Security Onion 2.4.40-20240116

Download the ISO

https://download.securityonion.net/file/securityonion/securityonion-2.4.40-20240116.iso

What's Changed

• Update VERSION by @TOoSmOotH in #11778
• FIX: SOC Hunt HTTP EXE query #11784 by @dougburks in #11785
• avoid startup error by @jertel in #11792
• improve timing of responses by @jertel in #11809
• Merge hoftix back to 2.4/dev by @jertel in #11832
• add support for nested keys by @jertel in #11835
• Jertel/hfm by @jertel in #11855
• Ignore analyzer log by @weslambert in #11891
• Add certificate fingerprints by @weslambert in #11896
• FIX: Update NIDS rule.reference in common.nids pipeline #11846 by @dougburks in #11897
• Sublime Platform Analyzer by @weslambert in #11945
• Add eml observable type by @weslambert in #11950
• Fix indentation for rule_results by @weslambert in #11954
• Sublime Analyzer Documentation by @weslambert in #11955
• Merge Main into Dev by @TOoSmOotH in #11957
• FIX: Documentation links under SOC - Administration - Configuration need updating #11828 by @dougburks in #11960
• Remove Curator close configuration by @weslambert in #11967
• grid page enhancements by @jertel in #11970
• fix import stats by @jertel in #11981
• Remove Curator by @weslambert in #11990
• upgrade cla action by @jertel in #11998
• FIX: Update clear scripts #11991 by @dougburks in #12001
• Additional Integrations #2 by @weslambert in #12000
• more log false alarms by @jertel in #12012
• fix extra_hosts by @m0duspwnens in #12019
• Add force option to integrations by @weslambert in #12020
• FIX: Update dashboard and hunt query for firewall logs #12021 by @dougburks in #12023
• Fix receivers by @m0duspwnens in #12037
• exclude log false positives by @jertel in #12047
• 2.4/dev Analyzers for Threatfox, MalwareBazaar, Echotrail, Elasticsearch by @HoangLongVu in #12003
• FIX: Update dashboard and hunt query for firewall logs #12021 by @dougburks in #12048
• Fix analyzer images by @weslambert in #12052
• 2.4/main by @TOoSmOotH in #12053
• Curator Remove Changes by @weslambert in #12062
• Ignore Curator logs by @weslambert in #12063
• only run the file.absent state if there are files to delete by @jertel in #12067
• exclude transient influxdb error by @jertel in #12071
• show last highstate date/time on grid metrics screen; expose maxUploa… by @jertel in #12090
• Change salt-minion startup_states by @m0duspwnens in #12095
• 2.4/main by @TOoSmOotH in #12102
• Add brasero to packages list for SOD by @reyesj2 in #12109
• Issue/12033 by @m0duspwnens in #12116
• enable startup_states: highstate on managers during setup and not wit… by @m0duspwnens in #12118
• Update so-raid-status for SM based appliances by @TOoSmOotH in #12120
• Fix/fim by @defensivedepth in #12138
• Fix/fleet reset by @defensivedepth in #12141
• Salt3006.5 by @m0duspwnens in #12144
• exempt transient license check errors by @jertel in #12149
• Update so-functions by @TOoSmOotH in #12154
• Fix reinstall & reset stability by @defensivedepth in #12151
• Update soup by @TOoSmOotH in #12155
• Upgrade Navigator and fix Playbook layer by @defensivedepth in #12156
• Additional Supported Integrations #3 by @weslambert in #12160
• Check Kibana API not Web by @defensivedepth in #12161
• Make sure optional integration pillar values are merged with defaults by @weslambert in #12164
• Remove old nav layers by @defensivedepth in #12170
• Merge 2.4 dev by @weslambert in #12171
• Add endpoint metrics templates by @weslambert in #12173
• FIX: OTX pulses template by @weslambert in #12176
• Needsrestarted by @m0duspwnens in #12192

New Contributors

• @HoangLongVu made their first contribution in #12003

Full Changelog: 2.4.30-20231228...2.4.40-20240116