Code

2.4.60#390

Code

Merged

TOoSmOotH merged 191 commits into2.4/mainSecurity-Onion-Solutions/securityonion-soc:2.4/mainfrom 2.4/devSecurity-Onion-Solutions/securityonion-soc:2.4/devCopy head branch name to clipboardMar 20, 2024

+14,598-684

Commits

Commits on Jan 31, 2024

• WIP: Demo + CleanUp

  Show description for bec7b5b
  coreyogburn

  committed
  bec7b5b

  Copy full SHA for bec7b5b

• WIP: More Detections Work

  Show description for 648e2b5
  coreyogburn

  committed
  648e2b5

  Copy full SHA for 648e2b5

• WIP: Suricata Rule Parsing

  Show description for 4541e9b
  coreyogburn

  committed
  4541e9b

  Copy full SHA for 4541e9b

• WIP: alerts

  coreyogburn

  committed
  f4d1eaf

  Copy full SHA for f4d1eaf

• WIP: Various improvements

  Show description for 13c03c4
  coreyogburn

  committed
  13c03c4

  Copy full SHA for 13c03c4

• WIP: Tests

  Show description for 9ab8827
  coreyogburn

  committed
  9ab8827

  Copy full SHA for 9ab8827

• WIP: Modulaization and Elastic Index Change

  Show description for 7baf618
  coreyogburn

  committed
  7baf618

  Copy full SHA for 7baf618

• WIP: Tests

  Show description for a411b08
  coreyogburn

  committed
  a411b08

  Copy full SHA for a411b08

• WIP: Sync Community Detections

  Show description for ea0e6f5
  coreyogburn

  committed
  ea0e6f5

  Copy full SHA for ea0e6f5

• WIP: Community Detections Sync

  Show description for 654b438
  coreyogburn

  committed
  654b438

  Copy full SHA for 654b438

• Service Account Ctx, Community Rules, permissions

  Show description for 5cb9925
  coreyogburn

  committed
  5cb9925

  Copy full SHA for 5cb9925

• WIP: GetAll that gets all

  Show description for c4c66fb
  coreyogburn

  committed
  c4c66fb

  Copy full SHA for c4c66fb

• WIP: Tightening Suricata Bolts

  Show description for 77ecfb0
  coreyogburn

  committed
  77ecfb0

  Copy full SHA for 77ecfb0

• Early implementation of ElastAlert's DetectionEngine.

