Jason Ertel
|
35e47c8c3e
|
Add support for analyzers in airgapped environments
|
2022-05-10 16:51:00 -04:00 |
|
weslambert
|
7f797a11f8
|
Merge pull request #7924 from Security-Onion-Solutions/analyzer-docs
Update analyzer docs with information about analyzers that require au…
|
2022-05-10 09:40:50 -04:00 |
|
Jason Ertel
|
91a7f25d3a
|
Corrected brand name capitalization
|
2022-05-10 09:39:19 -04:00 |
|
weslambert
|
34d57c386b
|
Update analyzer docs with information about analyzers that require authentication
|
2022-05-10 09:32:18 -04:00 |
|
weslambert
|
000e813fbb
|
Merge pull request #7921 from Security-Onion-Solutions/fix/analyzer-packages
Update analyzer packages to those downloaded by Alpine and add additional build script option
|
2022-05-09 16:43:31 -04:00 |
|
Wes Lambert
|
555ca2e277
|
Update analyzer build/testing script to download necessary Python packages
|
2022-05-09 20:06:39 +00:00 |
|
Wes Lambert
|
32adba6141
|
Update analyzer packages with those built from native (Alpine) Docker image
|
2022-05-09 20:04:41 +00:00 |
|
Jason Ertel
|
e19635e44a
|
Merge pull request #7920 from Security-Onion-Solutions/kilo
Disable MRU queries on dashboards
|
2022-05-09 15:08:55 -04:00 |
|
Jason Ertel
|
31c04aabdd
|
Disable MRU queries on dashboards
|
2022-05-09 15:06:43 -04:00 |
|
Jason Ertel
|
dc209a37cd
|
Merge pull request #7916 from Security-Onion-Solutions/kilo
Disable actions on dashboards group-by tables
|
2022-05-09 11:52:22 -04:00 |
|
Jason Ertel
|
3f35dc54d2
|
Disable actions on dashboards group-by tables
|
2022-05-09 11:44:39 -04:00 |
|
Josh Brower
|
8e368bdebe
|
Merge in upstream dev
|
2022-05-06 20:01:07 -04:00 |
|
Jason Ertel
|
0e64a9e5c3
|
Merge pull request #7912 from Security-Onion-Solutions/kilo
Add dashboard ref to soc.json
|
2022-05-06 15:18:05 -04:00 |
|
Jason Ertel
|
0786191fc9
|
Add dashboard ref to soc.json
|
2022-05-06 15:16:27 -04:00 |
|
Jason Ertel
|
60763c38db
|
Merge pull request #7911 from Security-Onion-Solutions/kilo
Analyzers + Dashboards
|
2022-05-06 13:50:54 -04:00 |
|
weslambert
|
9800f59ed7
|
Add Urlscan to observable support matrix
|
2022-05-06 13:11:43 -04:00 |
|
Wes Lambert
|
ccac71f649
|
Fix formatting/whitespace
|
2022-05-06 17:08:40 +00:00 |
|
Wes Lambert
|
1990ba0cf0
|
Fix formatting/whitespace
|
2022-05-06 17:08:33 +00:00 |
|
Wes Lambert
|
8ff5778569
|
Add Urlscan analyzer and tests
|
2022-05-06 17:01:06 +00:00 |
|
Jason Ertel
|
bee4cf4c52
|
Fix typo in analyzer desc
|
2022-05-06 09:20:03 -04:00 |
|
Jason Ertel
|
105c95909c
|
Dashboard queries
|
2022-05-04 19:32:06 -04:00 |
|
Jason Ertel
|
890bcd58f9
|
Merge branch 'dev' into kilo
|
2022-05-04 19:25:08 -04:00 |
|
weslambert
|
a96c665d04
|
Change test name for EmailRep
|
2022-05-03 14:13:25 -04:00 |
|
weslambert
|
f3a91d9fcd
|
