Code

Malcolm v3.0.0 release development#160

Code

Merged

mmguero merged 34 commits intomastercisagov/Malcolm:masterfrom topic/300mergecisagov/Malcolm:topic/300mergeCopy head branch name to clipboardFeb 16, 2021

+6,269-6,305

Commits

Commits on Feb 16, 2021

• bring idaholab/Malcolm up-to-date with cisagov/Malcolm

  mmguero

  committed
  7c21ee7

• Restore malcolm.fyi web page generation

  mmguero

  committed
  c15a18e

• ISO sha256sum placeholders

  mmguero

  committed
  4f551af

• working on idaholab#15, migrating to open distro for elastic

  mmguero

  committed
  c54ab7a

• bump yara to 4.0.5

  mmguero

  committed
  8440e9e

• update SHA256 sums

  mmguero

  committed
  e3a6e17

• don't show comments from config file in settings appl7

  mmguero

  committed
  7c78f0b

• use mmguero-dev/zeek-community-id so it will build with docker 3.0.12

  mmguero

  committed
  af4de5f

• somehow the extracted file http server stuff didn't make it into this branch

  mmguero

  committed
  abacd82

• expose HTTP file server port

  mmguero

  committed
  929d271

• added filemon virtual_host

  mmguero

  committed
  5674c30

• added depends for nginx upstream

  mmguero

  committed
  53faf5e

• set hostname to file-monitor for filemon

  mmguero

  committed
  889b0ec

• Allow overriding cloned version of a plugin with a specific branch, and for corelight/bro-xor-exe-plugin use release 1.2 (pre commit corelight/zeek-xor-exe-plugin@a86f595) for Zeek 3.0.x and the la…

  Show description for 69da343
  mmguero

  committed
  69da343

• use corelight/zeek-community-id build 3.0.0 for zeek 3.0.x

  mmguero

  committed
  bddc477

• put URLs in quotes for zeek clone

  mmguero

  committed
  48682a1

• temporarily remove the 'Top Actions and Results by Service' visualization (of type kbn_sankey) as it is not compatible with the current version of Kibana being used. tracking externally at uniberg/…

  Show description for 947ba6b
  mmguero

  committed
  947ba6b

• updates for open distro-based images for using non-1000 UIDs

  mmguero

  committed
  04528ff

• updates for open distro-based images for using non-1000 UIDs

  mmguero

  committed
  e8f5bd8

• tweaks to iso for 3.0.0

  mmguero

  committed
  4de70c1

• remove unnecessary package

  mmguero

  committed
  c938be3

• updated dashboards for new Kibana for Malcolm 3.0.0

  mmguero

  committed
  326a760

• fix wording of prompt for email account inforrmation for alerts

  mmguero

  committed
  6f8ea42

• fix some dashboards where i lost a comma in the JSON

  mmguero

  committed
  af8a928

• updates to Arkime startup to try to fix race condition with fields getting created

  mmguero

  committed
  a28d660

• update auditbeat.yml rules to ignore firefox caching stuff (reduce noise)

  mmguero

  committed
  5ab4eb4

• fix spacing in WISE field definition

  mmguero

  committed
  c9ed158

• fixed a few dashboards (tag cloud visualizations didn't come over correctly)

  mmguero

  committed
  d11aa52

• continuation of the idea for commit 045d7e6, for Logstash the STDIN doesn't work if we are dropping privs, which we don't need to do anyway. So differentiate between elastic and logstash for storin…

  Show description for ec20e0c
  mmguero

  committed
  ec20e0c

• minor tweaks to cloud visualizations

  mmguero

  committed
  8ef8512

• updated local.zeek for sensor image to include ICSNPP parsers

  mmguero

  committed
  fa82b3f

• Revert "updated local.zeek for sensor image to include ICSNPP parsers"

  Show description for bf7c2ed
  mmguero

  committed
  bf7c2ed

• updated local.zeek for sensor image to include ICSNPP parsers

  mmguero

  committed
  a3493fb

• Updates to documentation and comments in preparation for 3.0.0 release

  mmguero

  committed
  e37eea8