  Show description for 341a563
  coreyogburn

  committed
  341a563

  Copy full SHA for 341a563

• WIP: ElastAlert

  Show description for 1c849e3
  coreyogburn

  committed
  1c849e3

  Copy full SHA for 1c849e3

• WIP ElastAlert Improvements

  Show description for 064f4e7
  coreyogburn

  committed
  064f4e7

  Copy full SHA for 064f4e7

• WIP: License Text, Linting

  Show description for 6328360
  coreyogburn

  committed
  6328360

  Copy full SHA for 6328360

• WIP: Overrides in the Tuning Tab

  Show description for db72d14
  coreyogburn

  committed
  db72d14

  Copy full SHA for db72d14

• WIP: Save Overrides

  Show description for a9cba2f
  coreyogburn

  committed
  a9cba2f

  Copy full SHA for a9cba2f

• WIP: Overrides

  Show description for 4111311
  coreyogburn

  committed
  4111311

  Copy full SHA for 4111311

• WIP: Track Options, Override UpdatedAt

  Show description for 8313d92
  coreyogburn

  committed
  8313d92

  Copy full SHA for 8313d92

• WIP: ElastAlert enable new community detections

  Show description for 0b14887
  coreyogburn

  committed
  0b14887

  Copy full SHA for 0b14887

• WIP: Post-Rebase go mod tidy

  Show description for 5adb48a
  coreyogburn

  committed
  5adb48a

  Copy full SHA for 5adb48a

• WIP: ElastAlertEngine Tests

  Show description for 679479c
  coreyogburn

  committed
  679479c

  Copy full SHA for 679479c

• WIP: Yara Parser

  Show description for c8bb0cb
  coreyogburn

  committed
  c8bb0cb

  Copy full SHA for c8bb0cb

• WIP: Bulk Actions, Removal of Date Range from Detections Search

  Show description for 3c8f628
  coreyogburn

  committed
  3c8f628

  Copy full SHA for 3c8f628

• WIP: Fix for removed Date Range from Detections

  Show description for 5eafeb9
  coreyogburn

  committed
  5eafeb9

  Copy full SHA for 5eafeb9

• WIP: Async Bulk Operations

  Show description for 64984cd
  coreyogburn

  committed
  64984cd

  Copy full SHA for 64984cd

• WIP: Strelka/Yara Community Rule Import, ElastAlert now translates with SigmaCLI

  Show description for 594c2b8
  coreyogburn

  committed
  594c2b8

  Copy full SHA for 594c2b8

• WIP: Fix Suricata Parser Bug

  Show description for 7549c63
  coreyogburn

  committed
  7549c63

  Copy full SHA for 7549c63

• WIP: Cleanup

  Show description for c4d9fe1
  coreyogburn

  committed
  c4d9fe1

  Copy full SHA for c4d9fe1

• WIP: First pass at including sigma-cli in the dockerfile

  coreyogburn

  committed
  abd6ba0

  Copy full SHA for abd6ba0

Commits on Feb 1, 2024

• WIP: Remove Custom Config, Suricata Community Rules Start Disabled

  Show description for c6502fd
  coreyogburn

  committed
  c6502fd

  Copy full SHA for c6502fd

• WIP: Fix Sigma Shebang, Copy Site-Packages to New Location

  Show description for 17f3d30
  coreyogburn

  committed
  17f3d30

  Copy full SHA for 17f3d30

• Merge pull request #333 from Security-Onion-Solutions/cogburn/detections_playbooks

  Show description for 529a15f
  coreyogburn

  authored
  529a15f

  Copy full SHA for 529a15f

Commits on Feb 2, 2024

• WIP: Removed Hardcoded Config Values

  Show description for 587b9b3
  coreyogburn

  committed
  587b9b3

  Copy full SHA for 587b9b3

• Merge pull request #334 from Security-Onion-Solutions/cogburn/detections_playbooks

  Show description for 1fba19b
  coreyogburn

  authored
  1fba19b

  Copy full SHA for 1fba19b

• WIP: Detection History

  Show description for 1b33e45
  coreyogburn

  committed
  1b33e45

  Copy full SHA for 1b33e45

• Merge pull request #335 from Security-Onion-Solutions/cogburn/detections_playbooks

  Show description for 93bdb05
  coreyogburn

  authored
  93bdb05

  Copy full SHA for 93bdb05

Commits on Feb 6, 2024

• WIP: UI Changes

  Show description for b592063
  coreyogburn

  committed
  b592063

  Copy full SHA for b592063

• WIP: Detection Tags, Ruleset, and Language

  Show description for b1e8346
  coreyogburn

  committed
  b1e8346

  Copy full SHA for b1e8346

Commits on Feb 7, 2024

• Revise Quicklinks

  defensivedepth

  committed
  7aecfc2

  Copy full SHA for 7aecfc2

Commits on Feb 8, 2024

• Add support for sigma pipelines

  defensivedepth

  committed
  d4c8f5c

  Copy full SHA for d4c8f5c

• Merge remote-tracking branch 'origin/cogburn/detections_playbooks' into kilo

  defensivedepth

  committed
  449787d

  Copy full SHA for 449787d

• WIP: Reworked UI

  Show description for 3c02be7
  coreyogburn

  committed
  3c02be7

  Copy full SHA for 3c02be7

• Merge pull request #338 from Security-Onion-Solutions/cogburn/detections_playbooks

