
|
Merge pull request #14060 from Security-Onion-Solutions/reyesj2/zeekquic
zeek quic support
|
2025-01-02 08:13:33 -06:00 |
|
Doug Burks
|
927b618ec9
|
Update Zeek QUIC dashboard, add Hunt query, add quic.server.name as column in Events table
|
2025-01-02 06:57:56 -05:00 |
|
reyesj2
|
9f83853922
|
Zeek QUIC support
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-12-31 13:44:20 -06:00 |
|
reyesj2
|
ecf094f684
|
WIP: support all es fleet integrations
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-12-26 16:18:04 -06:00 |
|
Josh Brower
|
8f5634d958
|
Merge pull request #14048 from Security-Onion-Solutions/2.4/sigmaHashes
Refactor pipeline for hash changes
|
2024-12-23 15:49:35 -05:00 |
|
defensivedepth
|
7237b8971e
|
Refactor pipeline for hash changes
|
2024-12-23 15:41:13 -05:00 |
|
Mike Reeves
|
33239219cb
|
Merge pull request #14046 from Security-Onion-Solutions/TOoSmOotH-patch-1
|
2024-12-23 08:34:01 -05:00 |
|
Mike Reeves
|
09ef096620
|
Update soup
|
2024-12-23 08:27:45 -05:00 |
|
Jason Ertel
|
6c19a4c68a
|
Merge pull request #14043 from Security-Onion-Solutions/jertel/wip
cloud installs should use the local docker registry data
|
2024-12-19 15:01:25 -05:00 |
|
Jason Ertel
|
b8afef1ee4
|
cloud installs should use the local docker registry data
|
2024-12-19 14:56:40 -05:00 |
|
reyesj2
|
b3436415dc
|
merge 2.4/dev
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-12-18 14:13:25 -06:00 |
|
Jorge Reyes
|
16a819ff4f
|
Merge pull request #14041 from Security-Onion-Solutions/reyesj2/opencti
add ti_opencti integration support
|
2024-12-18 12:12:03 -06:00 |
|
reyesj2
|
157185c370
|
add ti_opencti integration support
|
2024-12-18 11:33:49 -06:00 |
|
Jason Ertel
|
8183dcf363
|
Merge pull request #14038 from Security-Onion-Solutions/TOoSmOotH-patch-1
Update 2-4.yml
|
2024-12-18 10:38:42 -05:00 |
|
Mike Reeves
|
d4f1772d2e
|
Update 2-4.yml
|
2024-12-18 10:36:15 -05:00 |
|
Jason Ertel
|
dc1c7d8bd2
|
Merge pull request #14036 from Security-Onion-Solutions/merger
Merge in 2.4.111
|
2024-12-18 10:25:42 -05:00 |
|
Mike Reeves
|
9c10094914
|
Fix conflict
|
2024-12-18 10:19:40 -05:00 |
|