Mike Reeves 6809497730 Add SOC UI toggle for JA4+ fingerprinting in Zeek ...

JA4 (BSD licensed) remains always enabled, but JA4+ variants (JA4S,
JA4D, JA4H, JA4L, JA4SSH, JA4T, JA4TS, JA4X) require a FoxIO license
and are now toggleable via the SOC UI. The toggle includes a license
agreement warning and defaults to disabled.

2026-03-17 09:35:31 -04:00

..

_beacons

remove unneeded files

2025-05-30 12:50:59 -04:00

_modules

ui notification of nsm volume creation failure and cleanup of vm inventory in soc grid config for hypervisor

2025-10-10 17:07:02 -04:00

_runners

merge 2.4/dev

2025-12-02 11:16:08 -06:00

backup

exclude so_agent_installer dir from config backups

2025-07-29 15:31:53 -05:00

bpf

remove steno

2026-03-06 15:45:36 -05:00

ca

create dir if nonexistent

2026-01-20 14:30:11 -05:00

common

set container ulimits to default

2026-03-11 14:46:29 -04:00

cron

…

curator

…

desktop

the great ssl refactor

2025-12-11 17:30:06 -05:00

docker

remove steno

2026-03-06 15:45:36 -05:00

docker_clean

…

elastalert

update expected version for elastalert state

2025-12-17 06:53:08 -06:00

elastic-fleet-package-registry

Some things I thought were bools are not bools

2025-03-05 14:53:29 -05:00

elasticagent

remove redis log collection on heavynodes (disabled)

2026-01-27 16:28:06 -06:00

elasticfleet

fix suricata filestream dataset

2026-02-24 12:46:20 -06:00

elasticsearch

add file.bytes.missing field mapping

2026-02-24 14:32:01 -06:00

firewall

fix role check

2025-09-12 14:09:30 -04:00

global

remove steno

2026-03-06 15:45:36 -05:00

healthcheck

…

host

…

hydra

fix hydra health check

2026-03-17 07:50:40 -04:00

hypervisor

merge 2.4/dev

2025-12-02 11:16:08 -06:00

idh

update file ownership to socore

2025-07-18 09:35:51 -05:00

influxdb

remove steno

2026-03-06 15:45:36 -05:00

kafka

fix kafka state

2026-01-21 12:47:58 -06:00

kibana

prepare for nextgen docs

2026-02-27 13:09:55 -05:00

kratos

Merge branch '2.4/dev' of github.com:Security-Onion-Solutions/securityonion into reyesj2/elastic9-autosoup

2026-01-07 10:30:45 -06:00

libvirt

create libvirt volumes directory

2025-10-30 11:02:36 -04:00

logrotate

remove steno

2026-03-06 15:45:36 -05:00

logstash

fix include

2026-01-20 16:27:37 -05:00

manager

fix health check for new hydra version

2026-03-16 18:43:36 -04:00

motd

FIX: Update MOTD #13317

2024-07-09 10:06:16 -04:00

nginx

API errors will no longer redirect

2026-03-13 16:53:38 -04:00

ntp

update chrony config

2025-08-15 15:16:36 -05:00

orch

handle - in hypervisor hostname

2025-08-04 15:25:26 -04:00

patch

remove colon to avoid yaml parsing problems

2024-09-16 15:30:14 -04:00

pcap

cleanup steno. sensor run pcap.cleanup

2026-03-10 16:09:32 -04:00

pipeline

…

podman

…

reactor

add license

2025-07-02 16:20:30 -04:00

redis

add back individual signing policies

2026-01-12 09:25:15 -05:00

registry

add back individual signing policies

2026-01-12 09:25:15 -05:00

repo/client

fix repo files to remove

2025-09-09 16:51:42 -04:00

salt

add URL_BASE to vm hosts file

2026-03-11 12:29:13 -04:00

sensor

Update so-combine-bond

2025-08-29 11:06:25 -04:00

sensoroni

Rebuild all analyzer source-packages for Python 3.14

2026-03-16 18:58:24 -04:00

setup/virt

handle - in hypervisor hostname

2025-08-04 15:25:26 -04:00

soc

Merge pull request #15539 from Security-Onion-Solutions/jertel/wip

2026-02-27 13:18:47 -05:00

ssl

dont remove ca in ssl.remove

2026-01-07 14:14:57 -05:00

stig

disable showing large stig profile update in salt log

2025-08-20 12:06:54 -05:00

storage

remove .log extension

2025-10-14 11:03:00 -04:00

strelka

strelka use single master image

2025-11-03 09:36:46 -06:00

suricata

forcedType bool

2026-03-16 12:46:25 -04:00

systemd

…

tcpreplay

…

telegraf

remove steno

2026-03-06 15:45:36 -05:00

utility

…

vars

MANAGERHYPE setup is now complete!

2025-03-12 21:05:04 -04:00

versionlock

fix HELD for debian families

2024-10-23 09:36:17 -04:00

vm

handle - in hypervisor hostname

2025-08-04 15:25:26 -04:00

zeek

Add SOC UI toggle for JA4+ fingerprinting in Zeek

2026-03-17 09:35:31 -04:00

allowed_states.map.jinja

remove steno

2026-03-06 15:45:36 -05:00

schedule.sls

splay highstate schedule 2minutes for non managers

2025-07-22 11:52:50 -04:00

top.sls

cleanup steno. sensor run pcap.cleanup

2026-03-10 16:09:32 -04:00