Code

Malcolm v24.01.0#295

Code

Merged

mmguero merged 90 commits intomaincisagov/Malcolm:mainfrom v24.01.0_merge_cisagovcisagov/Malcolm:v24.01.0_merge_cisagovCopy head branch name to clipboardJan 17, 2024

+16,961-4,233

Commits

Commits on Dec 21, 2023

• bump development for v24.01.0

  mmguero

  committed
  08283ac

• for idaholab#288, file carve download with password-protected zip file

  mmguero

  committed
  7bb5c1d

• for idaholab#288, file carve download with password-protected zip file

  mmguero

  committed
  34aeea0

• simplified by removing EXTRACTED_FILE_HTTP_SERVER_ENCRYPT variable, just base it off of whether or not EXTRACTED_FILE_HTTP_SERVER_KEY is set (idaholab#288)

  mmguero

  committed
  4667291

• updated documentation for carved file download (idaholab#288)

  mmguero

  committed
  575bc38

• updated documentation for carved file download (idaholab#288)

  mmguero

  committed
  d045cb2

Commits on Jan 2, 2024

• Add Landing Page Information

  

  n8hacks

  authored and

  mmguero

  committed
  dfaf9a4

• landingpage work in progress (idaholab#252)

  mmguero

  committed
  fde3112

• landingpage work in progress (idaholab#252)

  mmguero

  committed
  c149fd6

• landingpage work in progress (idaholab#252)

  mmguero

  committed
  31d87a0

• landingpage work in progress (idaholab#252)

  mmguero

  committed
  b8bae9a

• landingpage work in progress (idaholab#252)

  mmguero

  committed
  01d73c5

• landingpage work in progress (idaholab#252)

  mmguero

  committed
  4160edf

• landingpage work in progress (idaholab#252)

  mmguero

  committed
  618fc17

• landingpage work in progress (idaholab#252)

  mmguero

  committed
  7c7156d

• landingpage work in progress (idaholab#252)

  mmguero

  committed
  7af5ee6

• landingpage work in progress (idaholab#252)

  mmguero

  committed
  48b5a51

Commits on Jan 3, 2024

• bump fluent-bit version

  mmguero

  committed
  b673818

• idaholab#321, more consistently differentiate between uploaded and live-captured traffic

  mmguero

  committed
  355601d

• Merge branch 'development' of https://github.com/mmguero-dev/Malcolm into landingpage

  mmguero

  committed
  673078e

Commits on Jan 4, 2024

• Fix idaholab#323, suricata-update was failing because it needed to be told to use the suricata binary without setcap privileges assigned to it

  mmguero

  committed
  ea28847

• landingpage rework (idaholab#252)

  mmguero

  committed
  914be26

• landingpage work in progress (idaholab#252)

  mmguero

  committed
  3bd81a6

• landingpage work in progress (idaholab#252)

  mmguero

  committed
  86012f0

• landingpage work in progress (idaholab#252)

  mmguero

  committed
  cfc29f7

• file carve download stream AES zip (idaholab#288)

  mmguero

  committed
  9a941dc

• landingpage work in progress (idaholab#252)

  mmguero

  committed
  4ca8d99

• work in progress for idaholab#288

  mmguero

  committed
  abd514a

• work in progress for idaholab#288

  mmguero

  committed
  bc36146

• work in progress for idaholab#288

  mmguero

  committed
  9f9775e

• pin netbox-initializers at v3.6.0 until we update netbox to v3.7.0

  mmguero

  committed
  426dcbf

• pin netbox-initializers at v3.6.0 until we update netbox to v3.7.0

  mmguero

  committed
  9486b3a

• directly use the netbox-community/Device-Type-Library-Import script to load netbox device type library

  mmguero

  committed
  025b406

• directly use the netbox-community/Device-Type-Library-Import script to load netbox device type library

  mmguero

  committed
  81f6150

• remove a device type directory that's breaking the database key integrity requirements

  mmguero

  committed
  c6298b5

Commits on Jan 5, 2024

• fix link for arkime from dashboards

  mmguero

  committed
  5d701df

• landingpage work in progress (idaholab#252)

  mmguero

  committed
  1adea3b

• landingpage work in progress (idaholab#252)

  mmguero

  committed
  46e2166

• drop netbox back to v3.6.7 while I work out some things for the upgrade

  mmguero

  committed
  aa716dd

• more consistently differentiate between uploaded and live-captured traffic idaholab#321 WIP

  mmguero

  committed
  301ff56

• more consistently differentiate between uploaded and live-captured traffic idaholab#321 WIP

  mmguero

  committed
  58c94f3

• more consistently differentiate between uploaded and live-captured traffic idaholab#321 WIP

  mmguero

  committed
  1187798

• more consistently differentiate between uploaded and live-captured traffic idaholab#321 WIP

  mmguero

  committed
  3846467

• Fix idaholab#324 (time sync from hedgehog to Malcolm opensearch instance not working) by building htpdate from source with make https for ISO installers rather than installing version from the pa…