  Show description for ed5e0e5
  coreyogburn

  authored
  ed5e0e5

  Copy full SHA for ed5e0e5

• WIP: UI Updates

  Show description for 460c643
  coreyogburn

  committed
  460c643

  Copy full SHA for 460c643

Commits on Feb 9, 2024

• WIP: Fix References

  Show description for 47ee245
  coreyogburn

  committed
  47ee245

  Copy full SHA for 47ee245

• WIP: License, Rule Extracted Data

  Show description for 64143e7
  coreyogburn

  committed
  64143e7

  Copy full SHA for 64143e7

Commits on Feb 10, 2024

• Merge remote-tracking branch 'origin/cogburn/detections_playbooks' into kilo

  defensivedepth

  committed
  3e68b34

  Copy full SHA for 3e68b34

Commits on Feb 12, 2024

• WIP: Updated Tests to Include License Checks

  coreyogburn

  committed
  1f9d470

  Copy full SHA for 1f9d470

• Merge pull request #341 from Security-Onion-Solutions/cogburn/detections_playbooks

  Show description for c324aa7
  coreyogburn

  authored
  c324aa7

  Copy full SHA for c324aa7

Commits on Feb 13, 2024

• Titles for Detections columns

  defensivedepth

  committed
  11f6a8d

  Copy full SHA for 11f6a8d

• Dont enable Sigma rules upon import

  defensivedepth

  committed
  a05fce1

  Copy full SHA for a05fce1

• WIP: Demo + CleanUp

  Show description for d56518b
  coreyogburn

  committed
  d56518b

  Copy full SHA for d56518b

• WIP: More Detections Work

  Show description for 52d30c7
  coreyogburn

  committed
  52d30c7

  Copy full SHA for 52d30c7

• WIP: Suricata Rule Parsing

  Show description for 8963f20
  coreyogburn

  committed
  8963f20

  Copy full SHA for 8963f20

• WIP: alerts

  coreyogburn

  committed
  1baa496

  Copy full SHA for 1baa496

• WIP: Various improvements

  Show description for 11e1b09
  coreyogburn

  committed
  11e1b09

  Copy full SHA for 11e1b09

• WIP: Tests

  Show description for d46987d
  coreyogburn

  committed
  d46987d

  Copy full SHA for d46987d

• WIP: Modulaization and Elastic Index Change

  Show description for a239976
  coreyogburn

  committed
  a239976

  Copy full SHA for a239976

• WIP: Tests

  Show description for 1f61e40
  coreyogburn

  committed
  1f61e40

  Copy full SHA for 1f61e40

• WIP: Sync Community Detections

  Show description for 04ec7c2
  coreyogburn

  committed
  04ec7c2

  Copy full SHA for 04ec7c2

• WIP: Community Detections Sync

  Show description for 3268287
  coreyogburn

  committed
  3268287

  Copy full SHA for 3268287

• Service Account Ctx, Community Rules, permissions

  Show description for e1a9267
  coreyogburn

  committed
  e1a9267

  Copy full SHA for e1a9267

• WIP: GetAll that gets all

  Show description for a9e0e10
  coreyogburn

  committed
  a9e0e10

  Copy full SHA for a9e0e10

• WIP: Tightening Suricata Bolts

  Show description for 2774955
  coreyogburn

  committed
  2774955

  Copy full SHA for 2774955

• Early implementation of ElastAlert's DetectionEngine.

