Malcolm v23.12.0

[mmguero]

Malcolm v23.12.0 is a feature release with many improvements, updates and fixes

https://github.com/cisagov/Malcolm/compare/v23.10.0...v23.12.0

• Features and enhancements
  • replace kbn_sankey_vis with vega or transform (idaholab/Malcolm#147)
  • address issues with NetBox database and Logstash's NetBox cache (idaholab/Malcolm#259)
  • integrate nsacyber/ELITEWOLF signatures into default rule set CISA (idaholab/Malcolm#275)
  • improve error messages for PCAP/artifact processing beyond just icons (idaholab/Malcolm#276)
  • option to auto-create "catch-all" NetBox IPAM prefixes for private IP space (idaholab/Malcolm#279)
  • use prefix.description instead of VRF for identifying subnets in NetBox (idaholab/Malcolm#280)
  • allow customizing Arkime's freeSpaceG setting (for PCAP deletion) in an environment variable (idaholab/Malcolm#285)
  • replace master/slave with client/server when parsing modbus logs (idaholab/Malcolm#291)
  • put netbox restore database functionality inside container (idaholab/Malcolm#294)
  • provide way to customize zeek Site::local_nets (idaholab/Malcolm#295)
  • allow configuration of docker's logging driver to prevent disk-exhaustion (idaholab/Malcolm#301)
  • allow user to include other suricata config YML files (idaholab/Malcolm#302)
  • allow user to be able to provide custom zeek config (idaholab/Malcolm#303)
  • allow tuning Suricata's max-pending-packets via environment variable (idaholab/Malcolm#304)
  • enable OpenSearch dashboards condensed header
• Component version updates
  • Alpine Linux to v3.18.5
  • elasticsearch-py to v8.11.0
  • Logstash to v8.11.1
  • NetBox v3.6.6
  • OpenSearch and OpenSearch Dashboards (idaholab/Malcolm#298)
    • v2.9.0
    • v2.10.0
    • v2.11.0
    • v2.11.1
  • opensearch-py to v2.4.2
  • supercronic to v0.2.28
  • Zeek to v6.1.0
    • Update logstash parsers for Zeek v6.1.0 (idaholab/Malcolm#289)
• Bug fixes
  • Malcolm Sensor Temperature dashboard issue (idaholab/Malcolm#265)
  • strip out broken Arkime and NetBox links from dashboards for Kibana import (idaholab/Malcolm#286)
  • have netbox-restore script restart necessary services or set necessary permissions (idaholab/Malcolm#287)
  • file type validation not working for upload from (some?) windows browsers (idaholab/Malcolm#292)
  • go through list of Qualys image scan results (idaholab/Malcolm#299)