93b9dfd471
Fix http_proto for missing host, update tests for missing host fixes
2025-04-17 16:38:24 -04:00
8d726b909b
Add network size column
2025-03-13 11:10:28 -04:00
d7f2e4d150
Merge pull request #40 from activecm/selinux-tamper-removal
...
Remove SELinux Tampering for QA
2025-03-10 21:58:01 -06:00
e5bbcf3f54
Remove SELinux neutering for QA
2025-03-10 21:46:48 -06:00
73e53b622a
Set max for threat intel datasize
2025-03-10 15:19:12 -06:00
8e994f4d15
Omit parts of env from output
2025-03-10 16:34:05 -04:00
c6019168ba
Merge branch 'raresig-fix' into config_update
2025-03-10 15:57:26 -04:00
565b3752eb
Merge branch 'config_update' into raresig-fix
2025-03-10 13:29:54 -04:00
8e8c040dd5
Rolling files updates ( #39 )
...
* Limit number of days to import for rolling datasets
* Fix breaking imports when import was interrupted
* Remove debug output
---------
Co-authored-by: Naomi Kramer <naomi@activecountermeasures.com >
2025-03-07 12:47:35 -07:00
24d86252bd
Cleanup output
2025-03-06 16:24:50 -05:00
50169bd4b7
Update subnet_test.go
2025-03-04 09:51:05 -07:00
786c6353b4
Fix duplicated SNI/IP long connections
2025-03-03 15:56:18 -05:00
3a362cdf9a
Store import version in imports table
2025-02-27 15:01:23 -05:00
07297954f7
Update subnet.go
2025-02-16 18:43:20 -07:00
70c8cb7f3f
updated impact category score functions to use float64
...
Co-Authored-By: Naomi Kramer <naomiagoddard@gmail.com >
2025-02-05 11:10:57 -07:00
ec8aae3f24
Update config.hjson
2025-02-04 17:34:49 -07:00
3e109090c0
Update config.hjson
2025-02-04 16:58:20 -07:00
ae9451e9a0
Remove unused columns
2025-02-04 14:52:18 -05:00
3039bfb90f
Remove storing dns conns in arrays, Fix historical first seen dns lag
2025-02-04 14:12:12 -05:00
b361c679f7
Fix zeek count parsing from TSV files
2025-02-03 15:19:54 -05:00
17b37106a2
Fix datasets exiting import if hour is empty
2025-01-29 14:03:36 -05:00
0d117e4701
fix column name
2025-01-23 14:50:52 -05:00
f7ac2cec3d
Add ability to mark datasets as sample datasets
2025-01-23 14:14:12 -05:00
dbf3447df4
Update pointer
2025-01-20 16:20:59 -05:00
ea8e10a744
Misc fixes
2025-01-17 12:19:55 -05:00
b4140df23e
Add clickhouse credentials
2025-01-13 15:35:20 -05:00
6ea362adfd
Update zeek count types and fix tests
2025-01-08 17:04:29 -05:00
38ab19bdb7
WIP update some field types
2025-01-08 14:53:13 -05:00
8e9b3d1403
Updating some fields to uint64
2025-01-07 23:59:32 -07:00
46cabd4e77
Write missing host entries to http to populate http_proto
2024-12-05 17:04:54 -05:00
eb131e0189
Update subnet.go
2024-12-01 23:57:15 -07:00
5ab4f1d5e6
changes to config subnet validation and testing
2024-11-21 00:01:19 -07:00
9836c56308
updates to score thresholds validation tags
2024-11-18 02:40:47 -07:00
98fd5a9b9e
Updated beacon weights validation for config
2024-11-13 19:41:18 -07:00
74ab9d2f77
added json tags to database struct
2024-10-01 09:22:41 -06:00
65d233525c
Remove error return from GetDefaultConfig
...
Co-Authored-By: Liza Tsibur <liza@activecountermeasures.com >
2024-09-13 17:23:18 -04:00
ebd5186d7e
fixed config and util tests, updated subnet related functions
...