  Show description for af01da5
  coreyogburn

  committed
  af01da5

  Copy full SHA for af01da5

• WIP: ElastAlert

  Show description for fef8636
  coreyogburn

  committed
  fef8636

  Copy full SHA for fef8636

• WIP ElastAlert Improvements

  Show description for 59c891a
  coreyogburn

  committed
  59c891a

  Copy full SHA for 59c891a

• WIP: License Text, Linting

  Show description for 4cb0d47
  coreyogburn

  committed
  4cb0d47

  Copy full SHA for 4cb0d47

• WIP: Overrides in the Tuning Tab

  Show description for c4320b1
  coreyogburn

  committed
  c4320b1

  Copy full SHA for c4320b1

• WIP: Save Overrides

  Show description for b18e835
  coreyogburn

  committed
  b18e835

  Copy full SHA for b18e835

• WIP: Overrides

  Show description for 3d0b2a6
  coreyogburn

  committed
  3d0b2a6

  Copy full SHA for 3d0b2a6

• WIP: Track Options, Override UpdatedAt

  Show description for 7430141
  coreyogburn

  committed
  7430141

  Copy full SHA for 7430141

• WIP: ElastAlert enable new community detections

  Show description for 24328d0
  coreyogburn

  committed
  24328d0

  Copy full SHA for 24328d0

• WIP: Post-Rebase go mod tidy

  Show description for 05ddbf1
  coreyogburn

  committed
  05ddbf1

  Copy full SHA for 05ddbf1

• WIP: ElastAlertEngine Tests

  Show description for 4029190
  coreyogburn

  committed
  4029190

  Copy full SHA for 4029190

• WIP: Yara Parser

  Show description for 38df3b0
  coreyogburn

  committed
  38df3b0

  Copy full SHA for 38df3b0

• WIP: Bulk Actions, Removal of Date Range from Detections Search

  Show description for 67a9bfa
  coreyogburn

  committed
  67a9bfa

  Copy full SHA for 67a9bfa

• WIP: Fix for removed Date Range from Detections

  Show description for fea0d27
  coreyogburn

  committed
  fea0d27

  Copy full SHA for fea0d27

• WIP: Async Bulk Operations

  Show description for 36b6d28
  coreyogburn

  committed
  36b6d28

  Copy full SHA for 36b6d28

• WIP: Strelka/Yara Community Rule Import, ElastAlert now translates with SigmaCLI

  Show description for d37e91e
  coreyogburn

  committed
  d37e91e

  Copy full SHA for d37e91e

• WIP: Fix Suricata Parser Bug

  Show description for 43f134f
  coreyogburn

  committed
  43f134f

  Copy full SHA for 43f134f

• WIP: Cleanup

  Show description for 95b3dee
  coreyogburn

  committed
  95b3dee

  Copy full SHA for 95b3dee

• WIP: First pass at including sigma-cli in the dockerfile

  coreyogburn

  committed
  b9efd27

  Copy full SHA for b9efd27

• WIP: Remove Custom Config, Suricata Community Rules Start Disabled

  Show description for 9c6dd15
  coreyogburn

  committed
  9c6dd15

  Copy full SHA for 9c6dd15

• WIP: Fix Sigma Shebang, Copy Site-Packages to New Location

  Show description for 159ff64
  coreyogburn

  committed
  159ff64

  Copy full SHA for 159ff64

• WIP: Removed Hardcoded Config Values

  Show description for 0f20344
  coreyogburn

  committed
  0f20344

  Copy full SHA for 0f20344

• WIP: Detection History

  Show description for ac389ef
  coreyogburn

  committed
  ac389ef

  Copy full SHA for ac389ef

• WIP: UI Changes

  Show description for 21fef2b
  coreyogburn

  committed
  21fef2b

  Copy full SHA for 21fef2b

• WIP: Detection Tags, Ruleset, and Language

  Show description for 914e240
  coreyogburn

  committed
  914e240

  Copy full SHA for 914e240

• WIP: Reworked UI

  Show description for 9914a52
  coreyogburn

  committed
  9914a52

  Copy full SHA for 9914a52

• WIP: UI Updates

  Show description for 88fd8a1
  coreyogburn

  committed
  88fd8a1

  Copy full SHA for 88fd8a1

• WIP: Fix References

  Show description for 0230529
  coreyogburn

  committed
  0230529

  Copy full SHA for 0230529

• WIP: License, Rule Extracted Data

  Show description for d375e95
  coreyogburn

  committed
  d375e95

  Copy full SHA for d375e95

• WIP: Updated Tests to Include License Checks

  coreyogburn

  committed
  4a05909

  Copy full SHA for 4a05909

• WIP: Comments, Permissions

  Show description for a6810b2
  coreyogburn

  committed
  a6810b2

  Copy full SHA for a6810b2

• Merge branch 'kilo' into cogburn/detections_playbooks

  coreyogburn

  authored
  95fd327

  Copy full SHA for 95fd327

• Merge pull request #348 from Security-Onion-Solutions/cogburn/detections_playbooks

