Josh Brower
|
025677a1e6
|
Merge pull request #8034 from Security-Onion-Solutions/feature/sigmafp
Feature/SigmaCustomFilters
|
2022-05-31 07:25:44 -04:00 |
|
Josh Brower
|
a5361fb745
|
Change Target_log name
|
2022-05-28 18:07:05 -04:00 |
|
Mike Reeves
|
30d7801ae1
|
Merge pull request #8033 from Security-Onion-Solutions/kilo
|
2022-05-28 11:38:35 -04:00 |
|
Jason Ertel
|
210bc556db
|
Add logscan and suricata variants for cloud tests to move from PM into the cloud and help alleviate disk contention
|
2022-05-28 10:29:04 -04:00 |
|
Jason Ertel
|
e87e672b9e
|
Add logscan and suricata variants for cloud tests to move from PM into the cloud and help alleviate disk contention
|
2022-05-28 10:28:20 -04:00 |
|
Jason Ertel
|
a70da41f20
|
Merge pull request #8032 from Security-Onion-Solutions/kilo
Exclude pkg upgrade retry error logs from failing setup
|
2022-05-28 08:34:40 -04:00 |
|
Jason Ertel
|
8bb02763dc
|
Exclude pkg upgrade retry error logs from failing setup
|
2022-05-28 08:28:10 -04:00 |
|
weslambert
|
a59ada695b
|
Merge pull request #8031 from Security-Onion-Solutions/fix/screenshots
Fix/screenshots
|
2022-05-27 17:05:51 -04:00 |
|
doug
|
b93a108386
|
update Cases screenshot in README
|
2022-05-27 16:33:08 -04:00 |
|
doug
|
6089f3906d
|
update screenshots and README
|
2022-05-27 16:32:00 -04:00 |
|
Josh Brower
|
94ee45ac63
|
Merge pull request #8029 from Security-Onion-Solutions/upgrade/navigator
Upgrade Navigator to 4.6.4
|
2022-05-27 14:46:59 -04:00 |
|
Josh Brower
|
43cb78a6a8
|
Upgrade Navigator
|
2022-05-27 14:21:11 -04:00 |
|
Josh Patterson
|
76bb1fbbcc
|
Merge pull request #8014 from Security-Onion-Solutions/issue/7918
manage suricata classifications.config
|
2022-05-26 13:13:03 -04:00 |
|
m0duspwnens
|
53d6e1d30d
|
simplfy
|
2022-05-26 11:51:17 -04:00 |
|
m0duspwnens
|
1bfde852f5
|
manage suricata classifications.config https://github.com/Security-Onion-Solutions/securityonion/issues/7918
|
2022-05-26 11:43:31 -04:00 |
|
m0duspwnens
|
53883e4ade
|
manage suricata classifications.config https://github.com/Security-Onion-Solutions/securityonion/issues/7918
|
2022-05-26 11:40:33 -04:00 |
|
weslambert
|
1a0ac4d253
|
Merge pull request #8007 from Security-Onion-Solutions/fix/filestream-id
Add filestream input ID for RITA logs
|
2022-05-25 10:11:36 -04:00 |
|
weslambert
|
44622350ea
|
Add ID for RITA filestream inputs
|
2022-05-25 10:09:01 -04:00 |
|
weslambert
|
99864f4787
|
Merge pull request #8001 from Security-Onion-Solutions/feature/analyzer_readme
Add configuration requirements for various analyzers
|
2022-05-25 09:33:07 -04:00 |
|
Doug Burks
|
6bd02c0b99
|
Merge pull request #8003 from Security-Onion-Solutions/feature/elastic-7.17.4
UPGRADE: Elastic 7.17.4 #8002
|
2022-05-24 13:24:13 -04:00 |
|
Doug Burks
|
1d0bb21908
|
UPGRADE: Elastic 7.17.4 #8002
|
2022-05-24 13:19:30 -04:00 |
|
Doug Burks
|
bde06e7ec5
|
UPGRADE: Elastic 7.17.4 #8002
|
2022-05-24 13:19:01 -04:00 |
|
Wes Lambert
|
b93512eb01
|
Adjust verbiage around pillar configuration
|
2022-05-24 12:36:32 +00:00 |
|
Wes Lambert
|
92dee14ee8
|
Add configuration requirements for various analyzers
|
2022-05-24 12:29:14 +00:00 |
|
weslambert
|
3e6dfcfaca
|
Merge pull request #7996 from Security-Onion-Solutions/weslambert-patch-2
Create Virustotal README
|
2022-05-23 11:43:43 -04:00 |
|
weslambert
|
a6f1bf3aef
