Merge pull request #522 from Security-Onion-Solutions/2.4/dev

2.4.60

so-elastic-fleet-package-registry/Dockerfile

@@ -23,7 +23,7 @@ RUN chmod +x /scripts/supported-integrations.sh && bash /scripts/supported-integ
 # Cleanup unneeded packages, keeping the two most recent versons of each one
 # Except for endpoint packages, keep all versions
 RUN cd /packages/package-storage/ \
-&& rm -rf suricata-* zeek-* dga-* endpoint*dev* endpoint*next* \
+&& rm -rf suricata-* zeek-* dga-* endpoint*dev* endpoint*next* *preview* *beta* \
 && cd /packages/package-storage/ && LIST=$(ls --ignore="endpoint-*" | awk -F'[-]' '{print $1}' | sort | uniq ) \
 && for item in $LIST; do ls $item-*.zip | cut -d '-' -f 2 | tr - \~ | sort -V | tr \~ - | head -n-2 | xargs -I {} echo "$item-"{} |  xargs -r rm -fr; done
 

so-elastic-fleet-package-registry/scripts/supported-integrations.txt

@@ -32,6 +32,7 @@ google_workspace-
 http_endpoint-
 httpjson-
 iis-
+journald-
 juniper-
 juniper_srx-
 kafka_log-

so-nginx/Dockerfile

@@ -36,7 +36,7 @@ HEALTHCHECK --interval=5m --timeout=3s CMD curl --fail http://localhost/ || exit
 LABEL maintainer "Security Onion Solutions, LLC"
 LABEL description="Security Onion Core Functions Docker"
 
-ARG CYBERCHEF_VERSION=10.6.0
+ARG CYBERCHEF_VERSION=10.8.2
 
 RUN mkdir -p /opt/socore/html/navigator
 COPY --from=navigator-builder /attack-navigator/nav-app/dist /opt/socore/html/navigator

so-suricata/Dockerfile

@@ -27,7 +27,7 @@ RUN dnf -y install autoconf automake diffutils file-devel gcc gcc-c++ git \
                lua-devel lz4-devel make nss-devel pcre-devel pcre2-devel pkgconfig \
                python3-devel python3-sphinx python3-yaml sudo which cargo \
                zlib-devel luajit-devel cargo && cargo install --force cbindgen
-ENV SURIVERSION=7.0.3
+ENV SURIVERSION=7.0.4
 RUN mkdir /suricata
 
 WORKDIR /suricata