Jason Ertel
|
e8b67da08b
|
exclude oom error from cmd line
|
2023-09-29 14:20:20 -04:00 |
|
Jason Ertel
|
d546d52069
|
exclude logstash
|
2023-09-29 14:08:44 -04:00 |
|
Jason Ertel
|
ec3cc7a854
|
exclude all playbook logs
|
2023-09-29 10:49:36 -04:00 |
|
Jason Ertel
|
89a9c30cc8
|
exclude known issues
|
2023-09-28 08:27:31 -04:00 |
|
Jason Ertel
|
621da9e7e3
|
more exclusions
|
2023-09-27 22:20:54 -04:00 |
|
Jason Ertel
|
9ee64f93ca
|
logcheck improvements
|
2023-09-27 20:17:59 -04:00 |
|
Jason Ertel
|
49115cde55
|
logcheck improvements
|
2023-09-27 19:55:46 -04:00 |
|
Jason Ertel
|
d72e4ae97d
|
ignore soctopus errors
|
2023-09-27 18:39:23 -04:00 |
|
Jason Ertel
|
24def3a196
|
ignore generic python stack trace log lines of code, rely on actual error messages
|
2023-09-27 16:50:01 -04:00 |
|
Jason Ertel
|
4666916077
|
ignore generic python stack trace log lines of code, rely on actual error messages
|
2023-09-27 15:48:52 -04:00 |
|
Jason Ertel
|
87cc389088
|
deb OS doesn't use /var/log/cron, skip
|
2023-09-27 15:36:13 -04:00 |
|
Jason Ertel
|
b47d915cb6
|
don't inspect imported zeek output
|
2023-09-27 09:30:19 -04:00 |
|
Jason Ertel
|
9c854a13cc
|
skip zeek spool logs due to test data false positives
|
2023-09-26 21:41:44 -04:00 |
|
Jason Ertel
|
2c8d413f16
|
log check tool initial
|
2023-09-26 18:14:37 -04:00 |
|
Jason Ertel
|
48801da44e
|
log check tool initial
|
2023-09-26 18:12:20 -04:00 |
|
Josh Patterson
|
641b8ef0b6
|
Merge pull request #11393 from Security-Onion-Solutions/issue/11390
Issue/11390
|
2023-09-26 13:26:42 -04:00 |
|
m0duspwnens
|
036a21ff17
|
Merge remote-tracking branch 'origin/2.4/dev' into issue/11390
|
2023-09-26 11:01:44 -04:00 |
|
m0duspwnens
|
2abf434ebe
|
create snapshots of default, local salt and pillars during soup. rsync soup with --delete
|
2023-09-26 10:56:20 -04:00 |
|
weslambert
|
4dc477cc1d
|
Merge pull request #11391 from Security-Onion-Solutions/fix/elasticsearch_strelka_image_version
Make scan.pe.image_version type of 'float'
|
2023-09-26 10:21:17 -04:00 |
|
Wes
|
0bba68769b
|
Make scan.pe.image_version type of 'float'
|
2023-09-26 14:05:12 +00:00 |
|
m0duspwnens
|
e25d1c0ff3
|
so-salt-minion-check is jinja template
|
2023-09-26 10:01:21 -04:00 |
|
weslambert
|
f9ace4791f
|
Merge pull request #11384 from Security-Onion-Solutions/fix/analyzers_testing
Add a note about testing analyzers outside of the Sensoroni Docker container
|
2023-09-25 14:48:45 -04:00 |
|
weslambert
|
7cb9b5f257
|
Add the blank line that was removed from the previous commit
|
2023-09-25 14:41:20 -04:00 |
|
weslambert
|
c95af6b992
|
Add a note about testing analyzers outside of the Sensoroni Docker container
|
2023-09-25 14:39:33 -04:00 |
|
weslambert
|
2fc4d2923d
|
Merge pull request #11289 from Security-Onion-Solutions/fix/elastic_agent_404
/app/dashboards to /kibana/app/dashboards
|
2023-09-25 09:11:50 -04:00 |
|
Wes
|
eeeae08ec8
|
/app/ to /app/dashboards/
|
2023-09-21 18:39:06 +00:00 |
