CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-07-22 16:55:40 +02:00
Code Issues Packages Projects Releases Wiki Activity
11,505 Commits 46 Branches 127 Tags
e93c052d346ae8743403f5f10c482931a3f55068
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Josh BrowerandGitHub 3eb839bd21 Merge pull request #9897 from Security-Onion-Solutions/2.4/dev-fleet 
Fleet - setup ES output for all Managers
 2023-03-06 15:54:03 -05:00
Josh Brower a6db2d4502 Fleet - setup ES output for all Managers 2023-03-06 15:50:09 -05:00
Josh BrowerandGitHub 8fae826a3a Merge pull request #9890 from Security-Onion-Solutions/2.4/fixosquerylink 
Fixup osquery SO Hunt link
 2023-03-06 07:25:00 -05:00
Josh Brower f0db5cf657 Fixup osquery SO Hunt link 2023-03-04 11:50:01 -05:00
Josh BrowerandGitHub 96467f0bd8 Merge pull request #9865 from Security-Onion-Solutions/2.4/fleet-esoutput 
Move Output to ES
 2023-02-28 15:20:46 -05:00
Josh Brower f7176f9989 Move Output to ES 2023-02-27 09:58:43 -05:00
Josh BrowerandGitHub 3a2ec8e8bf Merge pull request #9830 from Security-Onion-Solutions/2.4/IDHMerge 
Initial support for IDH
 2023-02-21 12:19:53 -05:00
Josh Brower b62cc32b1a Initial support for IDH 2023-02-21 11:52:37 -05:00
Josh BrowerandGitHub f811223ba7 Merge pull request #9614 from Security-Onion-Solutions/playbookfixup 
Playbookfixup
 2023-01-23 08:20:06 -05:00
Josh Brower d3cb57bba2 Rerun the playbook state 2023-01-23 08:16:28 -05:00
Josh Brower 1ab8c712e4 remove exit condition 2023-01-20 15:17:04 -05:00
Josh BrowerandGitHub 027c83b5ea Merge pull request #9601 from Security-Onion-Solutions/disablecontainer 
Fixup
 2023-01-19 11:47:04 -05:00
Josh Brower 4369d2385b Temp disable Elastic Registry Repo 2023-01-19 11:45:13 -05:00
Josh BrowerandGitHub 8ce96942c1 Merge pull request #9599 from Security-Onion-Solutions/disablecontainer 
Temp disable Elastic Registry Repo
 2023-01-19 07:27:51 -05:00
Josh Brower e83e54936e Temp disable Elastic Registry Repo 2023-01-19 07:25:25 -05:00
Josh BrowerandGitHub f7150d423c Merge pull request #9440 from Security-Onion-Solutions/fleet-setup-fixes 
Make Fleet setup less fragile
 2022-12-20 11:55:14 -05:00
Josh Brower 73a9c3bb38 Make Fleet setup less fragile 2022-12-20 11:52:56 -05:00
Josh BrowerandGitHub b901efc90d Merge pull request #9434 from Security-Onion-Solutions/2.4/allow-editing-efpolicies 
Unmanage default policies
 2022-12-19 14:33:16 -05:00
Josh BrowerandGitHub 6d07ab0c40 Unmanage default policies 2022-12-19 14:27:36 -05:00
Josh BrowerandGitHub 98af16055c Merge pull request #9151 from Security-Onion-Solutions/2.4/elasticfleet-ag 
Initial support for Elastic Fleet Package Registry
 2022-11-16 08:45:29 -05:00
Josh Brower 8db49feb32 Use our docker image 2022-11-16 08:24:25 -05:00
Josh Brower 48d191b656 Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/elasticfleet-ag 2022-11-15 12:13:05 -05:00
Josh Brower c389944e5c Initial support for Elastic Package Registry 2022-11-08 09:56:53 -05:00
