Code

Malcolm v24.04.0#308

Code

Merged

mmguero merged 99 commits intomaincisagov/Malcolm:mainfrom v24.04.0_merge_cisagovcisagov/Malcolm:v24.04.0_merge_cisagovCopy head branch name to clipboardApr 30, 2024

+2,858-1,601

Commits

Commits on Mar 28, 2024

• bump for v24.04.0 development

  mmguero

  committed
  8d01223

  Copy full SHA for 8d01223

• bump beats to v8.13.0 (https://www.elastic.co/guide/en/beats/libbeat/current/release-notes-8.13.0.html) and logstash to v8.13.0 (https://www.elastic.co/guide/en/logstash/current/logstash-8-13-0.html)

  mmguero

  committed
  6255044

  Copy full SHA for 6255044

• Compose v2 ignores the top-level version element in docker-compose files. Removing it to supress the warning that is given from 2.25 and up. (https://docs.docker.com/compose/compose-file/04-version…

  Show description for de3330c
  mmguero

  committed
  de3330c

  Copy full SHA for de3330c

Commits on Mar 29, 2024

• work in progress for idaholab#331, improvements to extracted_files_http_server.py and the setting/creation of ACL rules on hedgehog

  mmguero

  committed
  0fd6ab8

  Copy full SHA for 0fd6ab8

• work in progress for idaholab#331, improvements to extracted_files_http_server.py and the setting/creation of ACL rules on hedgehog

  mmguero

  committed
  af919bd

  Copy full SHA for af919bd

• fix hedgehog build

  mmguero

  committed
  0bce99d

  Copy full SHA for 0bce99d

• work in progress for idaholab#331, improvements to extracted_files_http_server.py and the setting/creation of ACL rules on hedgehog

  mmguero

  committed
  d0202b3

  Copy full SHA for d0202b3

• attempt to fix hedgheog iso build

  mmguero

  committed
  ec5acf9

  Copy full SHA for ec5acf9

• work in progress for idaholab#331, improvements to extracted_files_http_server.py and the setting/creation of ACL rules on hedgehog

  mmguero

  committed
  7883057

  Copy full SHA for 7883057

Commits on Apr 1, 2024

• work in progress for idaholab#331, improvements to extracted_files_http_server.py and the setting/creation of ACL rules on hedgehog

  mmguero

  committed
  742c193

  Copy full SHA for 742c193

• workflow updates

  mmguero

  committed
  cedf0d6

  Copy full SHA for cedf0d6

• work in progress for idaholab#331, improvements to extracted_files_http_server.py and the setting/creation of ACL rules on hedgehog

  mmguero

  committed
  6ddc051

  Copy full SHA for 6ddc051

• work in progress for idaholab#331, improvements to extracted_files_http_server.py and the setting/creation of ACL rules on hedgehog

  mmguero

  committed
  6c0a9e7

  Copy full SHA for 6c0a9e7

• work in progress for idaholab#331, improvements to extracted_files_http_server.py and the setting/creation of ACL rules on hedgehog

  mmguero

  committed
  5b2359c

  Copy full SHA for 5b2359c

• work in progress for idaholab#331, improvements to extracted_files_http_server.py and the setting/creation of ACL rules on hedgehog

  mmguero

  committed
  695fe5d

  Copy full SHA for 695fe5d

• work in progress for idaholab#331, improvements to extracted_files_http_server.py and the setting/creation of ACL rules on hedgehog

  mmguero

  committed
  625eab0

  Copy full SHA for 625eab0

• work in progress for idaholab#331, improvements to extracted_files_http_server.py and the setting/creation of ACL rules on hedgehog

  mmguero

  committed
  ffd9903

  Copy full SHA for ffd9903

• work in progress for idaholab#331, improvements to extracted_files_http_server.py and the setting/creation of ACL rules on hedgehog

  mmguero

  committed
  d319392

  Copy full SHA for d319392

• work in progress for idaholab#331, improvements to extracted_files_http_server.py and the setting/creation of ACL rules on hedgehog

  mmguero

  committed
  9a51ee4

  Copy full SHA for 9a51ee4

• work in progress for idaholab#331, improvements to extracted_files_http_server.py and the setting/creation of ACL rules on hedgehog

  mmguero

  committed
  4a21efc

  Copy full SHA for 4a21efc

• work in progress for idaholab#331, improvements to extracted_files_http_server.py and the setting/creation of ACL rules on hedgehog