  coreyogburn

  authored
  124bb75

  Copy full SHA for 124bb75

Commits on Feb 14, 2024

• Query parameter can select ActiveTab

  Show description for a603daf
  coreyogburn

  committed
  a603daf

  Copy full SHA for a603daf

• Merge pull request #350 from Security-Onion-Solutions/cogburn/detections_playbooks

  Show description for 77b7c15
  coreyogburn

  authored
  77b7c15

  Copy full SHA for 77b7c15

• Query parameter can select ActiveTab

  Show description for 0c262a8
  coreyogburn

  committed
  0c262a8

  Copy full SHA for 0c262a8

• Convert and Test ElastAlert Sigma

  Show description for 6f3c592
  coreyogburn

  committed
  6f3c592

  Copy full SHA for 6f3c592

Commits on Feb 15, 2024

• sigmaRulePackages is a string array in the config

  Show description for 5e806f5
  coreyogburn

  committed
  5e806f5

  Copy full SHA for 5e806f5

Commits on Feb 16, 2024

• Tweak Wording

  defensivedepth

  committed
  4e9c34e

  Copy full SHA for 4e9c34e

• Switch to Language

  defensivedepth

  committed
  d8f1414

  Copy full SHA for d8f1414

• Merge pull request #351 from Security-Onion-Solutions/patch

  Show description for d8d12e0
  defensivedepth

  authored
  d8d12e0

  Copy full SHA for d8d12e0

• Allow and Deny Regexes per Detection Engine

  Show description for d2979e1
  coreyogburn

  committed
  d2979e1

  Copy full SHA for d2979e1

Commits on Feb 20, 2024

• Strelka rules are compiled by default but can be disabled

  Show description for 0909ad0
  coreyogburn

  committed
  0909ad0

  Copy full SHA for 0909ad0

• Hide MultiSelect Checkbox unless in Detections

  Show description for 4df7617
  coreyogburn

  committed
  4df7617

  Copy full SHA for 4df7617

• Check for the existence of a template before starting community rule import

  coreyogburn

  committed
  0942c43

  Copy full SHA for 0942c43

Commits on Feb 21, 2024

• Improvements

  Show description for 23ef5da
  coreyogburn

  committed
  23ef5da

  Copy full SHA for 23ef5da

• Merge remote-tracking branch 'origin/cogburn/detections_playbooks' into kilo

  defensivedepth

  committed
  948d6cb

  Copy full SHA for 948d6cb

• Merge remote-tracking branch 'origin/2.4/dev' into kilo

  defensivedepth

  committed
  4f27a5b

  Copy full SHA for 4f27a5b

• Merge pull request #353 from Security-Onion-Solutions/kilo

  Show description for 852df88
  coreyogburn

  authored
  852df88

  Copy full SHA for 852df88

Commits on Feb 22, 2024

• Text change

  defensivedepth

  committed
  e73504a

  Copy full SHA for e73504a

• Merge pull request #354 from Security-Onion-Solutions/2.4/detections

  Show description for e9b00b6
  defensivedepth

  authored
  e9b00b6

  Copy full SHA for e9b00b6

• New Create Detection Form

  Show description for d09207f
  coreyogburn

  committed
  d09207f

  Copy full SHA for d09207f

Commits on Feb 23, 2024

• Tests for Each Engine's ExtractDetails()

