Mike Reeves 4696152f78 Add hunt queries

2025-02-27 12:31:51 -05:00

..

_beacons

…

_modules

…

backup

connect work

2024-10-16 13:44:01 -04:00

bpf

FIX: Annotations for BPF and Suricata PCAP #12626

2024-03-20 15:49:46 -04:00

ca

fix x509 mine_function

2024-06-18 12:33:33 -04:00

common

default capinfos to use start/end time arg

2025-02-25 21:47:56 -06:00

cron

…

curator

only run the file.absent state if there are files to delete

2023-12-21 09:36:47 -05:00

desktop

add putty to sod packages.sls

2024-02-08 22:05:37 -05:00

docker

Update defaults.yaml

2024-12-10 17:19:15 -05:00

docker_clean

…

elastalert

elastalert

2025-02-26 13:17:08 -05:00

elastic-fleet-package-registry

actions

2025-02-26 13:34:32 -05:00

elasticagent

actions

2025-02-26 13:34:32 -05:00

elasticfleet

actions

2025-02-26 13:34:32 -05:00

elasticsearch

component template missing metadata field

2025-02-24 10:24:11 -06:00

firewall

connect work

2024-10-16 13:44:01 -04:00

global

globals

2025-02-26 13:10:57 -05:00

healthcheck

…

host

…

hydra

annotation/config updates

2025-02-25 17:00:41 -05:00

idh

Clarify enabled settings

2024-09-16 10:12:54 -04:00

idstools

Clarify enabled settings

2024-09-16 10:41:01 -04:00

influxdb

remove colon to avoid yaml parsing problems

2024-09-16 15:30:14 -04:00

kafka

searchnode logstash-kafka cert generation

2024-07-20 11:31:33 -04:00

kibana

ES 8.17.2

2025-02-20 14:20:09 -06:00

kratos

ca download; ignore shard errors on startup; clarify oidc id

2025-02-05 15:04:04 -05:00

logrotate

connect work

2024-10-16 13:44:01 -04:00

logstash

fix defining custom logstash pipelines when kafka is enabled

2025-02-06 22:19:24 -06:00

manager

run elasticsearch state, right before completing soup to ensure templates for optional integrations are loaded

2025-02-24 09:02:56 -06:00

motd

FIX: Update MOTD #13317

2024-07-09 10:06:16 -04:00

nginx

use consistent ciphers across listeners

2025-02-18 12:17:50 -05:00

ntp

…

orch

add copyright

2024-05-08 10:14:08 -04:00

patch

remove colon to avoid yaml parsing problems

2024-09-16 15:30:14 -04:00

pcap

Clarify enabled settings

2024-09-16 10:05:17 -04:00

pipeline

…

podman

docker ips changes

2023-07-21 16:06:52 -04:00

reactor

Remove unused kafka reactor

2024-06-06 08:59:17 -04:00

redis

Clarify enabled settings

2024-09-16 10:14:52 -04:00

registry

remove colon to avoid yaml parsing problems

2024-09-16 15:30:14 -04:00

repo/client

Modify yum.conf.jinja to include localpkg_gpgcheck rather than modifying it with so-stig

2024-01-15 21:30:31 -05:00

salt

support installing specified version for rhel variants. remove bootstrap -x python3 since not needed

2024-11-14 09:07:41 -05:00

sensor

remove space

2024-06-05 08:58:46 -04:00

sensoroni

sensoroni

2025-02-26 13:39:18 -05:00

setup

…

soc

Add hunt queries

2025-02-27 12:31:51 -05:00

ssl

split Kafka ssl from ssl/init. Certs won't be generated until Kafka is enabled. Also runs some clean up for old Kafka certs

2024-07-10 11:32:43 -04:00

stig

Clarify enabled settings

2024-09-16 10:05:17 -04:00

strelka

replace: False to remove state warning

2024-10-24 10:33:16 -04:00

suricata

Clarify enabled settings

2024-09-16 10:41:01 -04:00

systemd

…

tcpreplay

…

telegraf

remove colon to avoid yaml parsing problems

2024-09-16 15:30:14 -04:00

utility

…

vars

connect

2024-10-23 16:49:02 -04:00

versionlock

fix HELD for debian families

2024-10-23 09:36:17 -04:00

zeek

Merge pull request #14001 from Security-Onion-Solutions/reyesj2/zeekvpn

2024-12-06 12:06:02 -06:00

allowed_states.map.jinja

connect work

2024-10-16 13:44:01 -04:00

schedule.sls

…

top.sls

Merge branch '2.4/dev' into jertel/wip

2024-11-11 10:06:44 -05:00