Add EmailRep analyzer to observable support matrix
|
2022-05-03 10:10:57 -04:00 |
|
Wes Lambert
|
5a9acb3857
|
Add EmailRep analyzer and tests
|
2022-05-03 14:06:32 +00:00 |
|
Wes Lambert
|
8b5666b238
|
Ensure API key is used
|
2022-05-03 12:48:06 +00:00 |
|
weslambert
|
efb229cfcb
|
Update to match configuration in analyzer dir
|
2022-05-02 16:35:21 -04:00 |
|
weslambert
|
2fcb2b081d
|
Update allowed complexity to 12
|
2022-05-02 16:14:43 -04:00 |
|
weslambert
|
25f17a5efd
|
Update allowed complexity to 11
|
2022-04-29 09:42:57 -04:00 |
|
weslambert
|
66b4fe9f58
|
Add additional information around URI and User Agent
|
2022-04-28 17:14:36 -04:00 |
|
Wes Lambert
|
c001708707
|
Add Pulsedive analyzer and tests
|
2022-04-28 20:56:03 +00:00 |
|
weslambert
|
4edd729596
|
Add initial supported observable matrix/table
|
2022-04-27 08:58:34 -04:00 |
|
Wes Lambert
|
76f183b112
|
Add Greynoise analyzer and tests
|
2022-04-26 17:25:35 +00:00 |
|
Wes Lambert
|
bd63753d80
|
Update analyzer name/description
|
2022-04-25 19:27:10 +00:00 |
|
Wes Lambert
|
15fcaa7030
|
Add localfile analyzer and tests
|
2022-04-25 19:23:35 +00:00 |
|
Jason Ertel
|
71a86b0a3c
|
Merge pull request #7856 from Security-Onion-Solutions/bumpver
Bump version
|
2022-04-25 13:01:19 -04:00 |
|
Jason Ertel
|
e2145720bd
|
Bump version
|
2022-04-25 12:10:29 -04:00 |
|
Mike Reeves
|
b4aa59c619
|
Merge pull request #7853 from Security-Onion-Solutions/dev
2.3.120
2.3.120
|
2022-04-25 11:33:05 -04:00 |
|
Mike Reeves
|
6975153cf4
|
Merge pull request #7852 from Security-Onion-Solutions/2.3.120
2.3.120
|
2022-04-25 08:59:52 -04:00 |
|
Mike Reeves
|
0935f51667
|
2.3.120
|
2022-04-25 08:57:35 -04:00 |
|
Mike Reeves
|
f92d65737b
|
2.3.120
|
2022-04-25 08:53:04 -04:00 |
|
Josh Patterson
|
8f5967911b
|
Merge pull request #7847 from Security-Onion-Solutions/m0duspwnens-patch-1
add eval
|
2022-04-22 16:06:01 -04:00 |
|
Josh Patterson
|
80eb31368a
|
add eval
|
2022-04-22 16:04:29 -04:00 |
|
Jason Ertel
|
d8fdf2b701
|
Merge branch 'dev' into kilo
|
2022-04-22 15:11:24 -04:00 |
|
Jason Ertel
|
459d388614
|
Only override nameservers if the first nameserver given is non empty
|
2022-04-22 15:08:56 -04:00 |
|
Wes Lambert
|
fbf6e64e67
|
Add initial OTX analyzer and tests
|
2022-04-22 17:13:40 +00:00 |
|
weslambert
|
677db7c563
|
Merge pull request #7841 from Security-Onion-Solutions/weslambert-patch-2
Update shard count for Zeek in setup
|
2022-04-21 17:27:57 -04:00 |
|
weslambert
|
1bb216954c
|
Merge pull request #7840 from Security-Onion-Solutions/weslambert-patch-1
Update shards for Zeek
|
2022-04-21 17:26:57 -04:00 |
|
weslambert
|
c81988ab00
|
Update shard count for Zeek in setup
|
2022-04-21 17:26:30 -04:00 |
|
weslambert
|
542db5b7f5
|
Update defaults.yaml
|
2022-04-21 17:24:24 -04:00 |
|