Code

Malcolm v24.12.0#615

Code

Merged

mmguero merged 55 commits intomainidaholab/Malcolm:mainfrom stagingidaholab/Malcolm:stagingCopy head branch name to clipboardDec 19, 2024

+1,374-514

Commits

Commits on Nov 19, 2024

• bump fluent-bit and yq

  mmguero

  committed
  a6f5d16

  Copy full SHA for a6f5d16

• fix issues with demo script waiting for things to become ready

  mmguero

  committed
  0f00532

  Copy full SHA for 0f00532

• bump for v24.12.0 development

  mmguero

  committed
  24b3f2d

  Copy full SHA for 24b3f2d

• added corelight/zeek-quasarrat-detector plugin

  mmguero

  committed
  152bd05

  Copy full SHA for 152bd05

• added some other corelight packages for detecting various CVEs

  mmguero

  committed
  39d5f72

  Copy full SHA for 39d5f72

Commits on Nov 20, 2024

• Prompt user whether or not to enable live packet capture statistics

  mmguero

  committed
  b5738fe

  Copy full SHA for b5738fe

• bump trivy-action

  mmguero

  committed
  0c9c7d8

  Copy full SHA for 0c9c7d8

• bump zeek to v7.0.4

  mmguero

  committed
  8312096

  Copy full SHA for 8312096

• Arkime to v5.5.1

  mmguero

  committed
  af94577

  Copy full SHA for af94577

• for cisagov#496, bring netbox up to v4.1.6

  mmguero

  committed
  a162ecb

  Copy full SHA for a162ecb

• for cisagov#496, bring netbox up to v4.1.6

  mmguero

  committed
  ee5b3bb

  Copy full SHA for ee5b3bb

• for cisagov#496, getting permissions working in v4.1.6

  mmguero

  committed
  9bc75ea

  Copy full SHA for 9bc75ea

• for cisagov#496, getting permissions working in v4.1.6 (still broken)

  mmguero

  committed
  69ef3ac

  Copy full SHA for 69ef3ac

Commits on Nov 21, 2024

• Revert netbox permissions changes, going to make the old way work

  mmguero

  committed
  6415d7a

  Copy full SHA for 6415d7a

• for cisagov#496, getting permissions working in v4.1.6 (still broken)

  mmguero

  committed
  7a6d7ab

  Copy full SHA for 7a6d7ab

• debug script for netbox permissions

  mmguero

  committed
  efae87a

  Copy full SHA for efae87a

• for cisagov#496, getting permissions working in v4.1.6 (still broken)

  mmguero

  committed
  cb8e080

  Copy full SHA for cb8e080

• for cisagov#496, getting permissions working in v4.1.6 (think we got it now)

  mmguero

  committed
  14f568c

  Copy full SHA for 14f568c

Commits on Nov 22, 2024

• bump Logstash stask size to 2048k and make zeek.dns.trans_id an integer

  mmguero

  committed
  e7ccc0e

  Copy full SHA for e7ccc0e

• Added debug message

  mmguero

  committed
  71f38df

  Copy full SHA for 71f38df

• make trans_id a keyword again

  mmguero

  committed
  6a6cc49

  Copy full SHA for 6a6cc49

• Fix cisagov#509

  Show description for 8cb4573
  mmguero

  committed
  8cb4573

  Copy full SHA for 8cb4573

• netbox to v4.1.7

  mmguero

  committed
  7144dba

  Copy full SHA for 7144dba

Commits on Dec 2, 2024

• bump opensearch-py to v2.8.0 and fluent-bit to v3.2.2

  mmguero

  committed
  4bd8c49

  Copy full SHA for 4bd8c49

Commits on Dec 3, 2024

• api updates

  mmguero

  committed
  0e8b77d

  Copy full SHA for 0e8b77d

• increase max_clause_count to 8192; and expose the logstash api at / instead of /_node/stats