|
Jason Ertel
|
220f25e206
|
Merge pull request #11369 from Security-Onion-Solutions/jertel-patch-1
Update soup to prune in background
|
2023-09-21 09:42:28 -04:00 |
|
Jason Ertel
|
fa3a79a787
|
Update soup to prune in background
|
2023-09-21 09:41:44 -04:00 |
|
Doug Burks
|
ca71add51b
|
Merge pull request #11363 from Security-Onion-Solutions/dougburks-patch-1
FIX: SOC Config sensoroni doc links should point to correct docs #11362
|
2023-09-20 08:29:30 -04:00 |
|
Doug Burks
|
3fa3f83007
|
Update soc_sensoroni.yaml
|
2023-09-20 08:22:52 -04:00 |
|
weslambert
|
377802410e
|
Merge pull request #11352 from Security-Onion-Solutions/fix/import_evtx_exists
Fix EVTX Imports
|
2023-09-19 16:11:22 -04:00 |
|
Wes
|
2e0ea3f374
|
Set final pipeline
|
2023-09-19 13:33:12 +00:00 |
|
Wes
|
508260bd46
|
Use event.created for timestamp
|
2023-09-19 13:32:03 +00:00 |
|
Wes
|
a1e963f834
|
Reverse timestamps where necessary
|
2023-09-19 13:28:20 +00:00 |
|
Jason Ertel
|
8a98040008
|
Merge pull request #11351 from Security-Onion-Solutions/jertel/auto
ignore debian apt update output
|
2023-09-19 09:26:31 -04:00 |
|
Jason Ertel
|
47e611682a
|
ignore debian apt update output
|
2023-09-19 09:24:12 -04:00 |
|
Wes
|
5bac1e4d15
|
Show correct dates and Kibana URL for already processed EVTX files
|
2023-09-18 21:31:15 +00:00 |
|
Jason Ertel
|
ad025b9683
|
Merge pull request #11345 from Security-Onion-Solutions/jertel/auto
ensure all binds are present to avoid volume sprawl
|
2023-09-18 15:34:57 -04:00 |
|
Josh Patterson
|
3e97ddc22d
|
Merge pull request #11344 from Security-Onion-Solutions/fix/idstoolextra_env
fix idstool extra_env for container
|
2023-09-18 15:29:33 -04:00 |
|
m0duspwnens
|
151e8bfc4e
|
fix idstool extra_env for container
|
2023-09-18 15:21:45 -04:00 |
|
Jason Ertel
|
a914a02273
|
prune unused volumes during upgrade
|
2023-09-18 14:43:02 -04:00 |
|
Jason Ertel
|
bb3632d1b2
|
fix bind if statement
|
2023-09-18 14:38:15 -04:00 |
|
Jason Ertel
|
66bb1272ae
|
avoid volume sprawl
|
2023-09-18 13:39:56 -04:00 |
|
Jason Ertel
|
bbef96ac25
|
use unique name
|
2023-09-18 12:12:57 -04:00 |
|
Jason Ertel
|
f9cbde10a6
|
avoid volume sprawl
|
2023-09-18 11:19:21 -04:00 |
|
weslambert
|
fe1bae96ed
|
Merge pull request #11297 from Security-Onion-Solutions/fix/soc_idh
Change description to indicate that opencanary modules only apply to IDH nodes
|
2023-09-15 11:16:06 -04:00 |
|
weslambert
|
eab6173a31
|
Merge pull request #11329 from Security-Onion-Solutions/fix/elastic_templates_clean
Clean component template directory
|
2023-09-15 11:00:17 -04:00 |
|
Wes
|
98499c3963
|
Clean component template directory
|
2023-09-15 13:51:46 +00:00 |
|
Josh Patterson
|
26da525ebe
|
Merge pull request #11328 from Security-Onion-Solutions/fix/checkreq
improvents for checking system requirements
|
2023-09-15 09:17:04 -04:00 |
|
m0duspwnens
|
c65c9777bd
|
improvents for checking system requirements
|
2023-09-14 17:42:25 -04:00 |
|