887 Commits

Author	SHA1	Message	Date
Josh Patterson	ed80c4e13b	Merge remote-tracking branch 'origin/2.4/dev' into vlb2	2025-04-23 15:42:04 -04:00
Jason Ertel	3b447b343f	fix typo	2025-04-17 11:51:45 -04:00
Jason Ertel	d0375d3c7e	fix typo	2025-04-17 11:51:21 -04:00
Jason Ertel	b607689993	improve regex	2025-04-17 11:47:52 -04:00
Jason Ertel	8f1e528f1c	improve regex	2025-04-17 11:09:39 -04:00
Jason Ertel	366e39950a	subord annotations; ensure node reboots occur in background	2025-04-16 15:55:16 -04:00
Josh Patterson	cc0e91aa96	Merge remote-tracking branch 'origin/2.4/dev' into vlb2	2025-04-07 08:52:50 -04:00
Jason Ertel	b99bb0b004	support options field on actions	2025-04-04 11:19:30 -04:00
Josh Patterson	445afca6ee	use vrt	2025-04-03 13:44:13 -04:00
Jason Ertel	9c455badb9	support background actions via config UI	2025-04-03 13:08:44 -04:00
Josh Patterson	f9bf4e4130	Merge remote-tracking branch 'origin/2.4/dev' into vlb2	2025-03-27 11:26:32 -04:00
Jason Ertel	1236c8c1f2	support pcap imports for sensors in distributed grids	2025-03-21 10:34:55 -04:00
Jason Ertel	ad8f3dfde7	use specified role on new user add	2025-03-17 14:55:40 -04:00
Josh Patterson	ae94722eda	Merge remote-tracking branch 'origin/2.4/dev' into vlb2	2025-03-11 11:20:50 -04:00
Jason Ertel	2af05b9a23	switch back to colon for better clarity	2025-03-07 08:24:19 -05:00
Doug Burks	3037dc7c38	Update soc_soc.yaml to fix previous change	2025-03-07 07:13:27 -05:00
Mike Reeves	14e95f4898	Update soc_soc.yaml	2025-03-06 21:01:45 -05:00
Mike Reeves	bad0031829	Update soc_soc.yaml	2025-03-06 20:58:23 -05:00
Josh Patterson	f30938ed59	hypervisor annotation show if base domain is initialized or not	2025-03-06 15:26:08 -05:00
Mike Reeves	03ebc2d86e	Add Actions	2025-03-05 15:58:10 -05:00
Mike Reeves	3021ed5d36	Add Actions	2025-03-05 15:56:26 -05:00
Mike Reeves	b51aa56e86	Some things I thought were bools are not bools	2025-03-05 15:15:26 -05:00
Mike Reeves	b01fb733a9	Some things I thought were bools are not bools	2025-03-05 14:56:26 -05:00
Mike Reeves	c7c6d3e556	Merge branch '2.4/dev' of github.com:Security-Onion-Solutions/securityonion into truefalse	2025-03-05 13:21:21 -05:00
Corey Ogburn	21a64b6c1d	Add Client Parameter ... Add groupItemsPerPage so detections groupby tables have proper default value for page size.	2025-03-05 09:43:21 -07:00
Josh Patterson	6c472dd383	Merge remote-tracking branch 'origin/2.4/dev' into vlb2	2025-03-05 08:58:03 -05:00
Josh Patterson	2c5861a0c2	ensure local hypervisor dir when new hypervisor key accepted. apply soc.dyanno.hypervisor when hypervisor key accepted	2025-03-05 08:51:10 -05:00
Doug Burks	c6c67f4d06	FEATURE: Add sankey chart to Elastic Agent API dashboard to show relationship between process.name and process.Ext.api.name #14339	2025-03-05 06:31:16 -05:00
Jason Ertel	85450693a2	Merge branch '2.4/dev' into jertel/wip	2025-03-04 10:55:29 -05:00
Jason Ertel	0047246cf2	reduce stdout verbosity	2025-03-04 10:55:12 -05:00
Doug Burks	44535cba8c	FIX: Elastic Agent Security Events dashboard should reference user.effective.name #14325	2025-03-04 06:46:56 -05:00
Doug Burks	e53f4fd1f1	Update defaults.yaml to quote the process.entity_id value	2025-03-02 05:54:30 -05:00
Josh Patterson	c8a1c8377a	vm power operations	2025-02-27 16:04:44 -05:00
Mike Reeves	2ffaf2f601	Add hunt queries	2025-02-27 12:42:03 -05:00
Mike Reeves	4696152f78	Add hunt queries	2025-02-27 12:31:51 -05:00
Mike Reeves	a0944f8359	Add hunt queries	2025-02-27 12:17:57 -05:00
Mike Reeves	1fdbe987b8	Add hunt queries	2025-02-27 12:15:37 -05:00
Mike Reeves	40303c2d78	Add hunt queries	2025-02-27 12:10:59 -05:00
Mike Reeves	4b5048bd80	Add hunt queries	2025-02-27 11:57:57 -05:00
Mike Reeves	9d31050907	roll back SOC changes	2025-02-27 11:32:59 -05:00
Mike Reeves	e930d1dec6	roll back SOC changes	2025-02-27 11:28:06 -05:00
Mike Reeves	1d3bae4a7a	Add additional entries for actions	2025-02-27 11:15:51 -05:00
Mike Reeves	d950e4ebb3	Add additional entries for actions	2025-02-27 11:11:56 -05:00
Mike Reeves	3ba82bd5a4	Fix actions	2025-02-27 11:04:47 -05:00
Josh Patterson	4e954c24f7	handle cpu, copper and sfp as options	2025-02-26 17:58:09 -05:00
Mike Reeves	6c00cdd726	Fix healthlink	2025-02-26 16:15:00 -05:00
Josh Patterson	52839e2a7d	implement regex for cpu and mem	2025-02-26 15:22:36 -05:00
Josh Patterson	1a9d5f151f	change description formatting. include full vm name in HYPERVISORS	2025-02-26 14:28:31 -05:00
Mike Reeves	8bc500e4da	soc	2025-02-26 14:16:42 -05:00
Mike Reeves	25217c3262	soc	2025-02-26 14:14:25 -05:00