Commit Graph
100 Commits
Author SHA1 Message Date
weslambertandGitHub 114ad779b4 Merge pull request #13418 from Security-Onion-Solutions/fix/system_mapping
Change name for system component
2024-07-31 16:27:32 -04:00
weslambertandGitHub 49d2ac2b13 Change name for system component 2024-07-31 16:17:57 -04:00
weslambertandGitHub 9a2252ed3f Merge pull request #13414 from Security-Onion-Solutions/fix/system_mapping
Fix system mapping
2024-07-31 14:26:50 -04:00
Wes 9264a03dbc Add custom system component 2024-07-31 17:03:26 +00:00
Wes fb2a42a9af Use custom system component 2024-07-31 17:02:45 +00:00
weslambertandGitHub 63531cdbb6 Merge pull request #13410 from Security-Onion-Solutions/fix/elastic_agent_pipeline_version
Change agent pipeline version
2024-07-30 17:00:15 -04:00
weslambertandGitHub bae348bef7 Change version 2024-07-30 16:44:44 -04:00
weslambertandGitHub bd223d8643 Merge pull request #13409 from Security-Onion-Solutions/fix/elastic_fleet_defender
Fix defender winlog name change
2024-07-30 15:47:45 -04:00
weslambertandGitHub 3fa6c72620 Fix name change 2024-07-30 15:45:55 -04:00
weslambertandGitHub 2b90bdc86a Merge pull request #13408 from Security-Onion-Solutions/fix/fleet_setup
Fix fleet setup
2024-07-30 14:49:29 -04:00
weslambertandGitHub 6831b72804 Fix fleet setup 2024-07-30 14:46:00 -04:00
weslambertandGitHub 5e12b928d9 Merge pull request #13407 from Security-Onion-Solutions/fix/merge_revert
Add removed changes
2024-07-30 13:04:28 -04:00
weslambertandGitHub 0453f51e64 Actually ignore missing templates 2024-07-30 12:54:07 -04:00
weslambertandGitHub 9594e4115c Elastic 8.14.3 2024-07-30 12:47:56 -04:00
weslambertandGitHub 201e14f287 Elastic 8.14.3 2024-07-30 12:46:42 -04:00
weslambertandGitHub d833bd0d55 Elastic 8.14.3 2024-07-30 12:45:25 -04:00
weslambertandGitHub 46eeb014af Add metrics settings 2024-07-30 12:39:50 -04:00
weslambertandGitHub 8e7a2cf353 Ignore missing templates 2024-07-30 12:38:29 -04:00
weslambertandGitHub b466d83625 Merge pull request #13402 from Security-Onion-Solutions/foxtrot
Elastic 8.14.3
2024-07-30 09:28:19 -04:00
weslambertandGitHub 6d008546f1 Fix pre and add post for 2.4.100 2024-07-30 09:26:46 -04:00
weslambertandGitHub c60b14e2e7 Merge branch '2.4/dev' into foxtrot 2024-07-30 08:52:48 -04:00
weslambertandGitHub c753a7cffa Add function for 2.4.100 2024-07-29 13:18:07 -04:00
weslambertandGitHub 5cba4d7d9b Update VERSION 2024-07-29 13:16:14 -04:00
weslambertandGitHub f2ad4c40e6 Fix update for 2.4.90 2024-07-24 10:38:05 -04:00
weslambertandGitHub 8538f2eca2 Elastic Agent update 2024-07-24 09:40:30 -04:00
Wes c55fa6dc6a Fix pattern for pipelines 2024-07-23 17:48:32 +00:00
Wes 17f37750e5 Remove onchanges condition 2024-07-23 16:46:18 +00:00
Wes e789c17bc3 Add global@custom pipeline file 2024-07-23 16:37:37 +00:00
Wes 6f44d39b18 Remove Fleet final pipeline file 2024-07-23 16:37:03 +00:00
Wes dd85249781 Remove Fleet final pipeline 2024-07-23 16:36:41 +00:00
Wes bdba621442 Remove soup changes 2024-07-23 16:32:28 +00:00
Wes 612716ee69 Apply ES to load pipelines 2024-07-17 17:35:41 +00:00
Wes f78a5d1a78 Remove pipeline file 2024-07-17 15:42:40 +00:00
Wes 2d0de87530 Add component templates for Fleet metrics 2024-07-17 15:19:46 +00:00
weslambertandGitHub c0bb395571 Remove pipeline file removal 2024-07-17 09:51:51 -04:00
weslambertandGitHub f051ddc7f0 Remove pipelines 2024-07-17 09:50:26 -04:00
