15939 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
reyesj2	039d5c22ac	fix: crowdstrike integration ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2024-11-06 14:35:41 -06:00
coreyogburn	07b867df76	Merge pull request #13904 from Security-Onion-Solutions/cogburn/ignored-sids ... Cogburn/ignored sids	2024-11-05 12:30:08 -07:00
Corey Ogburn	52a144c052	Added Help Link to Annotation for IgnoredSidRanges	2024-11-05 12:11:17 -07:00
Corey Ogburn	25d55feeef	More Detailed Description	2024-11-05 11:41:14 -07:00
Corey Ogburn	5e48ccafce	Update Default Value	2024-11-05 11:11:34 -07:00
Corey Ogburn	69dd35c30a	Add Option for Ignoring Ranges of SIDs in Suricata Integrity Check	2024-11-04 14:31:53 -07:00
Josh Patterson	d37a8d51fa	Merge pull request #13900 from Security-Onion-Solutions/saltrepo ... setup use new salt repo	2024-11-04 13:05:58 -05:00
m0duspwnens	6e14f7b626	fix pub key name	2024-11-04 11:14:00 -05:00
Jason Ertel	e8ab7bce0c	connect	2024-11-04 10:49:30 -05:00
m0duspwnens	083c678400	new salt repo	2024-11-04 09:46:26 -05:00
Jason Ertel	7442ffc7d8	connect	2024-11-01 16:37:24 -04:00
Jason Ertel	25479ca71f	connect	2024-11-01 16:29:04 -04:00
Jason Ertel	c9f6b5206a	connect	2024-11-01 16:18:40 -04:00
Jason Ertel	755cfb4e13	connect	2024-11-01 15:47:33 -04:00
Jason Ertel	fb73517fc1	connect	2024-11-01 15:43:26 -04:00
Jason Ertel	825dbb36dd	connect	2024-11-01 15:37:59 -04:00
Jason Ertel	cd2e5bf2d0	rename role	2024-10-31 17:20:44 -04:00
Jason Ertel	520c9d8d51	rename role	2024-10-31 16:42:42 -04:00
Jason Ertel	370b117938	rename role	2024-10-31 16:39:45 -04:00
Josh Brower	6ab05e7c05	Merge pull request #13890 from Security-Onion-Solutions/2.4/templatefix ... timestamp fix	2024-10-31 10:59:45 -04:00
defensivedepth	7896f951f3	timestamp fix	2024-10-31 10:24:58 -04:00
Josh Brower	01932d873f	Merge pull request #13883 from Security-Onion-Solutions/2.4/lookuprev2 ... 2.4/lookuprev2	2024-10-31 08:46:01 -04:00
Josh Brower	84a8477c5d	Merge pull request #13887 from Security-Onion-Solutions/2.4/soupedite ... rm eaintegration state file	2024-10-30 17:15:07 -04:00
defensivedepth	6b468eaed3	rm eaintegration state file	2024-10-30 16:52:44 -04:00
Jason Ertel	a146153ee9	switch to json	2024-10-30 12:44:01 -04:00
defensivedepth	c509dab5f1	Use socore user	2024-10-30 11:03:14 -04:00
Josh Brower	1940901386	Merge pull request #13882 from Security-Onion-Solutions/ipmappingses ... add so-ip-mappings index	2024-10-30 10:28:40 -04:00
reyesj2	36fc3bbd6d	add so-ip-mappings index ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2024-10-30 10:24:11 -04:00
defensivedepth	5406a263d5	Add local custom template	2024-10-29 19:42:06 -04:00
Jason Ertel	3f3ac21f50	connect	2024-10-29 12:28:24 -04:00
Jason Ertel	11820a16f0	connect	2024-10-29 12:04:38 -04:00
Josh Brower	ac359839e2	Merge pull request #13877 from Security-Onion-Solutions/2.4/lookuprev2 ... Initial support for local lookup	2024-10-29 11:22:39 -04:00
defensivedepth	4c5099d429	Initial support for local lookup	2024-10-29 10:27:54 -04:00
Jason Ertel	1243c7588b	connect	2024-10-28 19:42:01 -04:00
Jason Ertel	624c4855c8	connect	2024-10-28 19:25:20 -04:00
Jason Ertel	12a76a9d35	connect	2024-10-28 19:11:26 -04:00
Josh Brower	6a3e5415cf	Merge pull request #13832 from Security-Onion-Solutions/2.4/sigmapipelines ... Add process and file creation mappings	2024-10-28 18:30:21 -04:00
coreyogburn	2c4f65009c	Merge pull request #13873 from Security-Onion-Solutions/cogburn/tuning-notes ... Tuning Notes	2024-10-28 15:37:06 -06:00
defensivedepth	f3ca5b1c42	Remove OS-specific mappings	2024-10-28 09:19:51 -04:00
Corey Ogburn	640f53d085	Cleanup ... Fix indentation and trailing comma.	2024-10-24 17:05:36 -06:00
Corey Ogburn	1aa9d87c5d	Corrected ... Put the note on the right model this time.	2024-10-24 17:05:36 -06:00
Corey Ogburn	e11c562022	Added Note to ES Mappings	2024-10-24 17:05:35 -06:00
coreyogburn	a76a2d8e9f	Merge pull request #13800 from Security-Onion-Solutions/cogburn/detection-status-hunt ... Cogburn/detection status hunt	2024-10-24 16:31:59 -06:00
Jason Ertel	d503c09ef2	connect	2024-10-24 15:45:18 -04:00
Corey Ogburn	6ce52bf9ab	Specify Defaults for detectionEngineStatusQueries ... Specify the defaults as an example to the user.	2024-10-24 13:11:49 -06:00
Corey Ogburn	f67fcecc6e	Clean up StatusQueries String	2024-10-24 11:18:48 -06:00
Corey Ogburn	b7c392a244	Corrected a misspelling	2024-10-24 11:18:48 -06:00
Corey Ogburn	ad0b0a5e95	Refactor to String ... To accomodate the config screen, the annotation now specifies it as a multiline string with a yaml syntax. The user can edit the yaml to add or remove queries. The UI will parse the YAML before use. Also updated the IntegrityFailure queries to specify table columns more relevant to a sync failure than the default ones.	2024-10-24 11:18:47 -06:00
Corey Ogburn	c77b0afd8e	Move to Client/Detections ... Added a basic annotation.	2024-10-24 11:18:47 -06:00
Corey Ogburn	04ebe4efea	Array to Dictionary	2024-10-24 11:18:46 -06:00