Commit Graph

11612 Commits

Author SHA1 Message Date
Mike Reeves
e88d459ef4 Merge pull request #9942 from Security-Onion-Solutions/guifixes
Fix Repo Issues and Change curl to check for Salt ports
2023-03-16 15:59:47 -04:00
Mike Reeves
d12367ed75 Force package update before syncing the repo 2023-03-16 15:54:00 -04:00
Mike Reeves
ef4882198a Force package update before syncing the repo 2023-03-16 15:48:57 -04:00
Mike Reeves
2b65c1498d Force package update before syncing the repo 2023-03-16 15:45:04 -04:00
Mike Reeves
957467eae0 Force package update before syncing the repo 2023-03-16 15:41:29 -04:00
Mike Reeves
849e82e39f Force package updates and curl check fix 2023-03-16 15:36:43 -04:00
Mike Reeves
6e3194486c Force package update before syncing the repo 2023-03-16 13:50:22 -04:00
Josh Brower
336cf3ccf8 Merge pull request #9940 from Security-Onion-Solutions/2.4/idh-logs
Add IDH log ingest
2023-03-16 13:16:17 -04:00
Josh Brower
d78128dbf4 Formatting 2023-03-16 13:11:12 -04:00
Josh Brower
a96473554d Add IDH log ingest 2023-03-16 12:56:04 -04:00
Mike Reeves
53e93f01c6 Force an update after repo is configured 2023-03-16 09:49:57 -04:00
Mike Reeves
d0955b3e91 Merge pull request #9937 from Security-Onion-Solutions/guifixes
Re-Work Backups
2023-03-16 09:42:07 -04:00
Jason Ertel
ad2616900c Merge pull request #9939 from Security-Onion-Solutions/kilo
automated testing support; removal of nonexistent ScanRuby strelka scanner
2023-03-16 09:30:05 -04:00
Jason Ertel
3ab3e4712c remove kilo for merge 2023-03-16 09:16:28 -04:00
Jason Ertel
49df376bcc Remove non-existant Ruby scanner 2023-03-15 19:24:03 -04:00
Mike Reeves
f288d0dd61 Re-Work Backups 2023-03-15 17:58:15 -04:00
Mike Reeves
3156b1ed0c Re-Work Backups 2023-03-15 17:53:14 -04:00
Mike Reeves
c355e6eaf0 Merge pull request #9935 from Security-Onion-Solutions/guifixes
Fix IDS tools
2023-03-15 17:27:07 -04:00
Mike Reeves
d4f5209e39 Re-Work IDSTOOLS 2023-03-15 17:22:54 -04:00
Mike Reeves
afcd1155bf Re-Work IDSTOOLS 2023-03-15 17:19:33 -04:00
Mike Reeves
28dc490775 Re-Work IDSTOOLS 2023-03-15 16:58:52 -04:00
Mike Reeves
02d013c0cc Re-Work IDSTOOLS 2023-03-15 16:47:43 -04:00
Mike Reeves
b56baf900c Re-Work IDSTOOLS 2023-03-15 16:44:53 -04:00
Jason Ertel
49a9affe2a Merge branch '2.4/dev' into kilo 2023-03-15 16:39:26 -04:00
Mike Reeves
0d30c14561 Re-Work IDSTOOLS 2023-03-15 16:33:33 -04:00
Jason Ertel
fbefe229c1 add test support to so-minion 2023-03-15 15:27:26 -04:00
Josh Patterson
b809b22566 Merge pull request #9931 from Security-Onion-Solutions/2.4/strelka
2.4/strelka
2023-03-14 16:16:53 -04:00
m0duspwnens
f9b8c78d74 move repos to rules dir 2023-03-14 14:43:13 -04:00
m0duspwnens
7cf4e6b03b add rules dir, change so-yar-update to save to local/salt/strelka/rules 2023-03-14 13:59:31 -04:00
m0duspwnens
5f7256c826 Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/strelka 2023-03-14 13:26:15 -04:00
m0duspwnens
b38d5df684 set default mime_db 2023-03-14 13:25:51 -04:00
weslambert
4e0390963b Merge pull request #9928 from Security-Onion-Solutions/fix/curator_elastic_agent_filebeat_actions_close
Fix Curator Action Files
2023-03-14 10:58:53 -04:00
weslambert
8eba3426be Remove extra dash for 'logs-elastic_agent-metricbeat-default' key 2023-03-14 10:51:50 -04:00
weslambert
7c39938e14 Change 'elastic_agent.filebeat' to 'elastic_agent-filebeat' 2023-03-14 10:48:50 -04:00
weslambert
123275ca35 Merge pull request #9926 from Security-Onion-Solutions/fix/curator_additional_elastic_agent_indices
Add more Elastic Agent Curator actions
2023-03-14 09:59:47 -04:00
Wes
766e6a7974 Add 'logs-windows-sysmon_operational-delete' for Windows Sysmon operational indices 2023-03-14 13:51:49 +00:00
Wes
f0d4c16b2b Add more Elastic Agent index keys for Curator 2023-03-14 13:49:13 +00:00
Wes
412e5c0402 Add more Elastic Agent Curator action files 2023-03-14 13:46:08 +00:00
Josh Brower
fbac23c28d Merge pull request #9925 from Security-Onion-Solutions/2.4/fiedfix
Removes Suricata host.* fields
2023-03-14 07:38:05 -04:00
weslambert
ebc943fcab Merge pull request #9924 from Security-Onion-Solutions/fix/curator_action_file_system_syslog_delete
Fix Elastic Agent system syslog default delete file configuration
2023-03-13 17:28:38 -04:00
weslambert
486de12ca5 Delete logs-system-auth-syslog-close.yaml 2023-03-13 17:27:52 -04:00
weslambert
f4112b30c0 Fix index reference for system auth default 2023-03-13 17:27:06 -04:00
weslambert
bab40de58d Fix system auth default key value 2023-03-13 17:26:05 -04:00
weslambert
785f100132 Fix system auth default key value 2023-03-13 17:25:33 -04:00
weslambert
8ade7b85fc Fix system syslog default key value 2023-03-13 17:24:40 -04:00
weslambert
c2701f1835 Fix system syslog default key value 2023-03-13 17:24:12 -04:00
weslambert
d5bb223235 Fix system syslog delete file configuration 2023-03-13 17:10:52 -04:00
weslambert
bb711a2a15 Merge pull request #9923 from Security-Onion-Solutions/fix/curator_default_elastic_agent_logs
Add Elastic Agent default indices to be managed by Curator
2023-03-13 16:59:40 -04:00
Wes
efc5832499 Add Elastic Agent default log action files 2023-03-13 20:54:38 +00:00
Wes
8d395dc465 Add Elastic Agent default data stream backing indices for management by Curator 2023-03-13 20:54:13 +00:00