14367 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Josh Brower	e4dcb4a8dd	Merge remote-tracking branch 'origin/cogburn/detection_playbooks' into kilo	2024-02-15 17:50:37 -05:00
Corey Ogburn	c64f37ab67	sigmaRulePackages is now a string array	2024-02-15 10:34:07 -07:00
Josh Brower	686304f24a	Merge remote-tracking branch 'origin/2.4/dev' into kilo	2024-02-15 09:47:51 -05:00
Josh Patterson	0765320839	Merge pull request #12360 from Security-Onion-Solutions/2450soup ... `2450soup	2024-02-14 14:37:28 -05:00
m0duspwnens	a2b17d2348	move jinja to top	2024-02-14 14:27:41 -05:00
m0duspwnens	c1f467a068	handle airgap	2024-02-14 14:22:18 -05:00
m0duspwnens	7d5932ee5e	Merge remote-tracking branch 'origin/2.4/dev' into 2450soup	2024-02-14 13:29:39 -05:00
m0duspwnens	79e98e508f	pass in UPDATE_DIR as a pillar	2024-02-14 13:28:12 -05:00
Josh Patterson	cf6266a92b	Merge pull request #12354 from Security-Onion-Solutions/2450soup ... modify soup to update soup scripts using salt	2024-02-13 16:23:57 -05:00
m0duspwnens	2e9fa2438b	add back comment	2024-02-13 16:19:50 -05:00
Corey Ogburn	a5db9f87dd	Merge branch 'kilo' into cogburn/detection_playbooks	2024-02-13 14:08:44 -07:00
Corey Ogburn	f321e734eb	Added so-detection mapping in elasticsearch	2024-02-13 14:05:27 -07:00
Corey Ogburn	8800b7e878	WIP: Detections Changes ... Removed some strelka/yara rules from salt. Removed yara scripts for downloading and updating rules. This will be managed by SOC. Added a new compile_yara.py script. Added the strelka repos folder.	2024-02-13 14:05:27 -07:00
Corey Ogburn	031ee078c5	socsigmarepo ... Need write permissions on the /opt/so/rules dir so I can clone the sigma repo there.	2024-02-13 14:05:27 -07:00
m0duspwnens	00f2374582	fix path for so-firewall	2024-02-13 15:43:02 -05:00
m0duspwnens	468eedfaeb	add soup script update retru	2024-02-13 15:30:24 -05:00
m0duspwnens	88786e8342	use file.copy to preserve perms	2024-02-13 15:05:09 -05:00
Corey Ogburn	c933627a71	Merge branch 'kilo' of github.com:security-onion-solutions/securityonion into kilo	2024-02-13 12:53:29 -07:00
Corey Ogburn	0d297274c8	DetectionComment Mapping Defined	2024-02-13 12:53:18 -07:00
m0duspwnens	141fd49f02	use rsync	2024-02-13 14:27:22 -05:00
m0duspwnens	7112337c85	fix copy	2024-02-13 13:52:14 -05:00
Josh Brower	0c6c6ba2d5	Various UI tweaks	2024-02-13 13:38:43 -05:00
m0duspwnens	d6ac7a3286	fix the jinja	2024-02-13 13:31:34 -05:00
m0duspwnens	9175a73456	dont need $ for vars	2024-02-13 13:08:09 -05:00
Doug Burks	14209ad99d	Merge pull request #12355 from Security-Onion-Solutions/dougburks-patch-1 ... Add table columns to process dashboard in defaults.yaml	2024-02-13 12:59:34 -05:00
m0duspwnens	1bde002f20	update case	2024-02-13 12:51:53 -05:00
Doug Burks	0741ae370a	Update defaults.yaml	2024-02-13 12:51:26 -05:00
m0duspwnens	d7f853b5b2	comment out script copy in soup	2024-02-13 12:50:22 -05:00
m0duspwnens	5c9b1ab38b	copy with cp	2024-02-13 12:48:31 -05:00
m0duspwnens	b713771494	add back common soup_scripts state	2024-02-13 12:30:36 -05:00
Doug Burks	8060751a66	Add table columns to process dashboard in defaults.yaml	2024-02-13 12:24:33 -05:00
m0duspwnens	c1258f9a92	Merge remote-tracking branch 'origin/2.4/dev' into 2450soup	2024-02-13 11:09:24 -05:00
m0duspwnens	92634724c4	move rm	2024-02-13 11:09:08 -05:00
m0duspwnens	3efaba1104	modify soup to update soup scripts without using salt	2024-02-13 11:04:26 -05:00
Doug Burks	d072d431b3	Merge pull request #12350 from Security-Onion-Solutions/feature/process-ancestry-action ... FEATURE: Add new SOC action to show process ancestry #12345	2024-02-13 08:51:38 -05:00
Josh Brower	ea80469c2d	Detection Default queries	2024-02-12 19:39:55 -05:00
Doug Burks	0ad39a7e32	FEATURE: Add new SOC action to show process ancestry #12345	2024-02-12 19:18:29 -05:00
Doug Burks	20d2f3b97e	Update Sublime action in defaults.yaml to use i18n	2024-02-12 19:13:32 -05:00
Josh Brower	64726a2785	Merge pull request #12349 from Security-Onion-Solutions/2.4/conflictingfix ... Fix conflicting id	2024-02-12 19:07:07 -05:00
Josh Brower	ccb14485a3	Fix conflicting id	2024-02-12 19:06:19 -05:00
Josh Brower	5102269440	Update defaults	2024-02-12 16:44:54 -05:00
Mike Reeves	e713b4c660	Merge pull request #12346 from Security-Onion-Solutions/reyesj2-patch-1 ... Remove unused file	2024-02-12 16:07:31 -05:00
Mike Reeves	2db5f4dd41	Merge pull request #12308 from petiepooo/feat-es-ownfs ... FEATURE: Check for mountpoint during Elastic size limit calculations	2024-02-12 16:03:36 -05:00
Mike Reeves	f91cb5b81f	Merge pull request #12290 from petiepooo/fix-remove-intca-symlink ... fix: also remove intca symlink	2024-02-12 12:33:13 -05:00
Jorge Reyes	4b697b2406	Remove unused file	2024-02-12 09:28:48 -05:00
Josh Brower	c04f5a3f0f	Merge pull request #12268 from Security-Onion-Solutions/feature/fleet-artifacts ... Feature/fleet artifacts	2024-02-12 08:58:14 -05:00
Josh Brower	b1de6abc17	Merge pull request #12343 from Security-Onion-Solutions/fix/anothercheck ... Wait for ES to be ready	2024-02-12 08:58:05 -05:00
Josh Brower	cc0f25a4f7	Wait for ES to be ready	2024-02-11 13:30:20 -05:00
Josh Brower	eafb5cf15e	Change to file_root	2024-02-11 13:18:20 -05:00
Jorge Reyes	2b2aa30ac1	Merge pull request #12332 from Security-Onion-Solutions/reyesj2/sod-putty ... Add putty to SOD	2024-02-10 20:41:03 -05:00