weslambertandGitHub 38e7da1334 Merge pull request #13347 from Security-Onion-Solutions/upgrade/elastic_8_14_3
Elastic 8.14.3
2024-07-15 16:29:24 -04:00
weslambertandGitHub 678b232c24 Elastic 8.14.3 2024-07-15 15:48:01 -04:00
weslambertandGitHub fbd0dbd048 Elastic 8.14.3 2024-07-15 15:46:55 -04:00
weslambertandGitHub 1df19faf5c Elastic 8.14.3 2024-07-15 15:44:50 -04:00
weslambertandGitHub 8ec5794833 Update VERSION 2024-07-15 15:42:40 -04:00
weslambertandGitHub bf07d56da6 Merge pull request #13341 from Security-Onion-Solutions/revert-13323-fix/agent_pipeline
Revert "Change pipeline version for agent"
2024-07-15 11:38:56 -04:00
weslambertandGitHub cdbffa2323 Merge pull request #13342 from Security-Onion-Solutions/revert-13316-foxtrot
Revert "Elastic 8.14.2"
2024-07-15 11:38:48 -04:00
weslambertandGitHub 4e81860a13 Revert "Change pipeline version for agent" 2024-07-15 11:33:52 -04:00
weslambertandGitHub fe1824aedd Revert "Elastic 8.14.2" 2024-07-15 11:28:59 -04:00
weslambertandGitHub ebf5159c95 Merge pull request #13323 from Security-Onion-Solutions/fix/agent_pipeline
Change pipeline version for agent
2024-07-10 13:01:29 -04:00
weslambertandGitHub d432019ad9 Change version from 1.13.1 to 1.20.0 2024-07-10 12:48:08 -04:00
weslambertandGitHub 0db0754ee5 Merge pull request #13316 from Security-Onion-Solutions/foxtrot
Elastic 8.14.2
2024-07-10 08:53:03 -04:00
Wes 1f5a990b1e Remove lines that aren't needed right now 2024-07-09 18:32:06 +00:00
weslambertandGitHub 7a2f01be53 Update VERSION 2024-07-09 13:58:13 -04:00
weslambertandGitHub 9716e09b83 Temp change for testing 2024-07-09 12:51:34 -04:00
Wes 669f68ad88 Fleet metric annotations 2024-07-09 15:39:59 +00:00
weslambertandGitHub 8615e5d5ea Move enabled and index_clean back to the top 2024-07-08 16:50:06 -04:00
weslambertandGitHub 2dd5ff4333 Update VERSION 2024-07-08 16:19:53 -04:00
weslambertandGitHub 6a396ec1aa Fix accidental double quote removal 2024-07-08 11:44:27 -04:00
weslambertandGitHub 34f558c023 Merge pull request #13314 from Security-Onion-Solutions/upgrade/elastic_8_14_2
Elastic 8.14.2
2024-07-08 10:02:02 -04:00
weslambertandGitHub 9504f0885a Elastic 8.14.2 2024-07-08 09:49:07 -04:00
weslambertandGitHub ef59678441 Elastic 8.14.2 2024-07-08 09:48:12 -04:00
weslambertandGitHub c6f6811f47 Elastic 8.14.2 2024-07-08 09:47:34 -04:00
weslambertandGitHub 662df1208d Merge pull request #13296 from Security-Onion-Solutions/fix/soc_ilm_policy
Change name for ILM
2024-07-02 09:06:11 -04:00
weslambertandGitHub 745b6775f1 Change name for ILM 2024-07-02 09:05:35 -04:00
weslambertandGitHub 176aaa8f3d Merge pull request #13295 from Security-Onion-Solutions/fix/custom_windows_integration
Change name to winlog.winlogs
2024-07-02 09:03:52 -04:00
weslambertandGitHub 4d499be1a8 Change name 2024-07-02 08:47:29 -04:00
weslambertandGitHub c27225d91f Merge pull request #13290 from Security-Onion-Solutions/fix/elastic_template_changes
Changes for Elastic 8.14.1
2024-07-01 11:19:02 -04:00
Wes 1b47d5c622 Changes for Elastic 8.14.1 2024-07-01 15:16:58 +00:00
Wes 32d7927a49 Template changes for Elastic 8.14.1 2024-07-01 15:16:06 +00:00
weslambertandGitHub 7716f4aff8 Elastic 8.14.1 2024-06-27 10:49:52 -04:00
weslambertandGitHub 8eb6dcc5b7 Elastic 8.14.1 2024-06-27 10:49:06 -04:00
weslambertandGitHub 847638442b Elastic 8.14.1 2024-06-27 10:48:28 -04:00
weslambertandGitHub 5743189eef Elastic 8.14.1 2024-06-27 10:47:46 -04:00
weslambertandGitHub 81d874c6ae Update VERSION 2024-06-27 10:42:58 -04:00
