Wes 3285ae9366 Update mappings for detection fields

2024-05-01 20:11:56 +00:00

..

_beacons

…

_modules

…

backup

…

bpf

FIX: Annotations for BPF and Suricata PCAP #12626

2024-03-20 15:49:46 -04:00

ca

…

common

Exclude yara runtime log

2024-04-23 07:28:07 -04:00

cron

…

curator

only run the file.absent state if there are files to delete

2023-12-21 09:36:47 -05:00

desktop

add putty to sod packages.sls

2024-02-08 22:05:37 -05:00

docker

add memlock to so-suricata container

2024-04-24 15:35:17 -04:00

docker_clean

…

elastalert

Sigma pivot fix and cleanup

2024-04-29 08:49:05 -04:00

elastic-fleet-package-registry

…

elasticagent

…

elasticfleet

Add runtime status logs

2024-04-24 16:33:47 -04:00

elasticsearch

Update mappings for detection fields

2024-05-01 20:11:56 +00:00

firewall

annotation updates for custom settings

2024-04-30 15:14:56 -04:00

global

Improve wording for Airgap annotation

2024-04-03 08:21:30 -04:00

healthcheck

…

host

…

idh

add description for http_x_skin

2023-12-06 15:44:36 -05:00

idstools

make rule settings advanced

2024-05-01 12:51:04 -04:00

influxdb

…

kibana

Check Kibana API not Web

2024-01-11 12:30:23 -05:00

kratos

lks/fps

2024-01-24 11:17:32 -05:00

logrotate

…

logstash

annotation updates for custom settings

2024-04-30 15:14:56 -04:00

manager

Merge pull request #12682 from Security-Onion-Solutions/2.4/soup-playbook

2024-04-04 11:28:09 -04:00

motd

…

nginx

Initial cut to remove Playbook and deps

2024-03-25 19:42:31 -04:00

ntp

…

patch

…

pcap

Merge pull request #12544 from Security-Onion-Solutions/jertel/status

2024-03-11 10:29:33 -04:00

pipeline

…

podman

docker ips changes

2023-07-21 16:06:52 -04:00

reactor

…

redis

…

registry

upgrade registry version

2023-07-19 09:51:07 -04:00

repo/client

Modify yum.conf.jinja to include localpkg_gpgcheck rather than modifying it with so-stig

2024-01-15 21:30:31 -05:00

salt

Update init.sls

2024-03-13 11:24:26 -04:00

sensor

…

sensoroni

removed unused property

2024-03-13 13:49:44 -04:00

setup

…

soc

Merge pull request #12906 from Security-Onion-Solutions/det_easr

2024-05-01 13:05:36 -04:00

ssl

also remove intca symlink

2024-01-31 09:01:56 -05:00

stig

Run stig post remediate scan against default ol9 scap-security-guide.

2024-03-06 17:19:01 -05:00

strelka

Add runtime status logs

2024-04-24 16:33:47 -04:00

suricata

make rule settings advanced

2024-05-01 12:51:04 -04:00

systemd

…

tcpreplay

…

telegraf

add agentstatus to telegraf

2024-04-03 10:06:08 -04:00

utility

…

vars

add GLOBALS.is_sensor

2024-03-05 09:53:35 -05:00

zeek

zeek networks will only ever have one HOME_NETWORKS setting

2024-05-01 09:31:11 -04:00

allowed_states.map.jinja

Initial cut to remove Playbook and deps

2024-03-25 19:42:31 -04:00

schedule.sls

…

top.sls

Initial cut to remove Playbook and deps

2024-03-25 19:42:31 -04:00