Josh BrowerandGitHub 97f42dcce5 Merge pull request #8811 from Security-Onion-Solutions/2.4/elastic-fleet 
Live Query - View in Hunt fix
 2022-09-26 09:35:12 -04:00
Josh Brower a0b579019f Live Query - View in Hunt fix 2022-09-26 09:27:09 -04:00
Josh BrowerandGitHub d698238ed1 Merge pull request #8799 from Security-Onion-Solutions/2.4/elastic-fleet 
Live Query - View in Hunt link
 2022-09-23 15:00:32 -04:00
Josh Brower c7eccfd0c5 Live Query - View in Hunt link 2022-09-22 20:17:57 -04:00
Josh BrowerandGitHub 0815b607e6 Merge pull request #8778 from Security-Onion-Solutions/2.4/elastic-fleet 
Hunt Query - Elastic Agent Live Osquery Logs
 2022-09-20 08:29:47 -04:00
Josh Brower 120fdef173 Hunt Query - Elastic Agent Live Osquery Logs 2022-09-20 08:27:47 -04:00
Josh BrowerandGitHub da8d09713f Merge pull request #8776 from Security-Onion-Solutions/2.4/elastic-fleet 
Hunt Query - Elastic Agent Live Osquery Logs
 2022-09-20 06:20:51 -04:00
Josh Brower 3eb4adc5c3 Hunt Query - Elastic Agent Live Osquery Logs 2022-09-19 20:12:47 -04:00
Josh BrowerandGitHub b38804840d Merge pull request #8772 from Security-Onion-Solutions/2.4/grafana-ids 
Grafana SOC Redirect
 2022-09-19 16:02:41 -04:00
Josh BrowerandGitHub 80919827c6 Fixup index patterns 2022-09-19 15:55:23 -04:00
Josh Brower ea7979cfdd Add Elastic Agent datastreams to SOC index 2022-09-19 15:33:15 -04:00
Josh Brower d28a9ecec2 Set Dashboard UUID 2022-09-19 13:32:04 -04:00
Josh BrowerandGitHub eba82553a1 Merge pull request #8755 from Security-Onion-Solutions/2.4/tls 
Change ssl_ecdh_curve
 2022-09-16 13:28:35 -04:00
Josh Brower d5debd9b6b Change ssl_ecdh_curve 2022-09-16 09:06:09 -04:00
Josh BrowerandGitHub 99f54acef1 Merge pull request #8742 from Security-Onion-Solutions/2.4/elastic-fleet 
2.4/elastic fleet
 2022-09-15 07:16:37 -04:00
Josh Brower bdfde669f3 remove outdated scripts 2022-09-14 18:38:08 -04:00
Josh Brower 798b39ec09 elastic-fleet so-status & restart scripts 2022-09-14 18:36:26 -04:00
Josh BrowerandGitHub 0c1f9eaa37 Merge pull request #8739 from Security-Onion-Solutions/2.4/elastic-fleet 
EA Certs & image
 2022-09-14 14:20:17 -04:00
Josh Brower 1c671b47d7 Run container as elastic-fleet user 2022-09-14 14:17:54 -04:00
Josh Brower b7b92c73a3 add so-elastic-agent to container list 2022-09-14 11:00:16 -04:00
Josh Brower 334a0d7b1c Start using so-elastic-agent container 2022-09-14 10:33:27 -04:00
Josh Brower 6945596eee Tweak elastic agent ssl gen 2022-09-14 08:10:42 -04:00
Josh Brower bf14612258 Change out Elastic Fleet certs 2022-09-13 15:58:53 -04:00
Josh BrowerandGitHub 0c7ee56ee3 Merge pull request #8725 from Security-Onion-Solutions/2.4/elastic-fleet 
Fix elastic agent gen script
 2022-09-13 07:18:47 -04:00
Josh Brower 4a28841a7c Fix elastic agent gen script 2022-09-13 06:38:05 -04:00
Josh BrowerandGitHub 905068f7bf Merge pull request #8720 from Security-Onion-Solutions/2.4/elastic-fleet 
Add so-elastic-agent-builder
 2022-09-12 13:40:28 -04:00