|
Create Virustotal README
|
2022-05-23 11:39:44 -04:00 |
|
Jason Ertel
|
88f17f037e
|
Merge pull request #7982 from Security-Onion-Solutions/kilo
Upgrade to Kratos 0.9.0-alpha.3
|
2022-05-19 13:28:58 -04:00 |
|
Jason Ertel
|
c20859f8c3
|
Upgrade to Kratos 0.9.0-alpha.3
|
2022-05-18 17:05:21 -04:00 |
|
Jason Ertel
|
c95bafd521
|
Merge pull request #7969 from Security-Onion-Solutions/fix/helpers-analyzers
Only import yaml module when config is loaded
|
2022-05-18 07:15:32 -04:00 |
|
Wes Lambert
|
429ccb2dcc
|
Only import yaml module when config is loaded
|
2022-05-18 02:07:39 +00:00 |
|
weslambert
|
94ca3ddbda
|
Merge pull request #7961 from Security-Onion-Solutions/weslambert-patch-1
Add information for MHR and WhoisLookup, and other minor updates
|
2022-05-17 13:33:24 -04:00 |
|
weslambert
|
d3206a048f
|
Add information for MHR and WhoisLookup, and other minor updates
|
2022-05-17 12:49:16 -04:00 |
|
weslambert
|
ff855eb8f7
|
Merge pull request #7958 from Security-Onion-Solutions/feature/mhr_analyzer
Add Team Cymru Malware Hash Registry Analyzer
|
2022-05-17 12:42:01 -04:00 |
|
Wes Lambert
|
8af1f19ac3
|
Another no_results change
|
2022-05-17 16:12:43 +00:00 |
|
Wes Lambert
|
e4a7e3cba6
|
Change 'No results found.' to 'no_results'
|
2022-05-17 16:11:58 +00:00 |
|
weslambert
|
2688083ff1
|
Merge pull request #7959 from Security-Onion-Solutions/feature/whoislookup-analyzer
Add Whoislookup RDAP-based analyzer
|
2022-05-17 12:09:06 -04:00 |
|
Wes Lambert
|
766e9748c5
|
Add Whoislookup RDAP-based analyzer
|
2022-05-17 15:52:12 +00:00 |
|
weslambert
|
3761b491c0
|
Remove whitespace
|
2022-05-17 10:50:33 -04:00 |
|
Wes Lambert
|
e8fc3ccdf4
|
Add Team Cymru Malware Hash Registry Analyzer
|
2022-05-17 14:44:53 +00:00 |
|
Doug Burks
|
eb9597217c
|
Merge pull request #7949 from Security-Onion-Solutions/fix/dashboards-hunt-queries
update dashboards.queries.json and hunt.queries.json
|
2022-05-16 08:47:06 -04:00 |
|
doug
|
5cbb50a781
|
update dashboards.queries.json and hunt.queries.json
|
2022-05-16 08:33:48 -04:00 |
|
Jason Ertel
|
685789de33
|
Merge pull request #7936 from Security-Onion-Solutions/kilo
Improved unit test coverage of new analyzers; Utilize localized summa…
|
2022-05-12 16:47:18 -04:00 |
|
Jason Ertel
|
b45b6b198b
|
Improved unit test coverage of new analyzers; Utilize localized summaries; Require 100% code coverage on analyzers
|
2022-05-12 16:32:47 -04:00 |
|
weslambert
|
6c506bbab0
|
Merge pull request #7935 from Security-Onion-Solutions/fix/pulsedive
Fix Pulsedive analyzer logic
|
2022-05-12 15:20:15 -04:00 |
|
Wes Lambert
|
3dc266cfa9
|
Add test for when indicator is not found
|
2022-05-12 19:02:41 +00:00 |
|
Wes Lambert
|
a233c08830
|
Update logic to handle indicators that are not present in database.
|
2022-05-12 19:02:02 +00:00 |
|
Doug Burks
|
58b049257d
|
Merge pull request #7932 from Security-Onion-Solutions/dougburks-patch-1
remove duplicate showSubtitle from hunt.queries.json
|
2022-05-12 09:24:18 -04:00 |
|
Doug Burks
|
6ed3f42449
|
remove duplicate showSubtitle from hunt.queries.json
|
2022-05-12 09:23:00 -04:00 |
|
m0duspwnens
|
d8abc0a195
|
if in dmz_nodes dont add to filebeta
|
2022-05-11 11:51:18 -04:00 |
|
m0duspwnens
|
a641346c02
|
prevent nodes with logstash:dmz:true from being added to logstash:nodes pillar
|
2022-05-10 17:28:19 -04:00 |
|