Merge pull request #2 from TOoSmOotH/master

...
This commit is contained in:
Josh Brower
2019-04-04 06:22:31 -04:00
committed by GitHub
2 changed files with 19 additions and 8 deletions

View File

@@ -1,11 +1,22 @@
# Security Onion Hybrid Hunter Tech Preview 1.0.6 # Security Onion Hybrid Hunter Tech Preview 1.0.7
### About ### Changes:
Hybrid Hunter is a brand new Security Onion platform with the following characteristics: - Suricata 4.1.3
- Move from Ubuntu DEB packages to Docker images - Updated Influxdb to 1.7.5
- Support both Ubuntu 16.04 and RedHat/CentOS 7 - Updated Telegraf to 1.10.1
- Higher performance - Grafana is now 6.0.2
- More centralized configuration - Added support for TheHive!!! See the docs ->
- You are now forced to select interfaces during setup. If you skipped this test the install was not happy [#26](https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/26)
- Reduced the RAM usage for ES in Eval mode [#25](https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/26)
- Eval Mode setup is now choose your own adventure style
- Fresh dockers for all the things to bring everything to 1.0.7
- New utility docker called SOctopus
- New html landing page now in dark mode
### Notes:
- Attempting to send a Bro event to The Hive that does not contain a source and destination IP (ex. Bro files, or X509) will result in an exception - a fix for this will be implemented in the next release.
- If attempting to pivot from Kibana, ensure that you can resolve the master via DNS -- otherwise, populate your local hosts file with an entry to point to the master.
### Warnings and Disclaimers ### Warnings and Disclaimers

View File

@@ -114,7 +114,7 @@ so-core:
- /opt/so/tmp/nginx/:/run:rw - /opt/so/tmp/nginx/:/run:rw
- /etc/pki/masterssl.crt:/etc/pki/nginx/server.crt:ro - /etc/pki/masterssl.crt:/etc/pki/nginx/server.crt:ro
- /etc/pki/masterssl.key:/etc/pki/nginx/server.key:ro - /etc/pki/masterssl.key:/etc/pki/nginx/server.key:ro
- /opt/so/conf/fleet/packages:/opt/so/html/packages - /opt/so/conf/fleet/packages:/opt/socore/html/packages
- cap_add: NET_BIND_SERVICE - cap_add: NET_BIND_SERVICE
- port_bindings: - port_bindings:
- 80:80 - 80:80