coreyogburn
|
f35f6bd4c8
|
Merge pull request #13154 from Security-Onion-Solutions/cogburn/soc-proxy
SOC Proxy Setting
|
2024-06-06 14:03:16 -06:00 |
|
Mike Reeves
|
d5cfef94a3
|
Merge pull request #13156 from Security-Onion-Solutions/TOoSmOotH-patch-3
|
2024-06-06 16:01:22 -04:00 |
|
Mike Reeves
|
f37f5ba97b
|
Update soc_suricata.yaml
|
2024-06-06 15:57:58 -04:00 |
|
Corey Ogburn
|
42818a9950
|
Remove proxy from SOC defaults
|
2024-06-06 13:28:07 -06:00 |
|
Corey Ogburn
|
e85c3e5b27
|
SOC Proxy Setting
The so_proxy value we build during install is now copied to SOC's config.
|
2024-06-06 11:55:27 -06:00 |
|
Jason Ertel
|
6d31cd2a41
|
Merge pull request #13150 from Security-Onion-Solutions/jertel/yaml
add ability to retrieve yaml values via so-yaml.py; improve so-minion id matching
|
2024-06-06 12:09:03 -04:00 |
|
Jason Ertel
|
5600fed9c4
|
add ability to retrieve yaml values via so-yaml.py; improve so-minion id matching
|
2024-06-06 11:56:07 -04:00 |
|
Josh Patterson
|
33a2c5dcd8
|
Merge pull request #13141 from Security-Onion-Solutions/sotcprp
move so-tcpreplay from common state to sensor state
|
2024-06-05 09:49:39 -04:00 |
|
m0duspwnens
|
f6a8a21f94
|
remove space
|
2024-06-05 08:58:46 -04:00 |
|
m0duspwnens
|
ff5773c837
|
move so-tcpreplay back to common. return empty string if no sensor.interface pillar
|
2024-06-05 08:56:32 -04:00 |
|
m0duspwnens
|
66f8084916
|
Merge remote-tracking branch 'origin/2.4/dev' into sotcprp
|
2024-06-05 08:32:54 -04:00 |
|
m0duspwnens
|
a2467d0418
|
move so-tcpreplay to sensor state
|
2024-06-05 08:24:57 -04:00 |
|
Josh Patterson
|
56a16539ae
|
Merge pull request #13134 from Security-Onion-Solutions/sotcprp
so-tcpreplay now runs if manager is offline
|
2024-06-04 10:43:33 -04:00 |
|
m0duspwnens
|
c0b2cf7388
|
add the curlys
|
2024-06-04 10:28:21 -04:00 |
|
Josh Patterson
|
ef3a52468f
|
Merge pull request #13129 from Security-Onion-Solutions/salt3006.8
salt 3006.6
|
2024-06-03 15:29:19 -04:00 |
|
m0duspwnens
|
c88b731793
|
revert to 3006.6
|
2024-06-03 15:27:08 -04:00 |
|
weslambert
|
964fef1aab
|
Merge pull request #13117 from Security-Onion-Solutions/fix/items_and_lists
Add templates for .items and .lists indices
|
2024-05-31 16:34:29 -04:00 |
|
Wes
|
a8c231ad8c
|
Add component templates
|
2024-05-31 17:47:01 +00:00 |
|
Wes
|
f396247838
|
Add index templates and lifecycle policies
|
2024-05-31 17:46:19 +00:00 |
|
coreyogburn
|
37a928b065
|
Merge pull request #13107 from Security-Onion-Solutions/cogburn/detection-templates
Added TemplateDetections To Detection ClientParams
|
2024-05-30 16:26:17 -06:00 |
|
Corey Ogburn
|
85c269e697
|
Added TemplateDetections To Detection ClientParams
The UI can now insert templates when you select a Detection language. These are those templates, annotated.