  mmguero

  committed
  c53fea7

  Copy full SHA for c53fea7

Commits on Apr 2, 2024

• added ARKIME_QUERY_ALL_INDICES env. variable to set queryAllIndices (https://arkime.com/settings#queryAllIndices)

  mmguero

  committed
  d31a04a

  Copy full SHA for d31a04a

• bump beats to v8.13.1 (https://www.elastic.co/guide/en/beats/libbeat/current/release-notes-8.13.1.html) and logstash to v8.13.1 (https://www.elastic.co/guide/en/logstash/current/logstash-8-13-1.html)

  mmguero

  committed
  6e84f82

  Copy full SHA for 6e84f82

• fixed assets directory on sensor

  mmguero

  committed
  fdf0afc

  Copy full SHA for fdf0afc

• show malcolm columns if malcolm redirect header is in place (idaholab#331)

  mmguero

  committed
  bebe677

  Copy full SHA for bebe677

• work in progress for idaholab#331, improvements to extracted_files_http_server.py and the setting/creation of ACL rules on hedgehog

  mmguero

  committed
  d07440e

  Copy full SHA for d07440e

• work in progress for idaholab#331, add transform vis. to Files dashboard for file downloads

  mmguero

  committed
  c58ccef

  Copy full SHA for c58ccef

• work in progress for idaholab#331, add transform vis. to Files dashboard for file downloads

  mmguero

  committed
  e77885f

  Copy full SHA for e77885f

Commits on Apr 3, 2024

• documentation and screenshot changes

  mmguero

  committed
  03375b4

  Copy full SHA for 03375b4

• documentation changes

  mmguero

  committed
  127b5ff

  Copy full SHA for 127b5ff

• bump opensearch and dashboards to v2.13.0

  mmguero

  committed
  8996d95

  Copy full SHA for 8996d95

• documentation changes

  mmguero

  committed
  fbfcba5

  Copy full SHA for fbfcba5

• testing out htadmin fixes

  mmguero

  committed
  efd1800

  Copy full SHA for efd1800

Commits on Apr 4, 2024

• point back at master branch for htadmin

  mmguero

  committed
  19ac5e1

  Copy full SHA for 19ac5e1

• Bump Arkime to v5.1.0 (https://github.com/arkime/arkime/blob/2908ebf425ebbb47729ebf44ead5c9dad1bf11f1/CHANGELOG#L34-L62) and include ja4+ .so plugins for arkime capture (https://arkime.com/settings…

  Show description for 46e4859
  mmguero

  committed
  46e4859

  Copy full SHA for 46e4859

• make sure ja4+ plugin gets put into ini file correctly

  mmguero

  committed
  4d6e4ed

  Copy full SHA for 4d6e4ed

Commits on Apr 8, 2024

• be smarter about how we read the docker storage driver

  mmguero

  committed
  26f6528

  Copy full SHA for 26f6528

• remove capture_loss and stats from LOGSTASH_ZEEK_IGNORED_LOGS

  mmguero

  committed
  a6bf5f5

  Copy full SHA for a6bf5f5

• work in progress for idaholab#331, improvements to extracted_files_http_server.py and the setting/creation of ACL rules on hedgehog

  mmguero

  committed
  a02badb

  Copy full SHA for a02badb

• work in progress for idaholab#331, improvements to extracted_files_http_server.py and the setting/creation of ACL rules on hedgehog

  mmguero

  committed
  1a4969c

  Copy full SHA for 1a4969c

• work in progress for idaholab#331, improvements to extracted_files_http_server.py and the setting/creation of ACL rules on hedgehog

  mmguero

  committed
  c1f45a7

  Copy full SHA for c1f45a7

• resolve idaholab#455, allow user to specify prefix for dashboards' titles using the DASHBOARDS_PREFIX environment variable in dashboards-helper.env

  mmguero

  committed
  e4d5162

  Copy full SHA for e4d5162

• bump fluent-bit to v3.0.1

  mmguero

  committed
  e38b00a

  Copy full SHA for e38b00a

• for idaholab#453, allow specifying a maximum gigabytes threshold for prune_files.sh

  mmguero

  committed
  1a69873

  Copy full SHA for 1a69873

• for idaholab#453, allow specifying a maximum gigabytes threshold for prune_files.sh

  mmguero

  committed
  8379655

  Copy full SHA for 8379655

• for idaholab#453, allow specifying a maximum gigabytes threshold for prune_files.sh