  mmguero

  committed
  e2cae17

  Copy full SHA for e2cae17

Commits on Dec 4, 2024

• added ability to set extra arbitrary .env settings via configure script

  mmguero

  committed
  9c80ec9

  Copy full SHA for 9c80ec9

• put some restrictions on being able to set --extra settings in configuration

  mmguero

  committed
  55a7d2a

  Copy full SHA for 55a7d2a

• provide way for user to skip NetBox enrichment on a per-uploaded-PCAP basis

  mmguero

  committed
  6d048b3

  Copy full SHA for 6d048b3

Commits on Dec 9, 2024

• update capa to v8.0.0

  mmguero

  committed
  117d8c8

  Copy full SHA for 117d8c8

• yq to v4.44.6

  mmguero

  committed
  fdc5e6a

  Copy full SHA for fdc5e6a

• capa v8.0.1

  mmguero

  committed
  83080c0

  Copy full SHA for 83080c0

Commits on Dec 10, 2024

• fix severity tagging for signatures

  mmguero

  committed
  300cff7

  Copy full SHA for 300cff7

• hide netbox tag from arkime session

  mmguero

  committed
  ff92110

  Copy full SHA for ff92110

Commits on Dec 11, 2024

• fix link

  mmguero

  committed
  09aaeb4

  Copy full SHA for 09aaeb4

• evtx fields for template

  mmguero

  committed
  1008803

  Copy full SHA for 1008803

Commits on Dec 12, 2024

• evtx fields for template

  mmguero

  committed
  915367b

  Copy full SHA for 915367b

• #528, add simple readiness indicator to upload page

  mmguero

  committed
  c58ff2c

  Copy full SHA for c58ff2c

• documentation

  mmguero

  committed
  e76de32

  Copy full SHA for e76de32

• screenshot update

  mmguero

  committed
  d6d875e

  Copy full SHA for d6d875e

• cisagov#528, add simple readiness indicator to upload page

  mmguero

  committed
  6694aa2

  Copy full SHA for 6694aa2

• more fields for cisagov#525, adding normalization for evtx

  mmguero

  committed
  d872f15

  Copy full SHA for d872f15

• more field normalization for cisagov#525, adding normalization for evtx

  mmguero

  committed
  6dc30e7

  Copy full SHA for 6dc30e7

• cisagov#494, Mandiant threat intel source doesn't get split correctly when using JSON zeek log format

  mmguero

  committed
  18c4535

  Copy full SHA for 18c4535

Commits on Dec 16, 2024

• bump elasticsearch and elasticsearch-dsl

  mmguero

  committed
  635e663

  Copy full SHA for 635e663

• bump netbox to v4.1.8

  mmguero

  committed
  3501e8f

  Copy full SHA for 3501e8f

Commits on Dec 17, 2024

• cisagov#532, provide configuration options for pulling from threat intel feeds

  mmguero

  committed
  32bd73b

  Copy full SHA for 32bd73b

• Zeek v7.0.5

  mmguero

  committed
  17d201b

  Copy full SHA for 17d201b

• fix some JSON zeek intel.log parsing issues

  mmguero

  committed
  48b3013

  Copy full SHA for 48b3013

• update screenshot

  mmguero

  committed
  af97c7e

  Copy full SHA for af97c7e

Commits on Dec 18, 2024

• readme

  mmguero

  committed
  f172b95

  Copy full SHA for f172b95

• tweaks to ingest-stats API

  mmguero

  committed
  002a767

  Copy full SHA for 002a767

• Merge branch 'development' of https://github.com/mmguero-dev/Malcolm into staging

  mmguero

  committed
  c9bdda6

  Copy full SHA for c9bdda6

• documentation update

  mmguero

  committed
  1e8aa56

  Copy full SHA for 1e8aa56

• Merge branch 'development' of https://github.com/mmguero-dev/Malcolm into staging

  mmguero

  committed
  d8dabe0

  Copy full SHA for d8dabe0