weslambertandGitHub 71ed9204ff Merge pull request #13275 from Security-Onion-Solutions/fix/elastic_8_10_4
Revert back to 8.10.4
2024-06-27 09:16:54 -04:00
weslambertandGitHub 222ebbdec1 Revert back to 8.10.4 2024-06-27 09:05:29 -04:00
weslambertandGitHub 260d4e44bc Revert back to 8.10.4 2024-06-27 09:04:07 -04:00
weslambertandGitHub 0c5b3f7c1c Revert back to 8.10.4 2024-06-27 09:03:28 -04:00
weslambertandGitHub feee80cad9 Revert back to 8.10.4 2024-06-27 09:01:55 -04:00
weslambertandGitHub e59d124c82 Merge pull request #13271 from Security-Onion-Solutions/upgrade/elastic
Elastic 8.14.1
2024-06-26 14:47:54 -04:00
Wes 13d4738e8f Elastic 8.14.1 2024-06-26 18:39:53 +00:00
weslambertandGitHub abdfbba32a Elastic 8.14.1 2024-06-26 14:06:24 -04:00
weslambertandGitHub 7d0a961482 Elastic 8.14.1 2024-06-26 14:00:54 -04:00
weslambertandGitHub 0f226cc08e Elastic 8.14.1 2024-06-26 13:59:23 -04:00
weslambertandGitHub 6141c7a849 Merge pull request #13246 from Security-Onion-Solutions/fix/detections_license_none
Add option for detections without a license
2024-06-21 15:59:09 -04:00
weslambertandGitHub bf91030204 Add option for detections without license 2024-06-21 15:33:11 -04:00
weslambertandGitHub 964fef1aab Merge pull request #13117 from Security-Onion-Solutions/fix/items_and_lists
Add templates for .items and .lists indices
2024-05-31 16:34:29 -04:00
Wes a8c231ad8c Add component templates 2024-05-31 17:47:01 +00:00
Wes f396247838 Add index templates and lifecycle policies 2024-05-31 17:46:19 +00:00
weslambertandGitHub 5d9c0dd8b5 Merge pull request #13101 from Security-Onion-Solutions/fix/separate_suricata
Separate Suricata alerts into a specific data stream
2024-05-30 16:30:55 -04:00
Wes 2c635bce62 Set index for Suricata alerts 2024-05-30 17:02:31 +00:00
Wes e831354401 Add Suricata alerts setting for configuration 2024-05-30 17:00:11 +00:00
Wes 55c5ea5c4c Add template for Suricata alerts 2024-05-30 16:58:56 +00:00
weslambertandGitHub b415810485 Merge pull request #13061 from Security-Onion-Solutions/fix/tab_casing
Change tab casing to be consistent with other whiptail prompts
2024-05-22 13:44:09 -04:00
weslambertandGitHub 3cfd710756 Change tab casing to be consistent with other whiptail prompts 2024-05-22 13:41:32 -04:00
weslambertandGitHub 556fdfdcf9 Merge pull request #13052 from Security-Onion-Solutions/fix/add_rule_uuid
Add rule.uuid for YARA matches
2024-05-21 17:09:49 -04:00
weslambertandGitHub f4490fab58 Add rule.uuid for YARA matches 2024-05-21 17:05:39 -04:00
weslambertandGitHub 5aaf44ebb2 Merge pull request #13049 from Security-Onion-Solutions/fix/detections_alerts_component_template
Exclude detections from template name matching
2024-05-21 13:45:19 -04:00
weslambertandGitHub deb140e38e Exclude detections from template name matching 2024-05-21 13:38:52 -04:00
weslambertandGitHub 17518b90ca Merge pull request #13036 from Security-Onion-Solutions/fix/yara_compile_report
Create YARA compile report for SOC integrity check
2024-05-17 16:15:21 -04:00
weslambertandGitHub d9edff38df Create compile report for SOC integrity check 2024-05-17 16:10:10 -04:00
weslambertandGitHub 6dec9b4cf7 Merge pull request #12986 from Security-Onion-Solutions/fix/old_strelka
Remove old Strelka configuration for YARA
2024-05-14 09:27:19 -04:00
weslambertandGitHub 13062099b3 Remove YARA script update and reference to exclusions 2024-05-13 18:04:16 -04:00