  mmguero

  committed
  9517b9a

  Copy full SHA for 9517b9a

Commits on Apr 9, 2024

• for idaholab#453, work in progress for pruning zeek extracted files.sh

  mmguero

  committed
  8250577

  Copy full SHA for 8250577

• bump beats and logstash to v8.13.2

  mmguero

  committed
  80cfb67

  Copy full SHA for 80cfb67

• install.py tweaks

  mmguero

  committed
  a0fcc31

  Copy full SHA for a0fcc31

• documentation updates

  mmguero

  committed
  1a42db0

  Copy full SHA for 1a42db0

Commits on Apr 10, 2024

• for idaholab#456, adjustments to how Zeek intel files are generated in Malcolm containers

  Show description for 97ebeef
  mmguero

  committed
  97ebeef

  Copy full SHA for 97ebeef

• handle ZEEK_INTEL_REFRESH_CRON_EXPRESSION on Hedgehog Linux installations to allow for refreshing zeek intel on hedgehog as well: related (somewhat) to idaholab#456

  mmguero

  committed
  3e18b88

  Copy full SHA for 3e18b88

• documentation updates to go along with mmguero-dev/Malcolm@3e18b88

  mmguero

  committed
  cc846a0

  Copy full SHA for cc846a0

• documentation updates to go along with mmguero-dev/Malcolm@3e18b88

  mmguero

  committed
  b728879

  Copy full SHA for b728879

• documentation updates to go along with mmguero-dev/Malcolm@3e18b88

  mmguero

  committed
  dd92cef

  Copy full SHA for dd92cef

• for idaholab#456, use a unique string when generating the temporary zeek intel file

  mmguero

  committed
  154d3cd

  Copy full SHA for 154d3cd

• have zeek's crontab be in /opt/zeek so it can be edited in-place by non-root

  mmguero

  committed
  f2f4615

  Copy full SHA for f2f4615

• little bit better cleanup for zeek_intel_setup.sh

  mmguero

  committed
  ea11612

  Copy full SHA for ea11612

Commits on Apr 11, 2024

• for idaholab#421, review and update Windows prep and installation documentation

  mmguero

  committed
  c0bae29

  Copy full SHA for c0bae29

Commits on Apr 12, 2024

• bump idna to 3.7 in hedgehog interface build

  mmguero

  committed
  2ce8914

  Copy full SHA for 2ce8914

• bump fluent-bit to v3.0.2

  mmguero

  committed
  a12be91

  Copy full SHA for a12be91

Commits on Apr 17, 2024

• bump gunicorn to 22.0.0 for CVE-2024-1135

  mmguero

  committed
  641e0ef

  Copy full SHA for 641e0ef

Commits on Apr 18, 2024

• for idaholab#456, use zeekctl deploy rather than just zeekctl restart when kicking over zeek after intel update

  mmguero

  committed
  7d44153

  Copy full SHA for 7d44153

• for idaholab#415, beginning work on using DNS for populating hostnames in netbox (work in progress, probably broken)

  mmguero

  committed
  5439f6c

  Copy full SHA for 5439f6c

• for idaholab#415, beginning work on using DNS for populating hostnames in netbox (work in progress, probably broken)

  mmguero

  committed
  43f9087

  Copy full SHA for 43f9087

• for idaholab#415, beginning work on using DNS for populating hostnames in netbox (work in progress, probably broken)

  mmguero

  committed
  d24177b

  Copy full SHA for d24177b

Commits on Apr 22, 2024

• for idaholab#415, beginning work on using DNS for populating hostnames in netbox (work in progress, probably broken)

  mmguero

  committed
  7f8bc5b

  Copy full SHA for 7f8bc5b

• for idaholab#415, beginning work on using DNS for populating hostnames in netbox (work in progress, probably broken)

  mmguero

  committed
  9c44fa9

  Copy full SHA for 9c44fa9

• for idaholab#415, beginning work on using DNS for populating hostnames in netbox (work in progress, probably broken)

  mmguero

  committed
  0a6ac3f

  Copy full SHA for 0a6ac3f

• for idaholab#415, beginning work on using DNS for populating hostnames in netbox (work in progress, probably broken)

  mmguero

  committed
  fd2fbaa

  Copy full SHA for fd2fbaa

• for idaholab#415, beginning work on using DNS for populating hostnames in netbox (work in progress, probably broken)

