weslambert b916465b06 Merge pull request #12974 from Security-Onion-Solutions/fix/strelka_yara ...

Account for 0 active rules and change watch

2024-05-08 15:59:20 -04:00

..

_beacons

…

_modules

…

backup

…

bpf

FIX: Annotations for BPF and Suricata PCAP #12626

2024-03-20 15:49:46 -04:00

ca

Update signing_policies.conf

2023-11-17 16:38:50 -05:00

common

FIX: Adjust so-import-pcap so that suricata works when it is pcapengine #12969

2024-05-08 13:26:36 -04:00

cron

…

curator

only run the file.absent state if there are files to delete

2023-12-21 09:36:47 -05:00

desktop

add putty to sod packages.sls

2024-02-08 22:05:37 -05:00

docker

add memlock to so-suricata container

2024-04-24 15:35:17 -04:00

docker_clean

…

elastalert

Sigma pivot fix and cleanup

2024-04-29 08:49:05 -04:00

elastic-fleet-package-registry

…

elasticagent

…

elasticfleet

Add ref

2024-05-07 11:13:51 -04:00

elasticsearch

remove test file

2024-05-08 08:54:24 -04:00

firewall

annotation updates for custom settings

2024-04-30 15:14:56 -04:00

global

Improve wording for Airgap annotation

2024-04-03 08:21:30 -04:00

healthcheck

…

host

…

idh

add description for http_x_skin

2023-12-06 15:44:36 -05:00

idstools

Update soc_idstools.yaml

2024-05-08 08:42:38 -04:00

influxdb

Specify config.yaml in config_path. Otherwise when no influxd.bolt exists influxdb will fail to read the config file and won't create a new db.

2023-10-26 13:15:40 -04:00

kibana

Check Kibana API not Web

2024-01-11 12:30:23 -05:00

kratos

lks/fps

2024-01-24 11:17:32 -05:00

logrotate

Remove Curator

2023-12-08 19:37:06 +00:00

logstash

predownload logstash and elastic for new searchnode and heavynode

2024-05-07 10:13:51 -04:00

manager

Merge pull request #12965 from Security-Onion-Solutions/orchit

2024-05-08 10:24:33 -04:00

motd

…

nginx

Initial cut to remove Playbook and deps

2024-03-25 19:42:31 -04:00

ntp

…

orch

add copyright

2024-05-08 10:14:08 -04:00

patch

add description for soc_patch.yaml

2023-12-06 15:51:00 -05:00

pcap

Merge pull request #12544 from Security-Onion-Solutions/jertel/status

2024-03-11 10:29:33 -04:00

pipeline

…

podman

…

reactor

…

redis

…

registry

…

repo/client

Modify yum.conf.jinja to include localpkg_gpgcheck rather than modifying it with so-stig

2024-01-15 21:30:31 -05:00

salt

Update pillarWatch.py

2024-05-02 16:06:04 -04:00

sensor

…

sensoroni

removed unused property

2024-03-13 13:49:44 -04:00

setup

change post setup highstate cron to 5 minutes since accepting minion runs a highstate

2023-10-20 13:46:24 -04:00

soc

Specify Error Retry Wait and Error Limit for All Detection Engines

2024-05-07 10:34:50 -06:00

ssl

also remove intca symlink

2024-01-31 09:01:56 -05:00

stig

Run stig post remediate scan against default ol9 scap-security-guide.

2024-03-06 17:19:01 -05:00

strelka

Remove mode

2024-05-08 15:39:59 -04:00

suricata

make rule settings advanced

2024-05-01 12:51:04 -04:00

systemd

…

tcpreplay

…

telegraf

add agentstatus to telegraf

2024-04-03 10:06:08 -04:00

utility

…

vars

add GLOBALS.is_sensor

2024-03-05 09:53:35 -05:00

zeek

zeek networks will only ever have one HOME_NETWORKS setting

2024-05-01 09:31:11 -04:00

allowed_states.map.jinja

Handle YARA rules for distributed deployments

2024-05-06 19:08:01 +00:00

schedule.sls

…

top.sls

Merge remote-tracking branch 'origin/2.4/dev' into orchit

2024-05-07 10:44:14 -04:00