diff --git a/salt/common/init.sls b/salt/common/init.sls index 4ae78f57b..934183f5a 100644 --- a/salt/common/init.sls +++ b/salt/common/init.sls @@ -102,6 +102,13 @@ nginxconf: - template: jinja - source: salt://common/nginx/nginx.conf.{{ grains.role }} +copyindex: + file.managed: + - name: /opt/so/conf/nginx/index.html + - user: 939 + - group: 939 + - source: salt://common/nginx/index.html + nginxlogdir: file.directory: - name: /opt/so/log/nginx/ @@ -124,6 +131,7 @@ so-core: - binds: - /opt/so:/opt/so:rw - /opt/so/conf/nginx/nginx.conf:/etc/nginx/nginx.conf:ro + - /opt/so/conf/nginx/index.html:/opt/socore/html/index.html:ro - /opt/so/log/nginx/:/var/log/nginx:rw - /opt/so/tmp/nginx/:/var/lib/nginx:rw - /opt/so/tmp/nginx/:/run:rw @@ -189,7 +197,7 @@ so-telegraf: - /proc:/host/proc:ro - /nsm:/host/nsm:ro - /etc:/host/etc:ro - {% if grains['role'] == 'so-master' or grains['role'] == 'so-eval' %} + {% if grains['role'] == 'so-master' or grains['role'] == 'so-eval' or grains['role'] == 'so-mastersearch' %} - /etc/pki/ca.crt:/etc/telegraf/ca.crt:ro {% else %} - /etc/ssl/certs/intca.crt:/etc/telegraf/ca.crt:ro diff --git a/salt/common/nginx/index.html b/salt/common/nginx/index.html index b4385d16b..2f832e2c0 100644 --- a/salt/common/nginx/index.html +++ b/salt/common/nginx/index.html @@ -76,6 +76,7 @@ a {
+ Create New User Kibana Grafana Sensoroni @@ -91,32 +92,29 @@ a {
Security Onion
-

Hybrid Hunter Alpha v1.1.3 Release Notes


+

Hybrid Hunter Alpha 1.1.4 - Feature Parity Release


Changes:

-
    -
  • Overhaul of the setup script to support both ISO and network based setups
    • -
  • ISO will now boot properly from a USB stick.
    • -
  • Python 3 is now default.
    • -
  • Fix Filebeat from restarting every check in due to x509 refresh issue.
    • -
  • Cortex installed and integrated with TheHive.
    • -
  • Switched to using vanilla Kolide Fleet and upgraded to latest version (2.4) .
    • -
  •  Playbook changes -
      -
    • Now preloaded with Plays generated from Sysmon Sigma signatures in the Sigma community repo
      • -
    • New update script that updates / pulls in new Sigma signatures from the community repo .
      • -
    • Bulk enable / disable plays from the webui .
      • -
    • Updated sigmac mapping template & configuration (backend is now elastalert) .
      • -
    • Updated TheHive alerts formatting
      • -
    -
    • -
  • OS patch scheduling -
      -
    • During setup, choose between auto, manual, or scheduled OS patch interval
      • -
    • For scheduled, create a new or import an existing named schedule
      • -
    -
    • -
  • Check out the Hybrid Hunter Quick Start Guide.
    • -
+
    +
  • Added new in-house auth method [Security Onion Auth](https://github.com/Security-Onion-Solutions/securityonion-auth).
    • +
  • Web user creation is done via the browser now instead of so-user-add.
    • +
  • New Logstash pipeline setup. Now uses multiple pipelines.
    • +
  • New Master + Search node type and well as a Heavy Node type in the install.
    • +
  • Change all nodes to point to the docker registry on the Master. This cuts down on the calls to dockerhub.
    • +
  • Zeek 3.0.1
    • +
  • Elastic 6.8.6
    • +
  • New SO Start | Stop | Restart scripts for all components (eg. `so-playbook-restart`).
    • +
  • BPF support for Suricata (NIDS), Steno (PCAP) & Zeek ([Docs](https://github.com/Security-Onion-Solutions/securityonion-saltstack/wiki/BPF)).
    • +
  • Updated Domain Stats & Frequency Server containers to Python3 & created new Salt states for them.
    • +
  • Added so-status script which gives an easy to read look at container status.
    • +
  • Manage threshold.conf for Suricata using the thresholding pillar.
    • +
  • The ISO now includes all the docker containers for faster install speeds.
    • +
  • You now set the password for the onion account during the iso install. This account is temporary and will be removed after so-setup.
    • +
  • Updated Helix parsers for better compatibility.
    • +
  • Updated telegraf docker to include curl and jq.
    • +
  • CVE-2020-0601 Zeek Detection Script.
    • +
  • ISO Install now prompts you to create a password for the onion user during imaging. This account gets disabled during setup.
    • +
  • Check out the Hybrid Hunter Quick Start Guide.
    • +