  mmguero

  committed
  4ca6d87

  Copy full SHA for 4ca6d87

• for idaholab#415, beginning work on using DNS for populating hostnames in netbox (work in progress, probably broken)

  mmguero

  committed
  6647c1f

  Copy full SHA for 6647c1f

• for idaholab#415, beginning work on using DNS for populating hostnames in netbox (work in progress, probably broken)

  mmguero

  committed
  827227a

  Copy full SHA for 827227a

Commits on Apr 23, 2024

• documentation updates

  mmguero

  committed
  b669237

  Copy full SHA for b669237

• for idaholab#415, work on using DNS for populating hostnames in netbox

  mmguero

  committed
  9d72051

  Copy full SHA for 9d72051

Commits on Apr 24, 2024

• quiet a few warnings

  mmguero

  committed
  dc6bd91

  Copy full SHA for dc6bd91

Commits on Apr 25, 2024

• set category fields in default anomaly detectors to give a better breakdown of contributors, idaholab/Malcolm##464

  mmguero

  committed
  12d32eb

  Copy full SHA for 12d32eb

• for idaholab#415, added exception debugging for for populating hostnames in netbox

  mmguero

  committed
  212c590

  Copy full SHA for 212c590

• bump transform OSD version to 2.13.0

  mmguero

  committed
  b60715d

  Copy full SHA for b60715d

• for idaholab#415, realizing there's an issue with devices vs. VMs

  mmguero

  committed
  b7c674f

  Copy full SHA for b7c674f

• for idaholab#415, added debugging for for populating hostnames in netbox

  mmguero

  committed
  4acf58f

  Copy full SHA for 4acf58f

• for idaholab#415, work in progress on converting devices -> vms

  mmguero

  committed
  263525b

  Copy full SHA for 263525b

• for idaholab#415, work in progress on converting devices -> vms

  mmguero

  committed
  fad7372

  Copy full SHA for fad7372

• for idaholab#415, work in progress on converting devices -> vms

  mmguero

  committed
  faabbcf

  Copy full SHA for faabbcf

• for idaholab#415, work in progress on converting devices -> vms

  mmguero

  committed
  57c21bc

  Copy full SHA for 57c21bc

• for idaholab#415, work in progress on converting devices -> vms

  mmguero

  committed
  197c4a1

  Copy full SHA for 197c4a1

Commits on Apr 26, 2024

• for idaholab#415, work in progress on converting devices -> vms

  mmguero

  committed
  2e16a9d

  Copy full SHA for 2e16a9d

• make debug just a bit less verbose

  mmguero

  committed
  653a644

  Copy full SHA for 653a644

• bump arkime to v5.1.2 (https://github.com/arkime/arkime/releases)

  mmguero

  committed
  df9123a

  Copy full SHA for df9123a

• for idaholab#415, work in progress on converting devices -> vms

  mmguero

  committed
  41f8bd6

  Copy full SHA for 41f8bd6

• fix verbosity of logs for netbox

  mmguero

  committed
  8ca5572

  Copy full SHA for 8ca5572

Commits on Apr 29, 2024

• fluent bit 3.0.3

  mmguero

  committed
  354060b

  Copy full SHA for 354060b

• work in progress for idaholab#208, improvements to creation of templates, component templates, and dashboards on startup

  mmguero

  committed
  d348266

  Copy full SHA for d348266

• work in progress for idaholab#208, improvements to creation of templates, component templates, and dashboards on startup

  mmguero

  committed
  276502e

  Copy full SHA for 276502e

• work in progress for idaholab#208, improvements to creation of templates, component templates, and dashboards on startup

  mmguero

  committed
  4a74e7e

  Copy full SHA for 4a74e7e

• work in progress for idaholab#208, improvements to creation of templates, component templates, and dashboards on startup

  mmguero

  committed
  43954a8

  Copy full SHA for 43954a8

• work in progress for idaholab#208, improvements to creation of templates, component templates, and dashboards on startup

  mmguero

  committed
  f0104f7

  Copy full SHA for f0104f7

• restore image refererces for kubernetes

  mmguero

  committed
  a7368de

  Copy full SHA for a7368de

Commits on Apr 30, 2024

• Merge branch 'development' of https://github.com/mmguero-dev/Malcolm into v24.04.0_merge_cisagov

  mmguero

  committed
  b606169

  Copy full SHA for b606169