Mike Reeves 6809497730 Add SOC UI toggle for JA4+ fingerprinting in Zeek ...

JA4 (BSD licensed) remains always enabled, but JA4+ variants (JA4S,
JA4D, JA4H, JA4L, JA4SSH, JA4T, JA4TS, JA4X) require a FoxIO license
and are now toggleable via the SOC UI. The toggle includes a license
agreement warning and defaults to disabled.

2026-03-17 09:35:31 -04:00

..

cron

Move In Day

2022-09-07 09:06:25 -04:00

files

Add SOC UI toggle for JA4+ fingerprinting in Zeek

2026-03-17 09:35:31 -04:00

policy

Update files

2025-10-07 14:20:25 -04:00

tools/sbin

Sbin Changes

2023-05-04 10:36:03 -04:00

config.map.jinja

enabled/disable zeek

2023-05-08 10:12:32 -04:00

config.sls

Add SOC UI toggle for JA4+ fingerprinting in Zeek

2026-03-17 09:35:31 -04:00

defaults.yaml

Add SOC UI toggle for JA4+ fingerprinting in Zeek

2026-03-17 09:35:31 -04:00

disabled.sls

enable/disable influxdb in ui

2023-05-11 12:43:06 -04:00

enabled.sls

Update enabled.sls

2025-07-21 10:58:25 -04:00

init.sls

enabled/disable zeek

2023-05-08 10:12:32 -04:00

soc_zeek.yaml

Add SOC UI toggle for JA4+ fingerprinting in Zeek

2026-03-17 09:35:31 -04:00

sostatus.sls

enabled/disable zeek

2023-05-08 10:12:32 -04:00