Josh Brower 0df7d0249a Add so-elastic-agent-builder 2022-09-12 12:22:35 -04:00
Josh BrowerandGitHub 3708c9b4d9 Merge pull request #8715 from Security-Onion-Solutions/2.4/elastic-fleet 
Add links to tools menu
 2022-09-12 09:34:17 -04:00
Josh Brower 9f99939bda Add links to tools menu 2022-09-12 09:28:10 -04:00
Josh BrowerandGitHub e700a43a40 Merge pull request #8714 from Security-Onion-Solutions/2.4/elastic-fleet 
2.4/elastic fleet
 2022-09-12 08:34:28 -04:00
Josh Brower 09a1032f77 Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/elastic-fleet 2022-09-09 15:08:25 -04:00
Josh Brower 921d644a0b Elastic Fleet wrapper 2022-09-09 15:05:31 -04:00
Josh BrowerandGitHub d9ae646ef2 Merge pull request #8682 from Security-Onion-Solutions/2.4/elastic-fleet 
2.4/elastic fleet
 2022-09-07 18:53:35 -04:00
Josh Brower f00aafdfb2 Elastic Agent - move gen installers 2022-09-07 16:57:11 -04:00
Josh Brower e8af315e40 Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/elastic-fleet 2022-09-07 16:32:31 -04:00
Josh BrowerandGitHub e3e0e4c6ed Merge pull request #8681 from Security-Onion-Solutions/playbookfix 
Update so-playbook-reset
 2022-09-07 16:01:37 -04:00
Josh BrowerandGitHub 39ed582a72 Update so-playbook-reset 2022-09-07 15:59:54 -04:00
Josh Brower ce688cfb91 Elastic Agent setup changes 2022-09-07 10:23:26 -04:00
Josh BrowerandGitHub 7fa9ca8fc6 Merge pull request #8233 from Security-Onion-Solutions/fix/remove-sudo-bpf 
Remove unneeded sudo
 2022-07-05 09:23:48 -04:00
Josh Brower a1d1779126 Remove unneeded sudo 2022-07-05 09:21:05 -04:00
Josh BrowerandGitHub 0a203add3b Merge pull request #8145 from Security-Onion-Solutions/defensivedepth-patch-1 
pin v1.6.0
 2022-06-17 13:14:58 -04:00
Josh BrowerandGitHub b8ee896f8a pin v1.6.0 2022-06-17 12:38:54 -04:00
Josh BrowerandGitHub 238e671f34 Merge pull request #8129 from Security-Onion-Solutions/fix/curator-cron 
Change curator to daily for true cluster
 2022-06-15 11:40:53 -04:00
Josh Brower 072cb3cca2 Change curator to daily for true cluster 2022-06-15 11:38:38 -04:00
Josh BrowerandGitHub 2574f0e23d Merge pull request #8081 from Security-Onion-Solutions/fix/fleetdm-websockets 
Allow websockets for fleetdm
 2022-06-06 19:15:02 -04:00
Josh Brower c9d9804c3a Allow websockets for fleetdm 2022-06-06 17:26:24 -04:00
Josh BrowerandGitHub 025677a1e6 Merge pull request #8034 from Security-Onion-Solutions/feature/sigmafp 
Feature/SigmaCustomFilters
 2022-05-31 07:25:44 -04:00
Josh Brower a5361fb745 Change Target_log name 2022-05-28 18:07:05 -04:00
Josh BrowerandGitHub 94ee45ac63 Merge pull request #8029 from Security-Onion-Solutions/upgrade/navigator 
Upgrade Navigator to 4.6.4
 2022-05-27 14:46:59 -04:00
Josh Brower 43cb78a6a8 Upgrade Navigator 2022-05-27 14:21:11 -04:00
Josh Brower 8e368bdebe Merge in upstream dev 2022-05-06 20:01:07 -04:00
Josh BrowerandGitHub 891a197a6a Merge pull request #7814 from Security-Onion-Solutions/defensivedepth-patch-2 
