07b867df76
Merge pull request #13904 from Security-Onion-Solutions/cogburn/ignored-sids
...
Cogburn/ignored sids
2024-11-05 12:30:08 -07:00
52a144c052
Added Help Link to Annotation for IgnoredSidRanges
2024-11-05 12:11:17 -07:00
25d55feeef
More Detailed Description
2024-11-05 11:41:14 -07:00
5e48ccafce
Update Default Value
2024-11-05 11:11:34 -07:00
69dd35c30a
Add Option for Ignoring Ranges of SIDs in Suricata Integrity Check
2024-11-04 14:31:53 -07:00
d37a8d51fa
Merge pull request #13900 from Security-Onion-Solutions/saltrepo
...
setup use new salt repo
2024-11-04 13:05:58 -05:00
6e14f7b626
fix pub key name
2024-11-04 11:14:00 -05:00
e8ab7bce0c
connect
2024-11-04 10:49:30 -05:00
083c678400
new salt repo
2024-11-04 09:46:26 -05:00
7442ffc7d8
connect
2024-11-01 16:37:24 -04:00
25479ca71f
connect
2024-11-01 16:29:04 -04:00
c9f6b5206a
connect
2024-11-01 16:18:40 -04:00
755cfb4e13
connect
2024-11-01 15:47:33 -04:00
fb73517fc1
connect
2024-11-01 15:43:26 -04:00
825dbb36dd
connect
2024-11-01 15:37:59 -04:00
cd2e5bf2d0
rename role
2024-10-31 17:20:44 -04:00
520c9d8d51
rename role
2024-10-31 16:42:42 -04:00
370b117938
rename role
2024-10-31 16:39:45 -04:00
6ab05e7c05
Merge pull request #13890 from Security-Onion-Solutions/2.4/templatefix
...
timestamp fix
2024-10-31 10:59:45 -04:00
7896f951f3
timestamp fix
2024-10-31 10:24:58 -04:00
01932d873f
Merge pull request #13883 from Security-Onion-Solutions/2.4/lookuprev2
...
2.4/lookuprev2
2024-10-31 08:46:01 -04:00
84a8477c5d
Merge pull request #13887 from Security-Onion-Solutions/2.4/soupedite
...
rm eaintegration state file
2024-10-30 17:15:07 -04:00
6b468eaed3
rm eaintegration state file
2024-10-30 16:52:44 -04:00
a146153ee9
switch to json
2024-10-30 12:44:01 -04:00
c509dab5f1
Use socore user
2024-10-30 11:03:14 -04:00
1940901386
Merge pull request #13882 from Security-Onion-Solutions/ipmappingses
...
add so-ip-mappings index
2024-10-30 10:28:40 -04:00
36fc3bbd6d
add so-ip-mappings index
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2024-10-30 10:24:11 -04:00
5406a263d5
Add local custom template
2024-10-29 19:42:06 -04:00
3f3ac21f50
connect
2024-10-29 12:28:24 -04:00
11820a16f0
connect
2024-10-29 12:04:38 -04:00
ac359839e2
Merge pull request #13877 from Security-Onion-Solutions/2.4/lookuprev2
...
Initial support for local lookup
2024-10-29 11:22:39 -04:00
4c5099d429
Initial support for local lookup
2024-10-29 10:27:54 -04:00
1243c7588b
connect
2024-10-28 19:42:01 -04:00
624c4855c8
connect
2024-10-28 19:25:20 -04:00
12a76a9d35
connect
2024-10-28 19:11:26 -04:00
6a3e5415cf
Merge pull request #13832 from Security-Onion-Solutions/2.4/sigmapipelines
...
Add process and file creation mappings
2024-10-28 18:30:21 -04:00
2c4f65009c
Merge pull request #13873 from Security-Onion-Solutions/cogburn/tuning-notes
...
Tuning Notes
2024-10-28 15:37:06 -06:00
f3ca5b1c42
Remove OS-specific mappings
2024-10-28 09:19:51 -04:00
640f53d085
Cleanup
...
Fix indentation and trailing comma.
2024-10-24 17:05:36 -06:00
1aa9d87c5d
Corrected
...
Put the note on the right model this time.
2024-10-24 17:05:36 -06:00
e11c562022
Added Note to ES Mappings
2024-10-24 17:05:35 -06:00
a76a2d8e9f
Merge pull request #13800 from Security-Onion-Solutions/cogburn/detection-status-hunt
...
Cogburn/detection status hunt
2024-10-24 16:31:59 -06:00
d503c09ef2
connect
2024-10-24 15:45:18 -04:00
6ce52bf9ab
Specify Defaults for detectionEngineStatusQueries
...
Specify the defaults as an example to the user.
2024-10-24 13:11:49 -06:00
f67fcecc6e
Clean up StatusQueries String
2024-10-24 11:18:48 -06:00
b7c392a244
Corrected a misspelling
2024-10-24 11:18:48 -06:00
ad0b0a5e95
Refactor to String
...
To accomodate the config screen, the annotation now specifies it as a multiline string with a yaml syntax. The user can edit the yaml to add or remove queries. The UI will parse the YAML before use.
Also updated the IntegrityFailure queries to specify table columns more relevant to a sync failure than the default ones.
2024-10-24 11:18:47 -06:00
c77b0afd8e
Move to Client/Detections
...
Added a basic annotation.
2024-10-24 11:18:47 -06:00
04ebe4efea
Array to Dictionary
2024-10-24 11:18:46 -06:00
cbb4d6846f
Detection Engine Status Queries
...
A few for testing
2024-10-24 11:18:45 -06:00
coreyogburn
Corey Ogburn
Josh Patterson
Jason Ertel
Josh Brower
reyesj2