Co-Authored-By: Naomi Kramer <naomiagoddard@gmail.com >
2024-09-12 21:03:22 -06:00
d45bd06a0f
updated read file config test and subnet tests
2024-09-12 00:39:19 -06:00
3167dbce54
Extend subnet type to read/write from db, update tests
...
Co-Authored-By: Liza Tsibur <liza@activecountermeasures.com >
2024-09-11 17:26:10 -04:00
392fd1679b
Update on config structure, functionality, and tests
...
Co-Authored-By: Naomi Kramer <naomiagoddard@gmail.com >
2024-09-10 23:09:23 -06:00
e5fbb07068
Update sshprep to use rsa-sha2-512
...
Co-Authored-By: William Stearns <3538265+william-stearns@users.noreply.github.com >
2024-08-19 12:15:50 -04:00
e4a03e6797
Update permanent URL for downloading the installer script. ( #23 )
2024-08-19 10:54:05 -04:00
c517e7ac36
Bump github.com/docker/docker in the go_modules group across 1 directory ( #17 )
...
Bumps the go_modules group with 1 update in the / directory: [github.com/docker/docker](https://github.com/docker/docker ).
Updates `github.com/docker/docker` from 26.1.4+incompatible to 26.1.5+incompatible
- [Release notes](https://github.com/docker/docker/releases )
- [Commits](https://github.com/docker/docker/compare/v26.1.4...v26.1.5 )
---
updated-dependencies:
- dependency-name: github.com/docker/docker
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Liza Tsibur <liza@activecountermeasures.com >
2024-08-14 14:12:51 -06:00
1dae9faac1
Adjust RITA container dependency to validate health status of ClickHouse ( #19 )
...
* Adjust RITA container dependency to validate health status of ClickHouse before launch; adjust HEALTHCHECK timing for ClickHouse to minimize startup delay
* Update docker-compose.prod.yml
Co-Authored-By: Liza Tsibur <liza@activecountermeasures.com >
---------
Co-authored-by: Naomi Kramer <naomi@activecountermeasures.com >
Co-authored-by: Liza Tsibur <liza@activecountermeasures.com >
2024-08-14 16:02:04 -04:00
ffb694a5af
Replace ansibles apt-key module (deprecated) ( #21 )
...
* Split prep and post tasks into their own playbook
* all playbooks in one command
* Replace ansibles apt-key module (deprecated)
---------
Co-authored-by: Naomi Kramer <naomi@activecountermeasures.com >
Co-authored-by: Liza Tsibur <liza@activecountermeasures.com >
2024-08-14 13:55:02 -06:00
530c835daa
Display prevalence as a fraction
...
Co-Authored-By: Liza Tsibur <liza@activecountermeasures.com >
2024-08-14 15:37:33 -04:00
d3b5b3d2d2
Split prep and post tasks into their own playbook ( #16 )
...
* Split prep and post tasks into their own playbook
* all playbooks in one command
* Include install_pre and install_post playbooks in installer generator
---------
Co-authored-by: Naomi Kramer <naomi@activecountermeasures.com >
2024-08-14 15:02:15 -04:00
8cec22dc56
Bump github.com/docker/docker in the go_modules group across 1 directory ( #6 )
...
Bumps the go_modules group with 1 update in the / directory: [github.com/docker/docker](https://github.com/docker/docker ).
Updates `github.com/docker/docker` from 26.1.3+incompatible to 26.1.4+incompatible
- [Release notes](https://github.com/docker/docker/releases )
- [Commits](https://github.com/docker/docker/compare/v26.1.3...v26.1.4 )
---
updated-dependencies:
- dependency-name: github.com/docker/docker
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Liza Tsibur <liza@activecountermeasures.com >
2024-08-02 14:04:08 -06:00
8c43e445c4
Fixed importing for added hour-format files to same directory, added support for corelight format file names
...
Co-Authored-By: Naomi Kramer <naomiagoddard@gmail.com >
2024-08-02 13:35:13 -06:00
5d22b1c82b
Make CreateServerDBTables public
...
Co-Authored-By: Liza Tsibur <liza@activecountermeasures.com >
2024-08-01 15:24:09 -04:00
Naomi Kramer