  Show description for e0784e9
  mmguero

  committed
  e0784e9

• idaholab#324 github workflow update

  mmguero

  committed
  3b4baf3

• Fix idaholab#322, update document lookup APIs to search either network or host data

  mmguero

  committed
  d4c99b0

• documentation update

  mmguero

  committed
  7b803d4

• make malcolm landing page the default for the firefox launcher on the desktop (idaholab#252)

  mmguero

  committed
  5f8726d

Commits on Jan 8, 2024

• idaholab#318, third party logs are not parsed correctly from fluentbit -> fluentd aggregator -> Malcolm

  mmguero

  committed
  8e714bb

• idaholab#318, third party logs are not parsed correctly from fluentbit -> fluentd aggregator -> Malcolm

  mmguero

  committed
  41271fe

• idaholab#290, add 'all files except common plain text files' to file carving option for Malcolm

  mmguero

  committed
  d48c68f

• idaholab#290, add 'all files except common plain text files' to file carving option for Malcolm

  mmguero

  committed
  810e938

• idaholab#290, add 'all files except common plain text files' to file carving option for Malcolm

  mmguero

  committed
  1ca00e0

• idaholab#290, add 'all files except common plain text files' to file carving option for Malcolm

  mmguero

  committed
  9c9f39c

• fix idaholab#314, Suricata Alerts dashboard 'tags' visualization is useless

  mmguero

  committed
  01e2323

Commits on Jan 9, 2024

• update prompt to reflect URL is allow for htpdate sync (idaholab#324)

  mmguero

  committed
  93bf0a4

• consistenly populate MALCOLM_VERSION, BUILD_DATE, VCS_REVISION in docker images

  mmguero

  committed
  50cc233

• landingpage work in progress (idaholab#252)

  mmguero

  committed
  fafa2f1

Commits on Jan 10, 2024

• extract build version, build timestamp, and VCS revision for all images

  mmguero

  committed
  ec8882f

• only specify --node and/or --host for live capture arkime if those variables are specified idaholab#321

  mmguero

  committed
  7757497

• update version API to include opensearch health under opensearch

  mmguero

  committed
  3546e67

• allow blank arkime node host for live capture as it will default to hostname (idaholab#321)

  mmguero

  committed
  0228de1

• allow blank arkime node name for uploaded capture as it will default to hostname (idaholab#321)

  mmguero

  committed
  45f8e96

• rename 'capture source' to 'log source' in some dashboards

  mmguero

  committed
  47679fc

• documentation update

  mmguero

  committed
  c184812

• documentation update

  mmguero

  committed
  4133a74

• fix to install.py not using the --opensearch command line argument as a default correctly; also remove unused argument

  mmguero

  committed
  b451328

• allow overriding destination index for Zeek and Suricata logs, work in progress, idaholab#313

  mmguero

  committed
  92480a3

• allow overriding destination index for Zeek and Suricata logs, work in progress, idaholab#313

  mmguero

  committed
  16e223e

• allow overriding destination index for Zeek and Suricata logs, work in progress, idaholab#313

  mmguero

  committed
  0b535f3

Commits on Jan 11, 2024

• don't copy .example env files to every config directory

  mmguero

  committed
  7733c72

• customizing index settings work in progress, idaholab#313 and idaholab#283

  mmguero

  committed
  4ae1187

• customizing index settings work in progress, idaholab#313 and idaholab#283

  mmguero

  committed
  d9e00b9

• customizing index settings work in progress, idaholab#313 and idaholab#283

  mmguero

  committed
  86e3598

• customizing index settings work in progress, idaholab#313 and idaholab#283

  mmguero

  committed
  91569c3

• customizing index settings work in progress, idaholab#313 and idaholab#283

  mmguero

  committed
  ea7cc3d

Commits on Jan 15, 2024

• remove unused file

  mmguero

  committed
  c3027ac

• customizing index settings work in progress, idaholab#313

  mmguero

  committed
  4aec3a4

• documentation

  mmguero

  committed
  bc2d490

• customizing index settings work in progress, idaholab#313

  mmguero

  committed
  4e39e89

• bump fluent-bit version to v2.2.2

  mmguero

  committed
  58ba3f2

• bump beats and logstash to v8.11.4

  mmguero

  committed
  564f732

• restore kubernetes image references

  mmguero

  committed
  7d87f2a

Commits on Jan 16, 2024

• customizing index settings work in progress, idaholab#313

  mmguero

  committed
  b002f2f

• customizing index settings work in progress, idaholab#313

  mmguero

  committed
  1c0344b

• Documentation

  mmguero

  committed
  ce95e35

• update alpine to v3.19 for docker image bases, also minor documentation tweaks

  mmguero

  committed
  204d5b8

• revert NGINX to alpine v3.18 as we were getting lib SSL symbol errors with v3.19

  mmguero

  committed
  3a471ec

Commits on Jan 17, 2024

• Merge branch 'development' of https://github.com/mmguero-dev/Malcolm into v24.01.0_merge_cisagov

  mmguero

  committed
  0e440d8

• adjust link for cisagov fork

  mmguero

  committed
  2a051fa