6256 Commits

Author	SHA1	Message	Date
Doug Burks	9bf1c1e869	FIX: Avoid deprecation warning in Zeek file extraction script #9123	2022-11-11 16:27:11 -05:00
Peter Di Giorgio	1e96a0b6a6	Merge pull request #9122 from Security-Onion-Solutions/foxtrot ... Merge new protocol analyzers into dev	2022-11-11 12:53:57 -08:00
lock-wire	8dc08f66fd	Merge branch 'foxtrot' of https://github.com/Security-Onion-Solutions/securityonion into foxtrot ... merge remote	2022-11-11 12:18:02 -08:00
lock-wire	73b1e5949b	Add ecat, enip, cip, and opcua	2022-11-11 12:15:54 -08:00
Doug Burks	2d6a4d7c28	Merge pull request #9098 from Security-Onion-Solutions/feature/local-docs ... FEATURE: Improve local copy of docs in SOC #9097	2022-11-11 16:21:54 +00:00
Peter Di Giorgio	ae389ee487	Merge pull request #9121 from Security-Onion-Solutions/dev ... Update foxtrot from dev	2022-11-11 07:25:26 -08:00
lock-wire	85d30520ce	Add BSAP protocol	2022-11-11 07:22:55 -08:00
Jason Ertel	595a95fdf5	merge conflicts	2022-11-10 16:47:52 -05:00
Mike Reeves	4acd9f8816	Update soup	2022-11-09 10:10:52 -05:00
doug	84b2fc9c17	FEATURE: Improve local copy of docs in SOC #9097	2022-11-08 16:26:09 -05:00
Mike Reeves	a7417a7242	Update soup	2022-11-08 14:48:48 -05:00
Peter Di Giorgio	5532577fdd	Merge pull request #9071 from Security-Onion-Solutions/dev ... Merge Dev into Foxtrot	2022-11-04 08:01:29 -07:00
Peter Di Giorgio	5ebf470a86	Update zeek.bacnet_discovery	2022-11-03 22:27:04 -07:00
Peter Di Giorgio	4b39ccec6d	Update zeek.bacnet_property	2022-11-03 15:30:20 -07:00
Mike Reeves	c5bfe6ffdb	Update init.sls	2022-11-02 12:59:46 -04:00
Mike Reeves	4ac365e670	Update init.sls	2022-11-02 12:59:17 -04:00
Mike Reeves	ff1a903895	Update init.sls	2022-11-02 12:58:31 -04:00
Mike Reeves	388486ec08	Update init.sls	2022-11-02 10:06:13 -04:00
Mike Reeves	f74aee6a03	Update init.sls	2022-11-01 13:21:12 -04:00
Mike Reeves	16d8e9e5a0	Fix soup and perms updates	2022-11-01 09:05:26 -04:00
Mike Reeves	ee1f55361e	Add soup and perms updates	2022-10-31 16:33:38 -04:00
Mike Reeves	cb33464668	Merge pull request #9033 from Security-Onion-Solutions/strelkafix ... Add Filechecks	2022-10-31 15:49:40 -04:00
Mike Reeves	06ddae13b5	Update filecheck	2022-10-31 15:41:57 -04:00
Mike Reeves	16d3dead04	Update sensor-rotate.conf	2022-10-31 15:33:10 -04:00
Mike Reeves	f7043f3f62	Update init.sls	2022-10-31 15:25:38 -04:00
Mike Reeves	bf41f2984a	Update init.sls	2022-10-31 14:58:55 -04:00
Mike Reeves	86ca3602f3	Update init.sls	2022-10-31 14:44:01 -04:00
Mike Reeves	416c28fded	Update init.sls	2022-10-31 14:42:23 -04:00
Mike Reeves	297373877a	Update init.sls	2022-10-31 14:36:40 -04:00
Mike Reeves	db9b93a96c	Update init.sls	2022-10-31 14:35:02 -04:00
Mike Reeves	5635375d8d	Update init.sls	2022-10-31 14:30:11 -04:00
Mike Reeves	07e72e4013	Update filecheck	2022-10-31 13:47:49 -04:00
Mike Reeves	518d2aaa9c	Update filecheck.yaml	2022-10-31 13:45:00 -04:00
Mike Reeves	e93e2995b7	Update filecheck	2022-10-31 13:42:18 -04:00
Mike Reeves	d2eb61a830	Update filecheck.yaml	2022-10-31 13:41:45 -04:00
Mike Reeves	4c5a2c0610	Update filecheck	2022-10-31 13:36:42 -04:00
Mike Reeves	e9e7362005	Add Filechecks	2022-10-31 12:57:08 -04:00
Peter Di Giorgio	b97c822800	Add zeek.bacnet_discovery and zeek.bacnet_property	2022-10-27 15:40:52 -07:00
Peter Di Giorgio	71e3b2d1fb	Create zeek.bacnet	2022-10-27 15:40:07 -07:00
Peter Di Giorgio	c524442172	Merge pull request #9008 from Security-Onion-Solutions/master ... Synch Foxtrot with 2.3.181 Release	2022-10-26 13:10:01 -07:00
weslambert	a170c194c8	Remove JA3er references	2022-10-26 10:18:10 -04:00
Peter Di Giorgio	2b51d72585	Rename zeek.read_write_multiple_registers to zeek.modbus_read_write_multiple_registers	2022-10-25 17:20:01 -07:00
Wes	a91e3b601c	Remove JA3er since it is no longer a valid service	2022-10-25 18:48:37 +00:00
Wes	4940421297	Add PyYAML .whl files back since they were 'deleted' in the previous commit	2022-10-25 18:47:51 +00:00
Wes	58b4a8fbab	Change PyYAML .whl file name to comply with Joliet's 240-character limit	2022-10-25 18:47:02 +00:00
Mike Reeves	bd7e12f682	Merge pull request #8952 from Njinx/dev ... FEATURE: so-pcap-export can run without needing to be attached to a TTY	2022-10-25 14:38:48 -04:00
weslambert	0087768946	Revert "Change PyYAML .whl file name to comply with Joliet's 240-character limit/threshold"	2022-10-24 16:47:30 -04:00
Wes	1caac3f0b0	Add PyYAML .whl files back since they were 'deleted' in the previous commit.	2022-10-24 18:06:19 +00:00
Wes	54a5dd6cbd	Change name of PyYAML .whl file to remain under Joliet's 240-character limit/threshold	2022-10-24 18:05:15 +00:00
Peter Di Giorgio	7a60d0987c	Update zeek.conn to include client.oui	2022-10-21 13:02:01 -07:00