Doug Burks e3d32c7871 Improve default sysmon fields and add new network_connection fields

2023-01-04 07:38:18 -05:00

..

_beacons

…

_modules

…

ca

…

common

Backup the new Kratos location

2022-12-14 14:12:47 -05:00

cron

…

curator

FIX: so-curator-closed-delete-delete needs to reference new Elasticsearch directory #8529

2022-08-12 13:10:47 -04:00

deprecated-launcher

…

docker

…

docker_clean

…

domainstats

…

elastalert

use onlyif requisite instead

2022-07-13 15:21:34 -04:00

elasticsearch

Update RITA beacon parsing

2023-01-03 16:01:35 +00:00

filebeat

Add 'ics' tag for 'bsap'-prefixed events/logs

2022-11-29 11:27:41 -05:00

firewall

Add strelka_frontend to heavynode, sensor, and standalone role FW portgroups

2022-03-28 16:05:07 -04:00

fleet

…

freqserver

…

grafana

remove pipeline time panel - https://github.com/Security-Onion-Solutions/securityonion/issues/8369

2022-08-17 09:17:27 -04:00

healthcheck

…

idh

Include firewall state

2022-04-07 14:02:21 -04:00

idstools

Update rulecat.conf

2022-08-19 13:12:49 -04:00

influxdb

ensure bash is used for influx query

2022-04-08 15:01:38 -04:00

kibana

Update config.map.jinja

2022-12-13 13:52:13 -05:00

kratos

fix typo

2022-12-14 12:56:25 -05:00

learn

…

logstash

Add Logstash output for dedicated Kratos index

2022-07-08 15:55:55 +00:00

manager

…

minio

…

motd

…

mysql

…

nginx

Allow websockets for fleetdm

2022-06-06 17:26:24 -04:00

nodered

…

patch

…

pcap

…

pipeline

…

playbook

Change Target_log name

2022-05-28 18:07:05 -04:00

reactor

…

redis

…

registry

…

repo/client

Fix repo location

2022-06-30 13:29:21 -04:00

salt

add SYSTEMD_UNIT_FILE back to map file

2022-08-05 10:53:07 -04:00

sensoroni

Add test coverage for empty list value

2022-12-13 16:23:16 +00:00

soc

Improve default sysmon fields and add new network_connection fields

2023-01-04 07:38:18 -05:00

soctopus

Upgrade Navigator

2022-05-27 14:21:11 -04:00

ssl

…

strelka

Switch back to older style redirect due to incompatibility with Ub 18

2022-12-07 14:06:24 -05:00

suricata

add suricata to socore group

2022-12-05 09:57:24 -05:00

systemd

…

tcpreplay

…

telegraf

FIX: Update telegraf influxdbsize.sh to collect influxdb size from influxdb_size.log #7468

2022-03-18 13:15:43 -04:00

utility

Update from search.remote to cluster.remote for Elastic 8

2022-03-17 21:25:10 -04:00

wazuh

…

workstation

add eval

2022-04-22 16:04:29 -04:00

yum

…

zeek

FIX: Avoid deprecation warning in Zeek file extraction script #9123

2022-11-11 16:27:11 -05:00

allowed_states.map.jinja

changes for workstation

2022-03-28 15:34:15 -04:00

schedule.sls

…

top.sls

https://github.com/Security-Onion-Solutions/securityonion/issues/8404

2022-07-29 09:55:20 -04:00