Code

Malcolm v24.12.0#615

Code

Merged

mmguero merged 55 commits intomainidaholab/Malcolm:mainfrom stagingidaholab/Malcolm:stagingCopy head branch name to clipboardDec 19, 2024

+1,374-514

Commits

Commits on Nov 19, 2024

• bump fluent-bit and yq

  mmguero

  committed
  a6f5d16

• fix issues with demo script waiting for things to become ready

  mmguero

  committed
  0f00532

• bump for v24.12.0 development

  mmguero

  committed
  24b3f2d

• added corelight/zeek-quasarrat-detector plugin

  mmguero

  committed
  152bd05

• added some other corelight packages for detecting various CVEs

  mmguero

  committed
  39d5f72

Commits on Nov 20, 2024

• Prompt user whether or not to enable live packet capture statistics

  mmguero

  committed
  b5738fe

• bump trivy-action

  mmguero

  committed
  0c9c7d8

• bump zeek to v7.0.4

  mmguero

  committed
  8312096

• Arkime to v5.5.1

  mmguero

  committed
  af94577

• for cisagov#496, bring netbox up to v4.1.6

  mmguero

  committed
  a162ecb

• for cisagov#496, bring netbox up to v4.1.6

  mmguero

  committed
  ee5b3bb

• for cisagov#496, getting permissions working in v4.1.6

  mmguero

  committed
  9bc75ea

• for cisagov#496, getting permissions working in v4.1.6 (still broken)

  mmguero

  committed
  69ef3ac

Commits on Nov 21, 2024

• Revert netbox permissions changes, going to make the old way work

  mmguero

  committed
  6415d7a

• for cisagov#496, getting permissions working in v4.1.6 (still broken)

  mmguero

  committed
  7a6d7ab

• debug script for netbox permissions

  mmguero

  committed
  efae87a

• for cisagov#496, getting permissions working in v4.1.6 (still broken)

  mmguero

  committed
  cb8e080

• for cisagov#496, getting permissions working in v4.1.6 (think we got it now)

  mmguero

  committed
  14f568c

Commits on Nov 22, 2024

• bump Logstash stask size to 2048k and make zeek.dns.trans_id an integer

  mmguero

  committed
  e7ccc0e

• Added debug message

  mmguero

  committed
  71f38df

• make trans_id a keyword again

  mmguero

  committed
  6a6cc49

• Fix cisagov#509

  Show description for 8cb4573
  mmguero

  committed
  8cb4573

• netbox to v4.1.7

  mmguero

  committed
  7144dba

Commits on Dec 2, 2024

• bump opensearch-py to v2.8.0 and fluent-bit to v3.2.2

  mmguero

  committed
  4bd8c49

Commits on Dec 3, 2024

• api updates

  mmguero

  committed
  0e8b77d

• increase max_clause_count to 8192; and expose the logstash api at / instead of /_node/stats

  mmguero

  committed
  e2cae17

Commits on Dec 4, 2024

• added ability to set extra arbitrary .env settings via configure script

  mmguero

  committed
  9c80ec9

• put some restrictions on being able to set --extra settings in configuration

  mmguero

  committed
  55a7d2a

• provide way for user to skip NetBox enrichment on a per-uploaded-PCAP basis

  mmguero

  committed
  6d048b3

Commits on Dec 9, 2024

• update capa to v8.0.0

  mmguero

  committed
  117d8c8

• yq to v4.44.6

  mmguero

  committed
  fdc5e6a

• capa v8.0.1

  mmguero

  committed
  83080c0

Commits on Dec 10, 2024

• fix severity tagging for signatures

  mmguero

  committed
  300cff7

• hide netbox tag from arkime session

  mmguero

  committed
  ff92110

Commits on Dec 11, 2024

• fix link

  mmguero

  committed
  09aaeb4

• evtx fields for template

  mmguero

  committed
  1008803

Commits on Dec 12, 2024

• evtx fields for template

  mmguero

  committed
  915367b

• #528, add simple readiness indicator to upload page

  mmguero

  committed
  c58ff2c

• documentation

  mmguero

  committed
  e76de32

• screenshot update

  mmguero

  committed
  d6d875e

• cisagov#528, add simple readiness indicator to upload page

  mmguero

  committed
  6694aa2

• more fields for cisagov#525, adding normalization for evtx

  mmguero

  committed
  d872f15

• more field normalization for cisagov#525, adding normalization for evtx

  mmguero

  committed
  6dc30e7

• cisagov#494, Mandiant threat intel source doesn't get split correctly when using JSON zeek log format

  mmguero

  committed
  18c4535

Commits on Dec 16, 2024

• bump elasticsearch and elasticsearch-dsl

  mmguero

  committed
  635e663

• bump netbox to v4.1.8

  mmguero

  committed
  3501e8f

Commits on Dec 17, 2024

• cisagov#532, provide configuration options for pulling from threat intel feeds

  mmguero

  committed
  32bd73b

• Zeek v7.0.5

  mmguero

  committed
  17d201b

• fix some JSON zeek intel.log parsing issues

  mmguero

  committed
  48b3013

• update screenshot

  mmguero

  committed
  af97c7e

Commits on Dec 18, 2024

• readme

  mmguero

  committed
  f172b95

• tweaks to ingest-stats API

  mmguero

  committed
  002a767

• Merge branch 'development' of https://github.com/mmguero-dev/Malcolm into staging

  mmguero

  committed
  c9bdda6

• documentation update

  mmguero

  committed
  1e8aa56

• Merge branch 'development' of https://github.com/mmguero-dev/Malcolm into staging

  mmguero

  committed
  d8dabe0