6483 Commits

Author	SHA1	Message	Date
Mike Reeves	f6b9dec2ae	Add supersoup mode	2023-08-02 09:45:29 -04:00
Doug Burks	3d687f0404	Update soup for 2.3.260	2023-06-16 12:55:52 -04:00
Wes	ffc91393e7	Update pulsedive dependencies	2023-06-15 22:14:41 +00:00
Wes	d0ab2db312	Update dependencies	2023-06-15 21:03:40 +00:00
Wes	ef8eece53b	Update dependencies	2023-06-05 13:45:44 +00:00
weslambert	660a50c08d	Update whoisit to 2.7.0	2023-06-03 08:53:02 -04:00
Wes	5d326a3c32	Update dependencies	2023-06-01 16:26:04 +00:00
weslambert	33134b1814	Update requests and whist	2023-06-01 12:03:58 -04:00
weslambert	873632ec4f	Remove ScanRuby scanner	2023-05-25 17:23:44 -04:00
Jason Ertel	cb0c078955	use the same requests version that's already packaged with the analyzer	2023-05-19 23:56:39 -04:00
Jason Ertel	97b2ae8d82	fix lib dependency issue with whoisit	2023-05-19 14:23:12 -04:00
Doug Burks	43f73abd4d	Update so-kibana-config-load	2023-05-18 15:18:27 -04:00
Doug Burks	51a8684850	Update config_saved_objects.ndjson	2023-05-18 15:17:36 -04:00
Doug Burks	0f562279ee	Update soup for 2.3.250	2023-05-11 07:26:58 -04:00
weslambert	834f45c0f2	Merge pull request #10286 from Security-Onion-Solutions/fix/strelka_ignore_yara_rules ... Ignore "expl_outlook_cve_2023_23397.yar" and "gen_mal_3cx_compromise_mar23.yar" since they are causing problems with YARA compilation	2023-05-08 11:58:11 -04:00
weslambert	d4cf9efeca	Merge pull request #10303 from Security-Onion-Solutions/fix/kibana_pivot_to_pcap_url ... Surround _id field in double quotes to prevent errors associated with values beginning with a hyphen	2023-05-08 11:55:22 -04:00
Wes	ed19c139ea	Surround _id field in double quotes to prevent errors associated with values beginning with a hyphen	2023-05-08 13:44:36 +00:00
Doug Burks	af85c6261b	FIX: Improve soup's local file modification logic #8972	2023-05-08 09:41:26 -04:00
weslambert	e9f58269cd	Ignore "expl_outlook_cve_2023_23397.yar" and "gen_mal_3cx_compromise_mar23.yar" since they are causing problems with YARA compilation	2023-05-04 16:13:59 -04:00
Jason Ertel	71ab8ddf1d	soup update for 2.3.240	2023-04-25 09:42:14 -04:00
Doug Burks	272b345892	FIX: Suricata DNS A and CNAME parsing #10117	2023-04-13 10:52:37 -04:00
Doug Burks	aa2e18fca9	Update soup for 2.3.230	2023-03-24 12:31:51 -04:00
Mike Reeves	d5e48a7eca	Update init.sls	2023-03-01 14:50:55 -05:00
Wes	6e0891e586	Update Curator configuration to align with requirements for Curator 8.0.x	2023-03-01 15:16:52 +00:00
Josh Brower	6e637f559c	Remove unsupported config option	2023-02-21 16:35:11 -05:00
Doug Burks	002403055d	UPGRADE: Elastic 8.6.2 #9804	2023-02-17 07:04:57 -05:00
Doug Burks	b80b80e825	UPGRADE: Elastic 8.6.2 #9804	2023-02-17 07:03:47 -05:00
Doug Burks	69f889dbd9	Update soup for 2.3.220	2023-02-14 08:42:35 -05:00
Josh Brower	b7e97eceb3	Fix link for FleetDM standalone nodes	2023-02-09 14:08:48 -05:00
Josh Brower	09bebf08d6	Fix FleetDM SOC Link	2023-02-09 09:10:50 -05:00
Josh Brower	4dd54cea6c	Use correct variable name	2023-02-08 16:58:47 -05:00
Josh Brower	e07f4bd0ed	Workaround for FleetDM PW Req	2023-02-08 13:03:33 -05:00
weslambert	2dced35800	Add 'configured_vulns_ext_vars.yar' to exclusion list	2023-02-01 14:24:20 -05:00
m0duspwnens	d43346a084	hold python mysql	2023-02-01 14:11:27 -05:00
m0duspwnens	0c4a27d120	lock python36-mysql-1.3.12-2.el7 version	2023-02-01 12:33:19 -05:00
Doug Burks	d12aa0ed56	Move host.domain table to end of DHCP tables	2023-01-31 07:14:18 -05:00
Doug Burks	17bcf50ccb	update Suricata DHCP parser to set server.address	2023-01-30 15:57:47 -05:00
Doug Burks	a96825f43e	Update soup for 2.3.210	2023-01-30 09:16:00 -05:00
Doug Burks	0ff519ed2f	Update to Elastic 8.6.1	2023-01-26 16:09:13 -05:00
Doug Burks	127533492f	Update to Elastic 8.6.1	2023-01-26 16:08:15 -05:00
Doug Burks	672cab858e	Continue even if thehive errors	2023-01-12 12:48:16 -05:00
Josh Brower	b54f2e8752	Fix mispelling	2023-01-11 10:59:50 -05:00
Josh Brower	1470e120ef	Merge pull request #9540 from Security-Onion-Solutions/idhskins ... bug fix - idh skins	2023-01-09 15:49:04 -05:00
Josh Brower	2c747ec837	make sure dir is created	2023-01-09 13:46:10 -05:00
Josh Brower	8cb5cd5fee	Merge pull request #9214 from Security-Onion-Solutions/idhskins ... Custom IDH HTTP Skins	2023-01-06 15:14:14 -05:00
Doug Burks	a4bae77973	Merge pull request #9271 from Njinx/dev ... so-status runs some code before checking for root privileges	2023-01-04 16:05:34 -05:00
doug	7dcdcc18a5	fix so-common references	2023-01-04 14:28:47 -05:00
doug	3482df5ee1	fix jinja whitespace	2023-01-04 13:33:51 -05:00
doug	a67a254edc	update Copyright year	2023-01-04 12:44:18 -05:00
Doug Burks	e3d32c7871	Improve default sysmon fields and add new network_connection fields	2023-01-04 07:38:18 -05:00