From 3567dfc0dc6b26c971e9d191a15b77bcb12dde0c Mon Sep 17 00:00:00 2001 From: defensivedepth Date: Thu, 26 Sep 2024 15:48:50 -0400 Subject: [PATCH] Move Airgap later in setup --- setup/so-functions | 6 ++++-- setup/so-setup | 4 ++++ 2 files changed, 8 insertions(+), 2 deletions(-) diff --git a/setup/so-functions b/setup/so-functions index 3f7440597..5ebf76c17 100755 --- a/setup/so-functions +++ b/setup/so-functions @@ -48,11 +48,13 @@ airgap_rules() { # Copy over the securityonion-resources repo rsync -av /root/SecurityOnion/agrules/securityonion-resources /nsm/ +} - # Copy summaries over to SOC and checkout the correct branch +airgap_detection_summaries() { + # Copy summaries over to SOC and checkout the correct branch rsync -av --chown=socore:socore /nsm/securityonion-resources /opt/so/conf/soc/ai_summary_repos git config --global --add safe.directory /opt/so/conf/soc/ai_summary_repos/securityonion-resources - git -C /opt/so/conf/soc/ai_summary_repos/securityonion-resources checkout generated-summaries-published + git -C /opt/so/conf/soc/ai_summary_repos/securityonion-resources checkout generated-summaries-published } add_admin_user() { diff --git a/setup/so-setup b/setup/so-setup index cb4e7ebf0..85b26fa40 100755 --- a/setup/so-setup +++ b/setup/so-setup @@ -763,6 +763,10 @@ if ! [[ -f $install_opt_file ]]; then logCmd "salt-call state.apply suricata -l info" fi fi + if [[ $is_airgap ]]; then + title "Syncing AI-Generated Detection Summaries" + airgap_detection_summaries + fi title "Setting up Kibana Default Space" logCmd "so-kibana-space-defaults" add_web_user