9064 Commits

Author	SHA1	Message	Date
Doug Burks	fff4d20e39	Update soc_suricata.yaml	2024-03-20 16:03:45 -04:00
Doug Burks	d2fb067110	FIX: Annotations for BPF and Suricata PCAP #12626	2024-03-20 15:57:32 -04:00
Doug Burks	876690a9f6	FIX: Annotations for BPF and Suricata PCAP #12626	2024-03-20 15:49:46 -04:00
Mike Reeves	fd835f6394	Update soc_suricata.yaml	2024-03-14 11:36:45 -04:00
Mike Reeves	284e0d8435	Update soc_suricata.yaml	2024-03-14 11:33:47 -04:00
Jason Ertel	844cfe55cd	handle airgap when detections not enabled	2024-03-13 20:52:17 -04:00
Jason Ertel	927fe9039d	handle airgap when detections not enabled	2024-03-13 20:50:03 -04:00
Jason Ertel	275a678fa1	removed unused property	2024-03-13 13:49:44 -04:00
Josh Patterson	b9702d02db	Update init.sls	2024-03-13 11:24:26 -04:00
Josh Patterson	292ab0e378	Merge pull request #12577 from Security-Onion-Solutions/jppsocerino ... remove modules if detections disabled	2024-03-13 10:30:00 -04:00
m0duspwnens	1a829190ac	remove modules if detections disabled	2024-03-13 09:46:44 -04:00
DefensiveDepth	06013e2c6f	Gen packages post-SOUP	2024-03-13 07:23:43 -04:00
Mike Reeves	3e0fb3f8bb	Update so-saltstack-update	2024-03-12 10:18:27 -04:00
Mike Reeves	5deebe07d8	Merge pull request #12564 from Security-Onion-Solutions/TOoSmOotH-patch-8 ... Update soc_suricata.yaml	2024-03-12 09:24:56 -04:00
Mike Reeves	72acb11925	Update soc_suricata.yaml	2024-03-11 19:04:51 -04:00
DefensiveDepth	0f41f07dc9	Merge remote-tracking branch 'origin/2.4/dev' into 2.4/detections-defaults	2024-03-11 16:41:26 -04:00
Josh Brower	47ab1f5b95	Merge pull request #12563 from Security-Onion-Solutions/kilo ... Add yara update back	2024-03-11 16:39:31 -04:00
Josh Patterson	b7f058a8ca	Merge pull request #12561 from Security-Onion-Solutions/jppnocap ... transitional pcap	2024-03-11 15:57:16 -04:00
DefensiveDepth	61a183b7fc	Add regex defaults	2024-03-11 15:55:39 -04:00
m0duspwnens	ba32b3e6e9	fix bpf for transition	2024-03-11 14:07:45 -04:00
m0duspwnens	907cf9f992	transition pcap	2024-03-11 12:20:28 -04:00
Josh Patterson	4355d5b659	Merge pull request #12544 from Security-Onion-Solutions/jertel/status ... pcap improvements	2024-03-11 10:29:33 -04:00
Jorge Reyes	2ca96c7f4c	Merge pull request #12555 from Security-Onion-Solutions/reyesj2-patch-osc ... Create local salt directory	2024-03-11 09:40:20 -04:00
reyesj2	a8403c63c7	Create local salt dir for stig ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2024-03-11 09:35:54 -04:00
weslambert	34d5954e16	Fix indent	2024-03-11 09:12:05 -04:00
Jorge Reyes	f4725bf6d4	Merge pull request #12553 from Security-Onion-Solutions/reyesj2-patch-osc ... Run scan against default scap security guide so that resulting score is accurate	2024-03-11 07:52:07 -04:00
Doug Burks	a892352b61	Update soc_pcap.yaml	2024-03-08 16:43:29 -05:00
Jason Ertel	a55e04e64a	pcap improvements	2024-03-08 15:48:53 -05:00
Josh Brower	4a9e8265ce	Merge remote-tracking branch 'origin/2.4/dev' into kilo	2024-03-08 14:48:04 -05:00
Corey Ogburn	6f05c3976b	Updated RulesRepo for New Strelka Structure	2024-03-08 11:29:46 -07:00
Doug Burks	b6b6fc45e7	Merge pull request #12527 from Security-Onion-Solutions/TOoSmOotH-patch-7 ... Fix Space Free for Steno	2024-03-08 12:40:15 -05:00
Doug Burks	6680e023e4	Update soc_pcap.yaml	2024-03-08 12:16:59 -05:00
Wes	e8ae609012	Add Strelka rules watch back	2024-03-08 16:27:17 +00:00
Wes	fc66a54902	Add Strelka download and update scripts back	2024-03-08 16:26:14 +00:00
Wes	4e32935991	Add Strelka config back	2024-03-08 16:24:37 +00:00
Josh Patterson	7ec887a327	Merge pull request #12537 from Security-Onion-Solutions/issue/12535 ... allow managersearch to receiver redis and 5644	2024-03-08 10:13:27 -05:00
m0duspwnens	3eb6fe2df9	allow managersearch to receiver redis and 5644	2024-03-08 09:52:12 -05:00
Mike Reeves	06257b9c4a	Update so-minion	2024-03-07 14:32:46 -05:00
Jason Ertel	40574982e4	unswap files	2024-03-07 14:25:43 -05:00
Jason Ertel	fffef9b621	gracefully handle status check failure on ubuntu	2024-03-07 12:31:51 -05:00
Wes	005930f7fd	Add error.message mapping for system.syslog	2024-03-07 15:41:23 +00:00
Mike Reeves	b5f1733e97	Merge pull request #12513 from Security-Onion-Solutions/newsuripcap ... Change Factoring for so-minion pcap disk space	2024-03-07 10:14:34 -05:00
m0duspwnens	70f3ce0536	change how maxfiles is calculated	2024-03-06 17:32:06 -05:00
reyesj2	17a75d5bd2	Run stig post remediate scan against default ol9 scap-security-guide. ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2024-03-06 17:19:01 -05:00
m0duspwnens	583227290f	fix max-files calc	2024-03-06 15:18:22 -05:00
m0duspwnens	cf232534ca	move suricata.pcap to suricata.config.outputs.pcap-log	2024-03-06 14:42:07 -05:00
Mike Reeves	7f1e786e3d	Consolidate PCAP settings	2024-03-06 12:56:09 -05:00
Jason Ertel	8f36a8a4b6	Merge pull request #12514 from Security-Onion-Solutions/jertel/annotations ... detections annotations	2024-03-06 11:10:21 -05:00
Jason Ertel	1cbac11fae	detections annotations	2024-03-06 11:08:03 -05:00
Mike Reeves	ad12093429	Fix percent calc	2024-03-06 11:05:06 -05:00