  coreyogburn

  committed
  77c8a14

  Copy full SHA for 77c8a14

• Merge pull request #355 from Security-Onion-Solutions/cogburn/detections

  Show description for e8eb930
  coreyogburn

  authored
  e8eb930

  Copy full SHA for e8eb930

• fix broken sigma test

  jertel

  committed
  52eb74e

  Copy full SHA for 52eb74e

• Merge pull request #356 from Security-Onion-Solutions/jertel/detdisable

  Show description for b5f0e4a
  jertel

  authored
  b5f0e4a

  Copy full SHA for b5f0e4a

• disable community rule auto updates by default

  jertel

  committed
  fc8ed6d

  Copy full SHA for fc8ed6d

• Merge pull request #357 from Security-Onion-Solutions/jertel/detdisable

  Show description for e664b0b
  jertel

  authored
  e664b0b

  Copy full SHA for e664b0b

Commits on Feb 26, 2024

• FEATURE: Add new SOC action for Process Info Security-Onion-Solutions/securityonion#12421

  dougburks

  authored
  62ef1e9

  Copy full SHA for 62ef1e9

• Merge pull request #358 from Security-Onion-Solutions/dougburks-patch-1

  Show description for 1341011
  dougburks

  authored
  1341011

  Copy full SHA for 1341011

• New Alert Quick Action: Tune Detection

  Show description for 3dff89e
  coreyogburn

  committed
  3dff89e

  Copy full SHA for 3dff89e

Commits on Feb 27, 2024

• Fix casing of i18n string

  coreyogburn

  committed
  bcbd0ba

  Copy full SHA for bcbd0ba

• Merge pull request #359 from Security-Onion-Solutions/cogburn/tune-dets-from-alerts

  Show description for a75c715
  coreyogburn

  authored
  a75c715

  Copy full SHA for a75c715

• Disable QuickAction Item Until Ready

  Show description for c0d7918
  coreyogburn

  committed
  c0d7918

  Copy full SHA for c0d7918

• Merge pull request #360 from Security-Onion-Solutions/cogburn/tune-detections-tweak

  Show description for 6c66ff1
  coreyogburn

  authored
  6c66ff1

  Copy full SHA for 6c66ff1

Commits on Mar 4, 2024

• upgrade kratos

  jertel

  committed
  dacffa8

  Copy full SHA for dacffa8

• Merge pull request #362 from Security-Onion-Solutions/jertel/krup

  Show description for 3d5cd01
  jertel

  authored
  3d5cd01

  Copy full SHA for 3d5cd01

• switch kratos runtime container to ubuntu

  jertel

  committed
  d9e878b

  Copy full SHA for d9e878b

• switch back to kratos username

  jertel

  committed
  6fc86fe

  Copy full SHA for 6fc86fe

• Merge pull request #363 from Security-Onion-Solutions/jertel/krup

  Show description for 7088059
  jertel

  authored
  7088059

  Copy full SHA for 7088059

• Change default test index

  defensivedepth

  committed
  bc0ee90

  Copy full SHA for bc0ee90

• Change event.module to sigma

  defensivedepth

  committed
  a1b1e5f

  Copy full SHA for a1b1e5f

• Merge pull request #364 from Security-Onion-Solutions/2.4/detections-brower

  Show description for d5a59a2
  defensivedepth

  authored
  d5a59a2

  Copy full SHA for d5a59a2

Commits on Mar 5, 2024

• Merge pull request #366 from Security-Onion-Solutions/2.4/detections-brower

  Show description for f49b4b3
  defensivedepth

  authored
  f49b4b3

  Copy full SHA for f49b4b3

• Fix tests

  defensivedepth

  committed
  366c9d7

  Copy full SHA for 366c9d7

• Merge pull request #367 from Security-Onion-Solutions/2.4/detections-brower

  Show description for 985459e
  defensivedepth

  authored
  985459e

  Copy full SHA for 985459e

• No More DetectionStore Crossover

  Show description for e4ec1d5
  coreyogburn

  committed
  e4ec1d5

  Copy full SHA for e4ec1d5

• Merge pull request #365 from Security-Onion-Solutions/cogburn/store-isolation-fix