|
2024-05-30 15:59:03 -06:00 |
|
m0duspwnens
|
6e70268ab9
|
Merge remote-tracking branch 'origin/2.4/dev' into sotcprp
|
2024-05-30 16:34:37 -04:00 |
|
Josh Patterson
|
fb8929ea37
|
Merge pull request #13103 from Security-Onion-Solutions/salt3006.8
Salt3006.8
|
2024-05-30 16:32:05 -04:00 |
|
weslambert
|
5d9c0dd8b5
|
Merge pull request #13101 from Security-Onion-Solutions/fix/separate_suricata
Separate Suricata alerts into a specific data stream
|
2024-05-30 16:30:55 -04:00 |
|
m0duspwnens
|
debf093c54
|
Merge remote-tracking branch 'origin/2.4/dev' into salt3006.8
|
2024-05-30 15:58:10 -04:00 |
|
m0duspwnens
|
7702f05756
|
upgrade salt 3006.8. soup for 2.4.80
|
2024-05-30 15:00:32 -04:00 |
|
Wes
|
2c635bce62
|
Set index for Suricata alerts
|
2024-05-30 17:02:31 +00:00 |
|
Wes
|
e831354401
|
Add Suricata alerts setting for configuration
|
2024-05-30 17:00:11 +00:00 |
|
Wes
|
55c5ea5c4c
|
Add template for Suricata alerts
|
2024-05-30 16:58:56 +00:00 |
|
Mike Reeves
|
12762e08ef
|
Merge pull request #13093 from Security-Onion-Solutions/TOoSmOotH-patch-1
Update VERSION
|
2024-05-29 16:54:31 -04:00 |
|
Mike Reeves
|
62bdb2627a
|
Update VERSION
|
2024-05-29 16:53:27 -04:00 |
|
Mike Reeves
|
88651219a6
|
Merge pull request #13090 from Security-Onion-Solutions/2.4.70
2.4.70
|
2024-05-29 14:54:16 -04:00 |
|
Mike Reeves
|
a655f8dc04
|
2.4.70
|
2024-05-29 14:52:47 -04:00 |
|
Mike Reeves
|
e98b8566c9
|
2.4.70
|
2024-05-29 14:50:22 -04:00 |
|
Josh Brower
|
ef10794e3b
|
Merge pull request #13089 from Security-Onion-Solutions/2.4/realert
fix rsync
|
2024-05-29 11:12:45 -04:00 |
|
DefensiveDepth
|
0d034e7adc
|
fix rsync
|
2024-05-29 10:55:56 -04:00 |
|
Josh Brower
|
ca49943a7f
|
Merge pull request #13085 from Security-Onion-Solutions/2.4/soupchange
Check to see if local exists
|
2024-05-28 10:25:46 -04:00 |
|
DefensiveDepth
|
ee4ca0d7a2
|
Check to see if local exists
|
2024-05-28 10:24:09 -04:00 |
|
Josh Brower
|
0d634f3b8e
|
Merge pull request #13084 from Security-Onion-Solutions/2.4/soupchange
Fix fi
|
2024-05-28 10:05:33 -04:00 |
|
DefensiveDepth
|
f68ac23f0e
|
Fix fi
Signed-off-by: DefensiveDepth <Josh@defensivedepth.com>
|
2024-05-28 10:03:31 -04:00 |
|
Josh Brower
|
825c4a9adb
|
Merge pull request #13083 from Security-Onion-Solutions/2.4/soupchange
Backup .yml files too
|
2024-05-28 09:45:53 -04:00 |
|
DefensiveDepth
|
2a2b86ebe6
|
Dont overwrite
|
2024-05-28 09:43:45 -04:00 |
|
DefensiveDepth
|
74dfc25376
|
backup local rules
|
2024-05-28 09:29:10 -04:00 |
|
DefensiveDepth
|
81ee60e658
|
Backup .yml files too
|
2024-05-28 06:42:18 -04:00 |
|
Josh Brower
|
49fd84a3a7
|
Merge pull request #13081 from Security-Onion-Solutions/2.4/soupchange
Dont bail - just wait for enter
|
2024-05-24 16:28:40 -04:00 |
|
DefensiveDepth
|
58b565558d
|
Dont bail - just wait for enter
|
2024-05-24 16:21:59 -04:00 |
|
Josh Brower
|
185fb38b2d
|
Merge pull request #13079 from Security-Onion-Solutions/2.4/sigmapipelineupdates
Add IDH mappings
|
2024-05-24 14:48:22 -04:00 |
|
DefensiveDepth
|
550b3ee92d
|
Add IDH mappings
|
2024-05-24 14:46:24 -04:00 |
|
Josh Brower
|
29a87fd166
|
Merge pull request #13078 from Security-Onion-Solutions/2.4/socdefaultsdet
Add instructions for sigma and yara repos
|
2024-05-24 13:02:01 -04:00 |
|
DefensiveDepth
|
f90d40b471
|
Fix typo
|
2024-05-24 12:56:17 -04:00 |
|