Fix ES/LS Log Pruning
 2022-04-18 10:45:27 -04:00
Josh BrowerandGitHub b35b505f0a Fix pattern matching 2022-04-18 10:39:04 -04:00
Josh BrowerandGitHub 2b39570b08 Fix matching logic 2022-04-18 10:37:38 -04:00
Josh BrowerandGitHub d60d31f723 Merge pull request #7801 from Security-Onion-Solutions/defensivedepth-patch-1 
Remove thehive entries from so-status
 2022-04-15 12:25:21 -04:00
Josh BrowerandGitHub bd19da1878 Remove thehive entries from so-status 2022-04-15 12:21:56 -04:00
Josh BrowerandGitHub 19cba9dca9 Merge pull request #7798 from Security-Onion-Solutions/awlocal 
Make analyst iso install init management interface
 2022-04-15 07:26:53 -04:00
Josh BrowerandGitHub 1cb5a791ca Add idh req_storage elif 2022-04-12 14:29:07 -04:00
Josh BrowerandGitHub f1574de827 Merge pull request #7765 from Security-Onion-Solutions/fix/compress-clean-elastic-logs 
Compress + Clean ES & Logstash App Logs
 2022-04-11 16:43:03 -04:00
Josh Brower 886d69fb38 Compress + Clean ES & Logstash App Logs 2022-04-11 16:09:24 -04:00
Josh BrowerandGitHub ae8d300567 Merge pull request #7738 from Security-Onion-Solutions/feature/idh-allow-multiple-int 
Include firewall state
 2022-04-07 14:52:31 -04:00
Josh Brower 36b2d78dfe Include firewall state 2022-04-07 14:02:21 -04:00
Josh BrowerandGitHub 86771e1fe6 Merge pull request #7732 from Security-Onion-Solutions/feature/idh-allow-multiple-int 
Feature/idh allow multiple int
 2022-04-06 17:21:30 -04:00
Josh Brower f5e539a05c Initial support for restricting IDH services on MGT IP 2022-04-06 17:16:38 -04:00
Josh Brower 7906c053b1 Initial support for restricting IDH services on MGT IP 2022-04-04 16:46:05 -04:00
Josh BrowerandGitHub 5b9c82a434 Merge pull request #7494 from Security-Onion-Solutions/fix/fleetdm-custom-hostname 
Force regen of ssl cert
 2022-03-16 15:17:05 -04:00
Josh Brower f0e44827a5 rm extra line 2022-03-10 08:48:46 -05:00
Josh Brower 814e16ba95 Force regen of ssl cert 2022-03-10 08:47:26 -05:00
Josh Brower 2ba72791aa Remove sigma regen cron 2022-03-02 10:31:15 -05:00
Josh BrowerandGitHub 39718561ce Merge pull request #7366 from Security-Onion-Solutions/delta 
Enable state tracking for sigma refresh
 2022-03-01 05:53:14 -05:00
Josh Brower e960d99901 Enable state tracking for sigma refresh 2022-02-28 21:18:41 -05:00
Josh Brower 09f1a5025d Merge remote-tracking branch 'remotes/origin/dev' into delta 2022-02-28 21:18:07 -05:00
Josh Brower 41a58b791a Enable state tracking for sigma refresh 2022-02-28 21:17:59 -05:00
Josh BrowerandGitHub f824717094 Merge pull request #7364 from Security-Onion-Solutions/delta 
IDH Node verbiage
 2022-02-28 17:09:08 -05:00
Josh Brower 0cee0d5dea IDH Node verbiage 2022-02-28 16:47:24 -05:00
Josh BrowerandGitHub d71bde0e38 Merge pull request #7362 from Security-Onion-Solutions/delta 
Navigator - include attack json for airgap
 2022-02-28 16:33:10 -05:00
Josh Brower 2075412ca2 Navigator - include attack json for airgap 2022-02-28 16:15:30 -05:00