  Show description for 0638c0c
  coreyogburn

  authored
  0638c0c

  Copy full SHA for 0638c0c

• Include Comments in Detection History

  coreyogburn

  committed
  f36614f

  Copy full SHA for f36614f

• Merge pull request #369 from Security-Onion-Solutions/cogburn/detection-comment-history

  Show description for 794b6a0
  coreyogburn

  authored
  794b6a0

  Copy full SHA for 794b6a0

Commits on Mar 6, 2024

• Add toggle to exclude Detections data

  defensivedepth

  committed
  eb155de

  Copy full SHA for eb155de

• add feature toggle for detections

  jertel

  committed
  bb136cf

  Copy full SHA for bb136cf

• Merge pull request #371 from Security-Onion-Solutions/jertel/det

  Show description for 7af8f45
  jertel

  authored
  7af8f45

  Copy full SHA for 7af8f45

• Merge pull request #370 from Security-Onion-Solutions/2.4/detections-brower

  Show description for 5419f23
  defensivedepth

  authored
  5419f23

  Copy full SHA for 5419f23

Commits on Mar 7, 2024

• suri pcap improvements

  jertel

  committed
  5c301b2

  Copy full SHA for 5c301b2

• suri pcap improvements

  jertel

  committed
  270edea

  Copy full SHA for 270edea

• Merge pull request #372 from Security-Onion-Solutions/jertel/det

  Show description for f438394
  jertel

  authored
  f438394

  Copy full SHA for f438394

• gracefully handle permission errors

  jertel

  committed
  77b6da3

  Copy full SHA for 77b6da3

Commits on Mar 8, 2024

• logging enhancements

  jertel

  committed
  869486d

  Copy full SHA for 869486d

• Merge pull request #373 from Security-Onion-Solutions/jertel/det

  Show description for 5fcb1c1
  jertel

  authored
  5fcb1c1

  Copy full SHA for 5fcb1c1

• Indicate Clickable Detection Fields

  Show description for 5022c40
  coreyogburn

  committed
  5022c40

  Copy full SHA for 5022c40

• pcap improvements

  jertel

  committed
  bf422be

  Copy full SHA for bf422be

• Merge pull request #374 from Security-Onion-Solutions/cogburn/click-to-edit

  Show description for ea9b8af
  coreyogburn

  authored
  ea9b8af

  Copy full SHA for ea9b8af

• "Tune Detections" Only in Alerts

  Show description for e56960d
  coreyogburn

  committed
  e56960d

  Copy full SHA for e56960d

• Merge pull request #376 from Security-Onion-Solutions/cogburn/tune-only-in-alerts

  Show description for f08e90f
  coreyogburn

  authored
  f08e90f

  Copy full SHA for f08e90f

• Strelka Rule License Fallback

  Show description for 21f09a3
  coreyogburn

  committed
  21f09a3

  Copy full SHA for 21f09a3

• Improved Error Granularity Around Strelka Repos

  coreyogburn

  committed
  c99f8ca

  Copy full SHA for c99f8ca

• Merge pull request #377 from Security-Onion-Solutions/cogburn/yara-license

  Show description for 5d490dc
  coreyogburn

  authored
  5d490dc

  Copy full SHA for 5d490dc

• Merge pull request #375 from Security-Onion-Solutions/jertel/det

  Show description for 4161b89
  jertel

  authored
  4161b89

  Copy full SHA for 4161b89

• Allow For Zero Strelka Rules Repos

  Show description for 5dcba37
  coreyogburn

  committed
  5dcba37

  Copy full SHA for 5dcba37

• Merge pull request #378 from Security-Onion-Solutions/cogburn/strelka-config-fix

  Show description for da65dd9
  coreyogburn

  authored
  da65dd9

  Copy full SHA for da65dd9

• improve reboot indicators

  jertel

  committed
  3367426

  Copy full SHA for 3367426

• Merge pull request #379 from Security-Onion-Solutions/jertel/det

  Show description for 853298e
  jertel

  authored
  853298e

  Copy full SHA for 853298e

Commits on Mar 12, 2024

• allow sensoroni modules to succeed if at least one provided data

  jertel

  committed
  ac24917

  Copy full SHA for ac24917

• Merge pull request #380 from Security-Onion-Solutions/jertel/det

  Show description for 560e352
  jertel

  authored
  560e352

  Copy full SHA for 560e352

• Bug Fixes and Tweaks

  Show description for 0d1bc24
  coreyogburn

  committed
  0d1bc24

  Copy full SHA for 0d1bc24

• JS Unit Tests + Tweaks

  Show description for b759466
  coreyogburn

  committed
  b759466

  Copy full SHA for b759466

• Moved override update logic from the detectionhandler to the detectionstore. The handler should check for all the ways the request will fail. When everything succeeds, the store should do all the m…

  Show description for 2b86689
  coreyogburn

  committed
  2b86689

  Copy full SHA for 2b86689

• ElasticDetectionStore Tests

  coreyogburn

  committed
  d409b16

  Copy full SHA for d409b16

• Merge pull request #381 from Security-Onion-Solutions/cogburn/detection-tests

  Show description for 4ed2581
  coreyogburn

  authored
  4ed2581

  Copy full SHA for 4ed2581

• Fix for jsyaml reference in tests

  Show description for 020728e
  coreyogburn

  committed
  020728e

  Copy full SHA for 020728e

• Merge pull request #382 from Security-Onion-Solutions/cogburn/jsyaml-import-fix

  Show description for f84fc30
  coreyogburn

  authored
  f84fc30

  Copy full SHA for f84fc30

• Better Defaults in Detection Engines

  Show description for 9e405b5
  coreyogburn

  committed
  9e405b5

  Copy full SHA for 9e405b5

• Merge pull request #383 from Security-Onion-Solutions/cogburn/detections-defaults

  Show description for 9d1ccbe
  coreyogburn

  authored
  9d1ccbe

  Copy full SHA for 9d1ccbe

Commits on Mar 13, 2024

• Add NIDS Tuning Links back in

  defensivedepth

  committed
  ed62dc7

  Copy full SHA for ed62dc7

• Merge pull request #384 from Security-Onion-Solutions/2.4/detections-links

  Show description for d98a447
  defensivedepth

  authored
  d98a447

  Copy full SHA for d98a447

• check bidirectional pcap

  jertel

  committed
  beb1e70

  Copy full SHA for beb1e70

• Merge pull request #385 from Security-Onion-Solutions/jertel/pcap

  Show description for 58adedf
  jertel

  authored
  58adedf

  Copy full SHA for 58adedf

• add more logging

  jertel

  committed
  c7f4622

  Copy full SHA for c7f4622

• Merge pull request #386 from Security-Onion-Solutions/jertel/pcap

  Show description for 49b4375
  jertel

  authored
  49b4375

  Copy full SHA for 49b4375

Commits on Mar 14, 2024

• refactor suri pcap parser for 4x perf gain

  jertel

  committed
  8bd29f4

  Copy full SHA for 8bd29f4

• Merge pull request #387 from Security-Onion-Solutions/jertel/pcap

  Show description for 327af87
  jertel

  authored
  327af87

  Copy full SHA for 327af87

• Add Version Number to External JS Filenames

  Show description for ca2047d
  coreyogburn

  committed
  ca2047d

  Copy full SHA for ca2047d

• Merge pull request #388 from Security-Onion-Solutions/cogburn/js-ver-fix

  Show description for 12b4ebb
  coreyogburn

  authored
  12b4ebb

  Copy full SHA for 12b4ebb