100 Commits
Author SHA1 Message Date
Josh BrowerandGitHub 4b5d314adf Merge pull request #9833 from Security-Onion-Solutions/FleetDMConfigFix
Remove unsupported config option
2023-02-21 16:36:58 -05:00
Josh Brower 6e637f559c Remove unsupported config option 2023-02-21 16:35:11 -05:00
Josh BrowerandGitHub c539d53a02 Merge pull request #9791 from Security-Onion-Solutions/fleetsapassword
Fix edge case
2023-02-15 15:30:49 -05:00
Josh Brower 3a22978c2b Fix password gen edge case 2023-02-15 15:25:35 -05:00
Josh BrowerandGitHub aefe1cceb8 Merge pull request #9758 from Security-Onion-Solutions/fleetupgrade
Fix link for FleetDM standalone nodes
2023-02-09 14:10:45 -05:00
Josh Brower b7e97eceb3 Fix link for FleetDM standalone nodes 2023-02-09 14:08:48 -05:00
Josh BrowerandGitHub 450e02e874 Merge pull request #9749 from Security-Onion-Solutions/fleetdm-fix
FleetDM Upgrade Fix
2023-02-09 09:30:22 -05:00
Josh Brower 09bebf08d6 Fix FleetDM SOC Link 2023-02-09 09:10:50 -05:00
Josh Brower 4dd54cea6c Use correct variable name 2023-02-08 16:58:47 -05:00
Josh Brower e07f4bd0ed Workaround for FleetDM PW Req 2023-02-08 13:03:33 -05:00
Josh BrowerandGitHub 29312d595b Merge pull request #9559 from Security-Onion-Solutions/idh-skins
Fix mispelling
2023-01-11 11:04:29 -05:00
Josh Brower b54f2e8752 Fix mispelling 2023-01-11 10:59:50 -05:00
Josh BrowerandGitHub 1470e120ef Merge pull request #9540 from Security-Onion-Solutions/idhskins
bug fix - idh skins
2023-01-09 15:49:04 -05:00
Josh Brower 2c747ec837 make sure dir is created 2023-01-09 13:46:10 -05:00
Josh BrowerandGitHub 8cb5cd5fee Merge pull request #9214 from Security-Onion-Solutions/idhskins
Custom IDH HTTP Skins
2023-01-06 15:14:14 -05:00
Josh Brower 5950771003 Merge remote-tracking branch 'remotes/origin/dev' into idhskins 2022-11-22 18:04:38 -05:00
Josh Brower 7c8ce7899b Initial support for custom IDH http skins 2022-11-22 17:57:51 -05:00
Josh BrowerandGitHub 6553beec99 Merge pull request #8644 from Security-Onion-Solutions/upgrade/elastic-8.4.1
Upgrade/elastic 8.4.1
2022-08-30 16:37:56 -04:00
Josh BrowerandGitHub e171dd52b8 Upgrade Elastic to 8.4.1 2022-08-30 16:11:40 -04:00
Josh BrowerandGitHub 27a837369d Upgrade Elastic to 8.4.1 2022-08-30 16:09:57 -04:00
Josh BrowerandGitHub 7fa9ca8fc6 Merge pull request #8233 from Security-Onion-Solutions/fix/remove-sudo-bpf
Remove unneeded sudo
2022-07-05 09:23:48 -04:00
Josh Brower a1d1779126 Remove unneeded sudo 2022-07-05 09:21:05 -04:00
Josh BrowerandGitHub 0a203add3b Merge pull request #8145 from Security-Onion-Solutions/defensivedepth-patch-1
pin v1.6.0
2022-06-17 13:14:58 -04:00
Josh BrowerandGitHub b8ee896f8a pin v1.6.0 2022-06-17 12:38:54 -04:00
Josh BrowerandGitHub 238e671f34 Merge pull request #8129 from Security-Onion-Solutions/fix/curator-cron
Change curator to daily for true cluster
2022-06-15 11:40:53 -04:00
Josh Brower 072cb3cca2 Change curator to daily for true cluster 2022-06-15 11:38:38 -04:00
Josh BrowerandGitHub 2574f0e23d Merge pull request #8081 from Security-Onion-Solutions/fix/fleetdm-websockets
Allow websockets for fleetdm
2022-06-06 19:15:02 -04:00
Josh Brower c9d9804c3a Allow websockets for fleetdm 2022-06-06 17:26:24 -04:00
Josh BrowerandGitHub 025677a1e6 Merge pull request #8034 from Security-Onion-Solutions/feature/sigmafp
Feature/SigmaCustomFilters
2022-05-31 07:25:44 -04:00
Josh Brower a5361fb745 Change Target_log name 2022-05-28 18:07:05 -04:00
Josh BrowerandGitHub 94ee45ac63 Merge pull request #8029 from Security-Onion-Solutions/upgrade/navigator
Upgrade Navigator to 4.6.4
2022-05-27 14:46:59 -04:00
Josh Brower 43cb78a6a8 Upgrade Navigator 2022-05-27 14:21:11 -04:00
Josh Brower 8e368bdebe Merge in upstream dev 2022-05-06 20:01:07 -04:00
Josh BrowerandGitHub 891a197a6a Merge pull request #7814 from Security-Onion-Solutions/defensivedepth-patch-2
Fix ES/LS Log Pruning
2022-04-18 10:45:27 -04:00
Josh BrowerandGitHub b35b505f0a Fix pattern matching 2022-04-18 10:39:04 -04:00
Josh BrowerandGitHub 2b39570b08 Fix matching logic 2022-04-18 10:37:38 -04:00
Josh BrowerandGitHub d60d31f723 Merge pull request #7801 from Security-Onion-Solutions/defensivedepth-patch-1
Remove thehive entries from so-status
2022-04-15 12:25:21 -04:00
Josh BrowerandGitHub bd19da1878 Remove thehive entries from so-status 2022-04-15 12:21:56 -04:00
Josh BrowerandGitHub 19cba9dca9 Merge pull request #7798 from Security-Onion-Solutions/awlocal
Make analyst iso install init management interface
2022-04-15 07:26:53 -04:00
Josh BrowerandGitHub 1cb5a791ca Add idh req_storage elif 2022-04-12 14:29:07 -04:00
Josh BrowerandGitHub f1574de827 Merge pull request #7765 from Security-Onion-Solutions/fix/compress-clean-elastic-logs
Compress + Clean ES & Logstash App Logs
2022-04-11 16:43:03 -04:00
Josh Brower 886d69fb38 Compress + Clean ES & Logstash App Logs 2022-04-11 16:09:24 -04:00
Josh BrowerandGitHub ae8d300567 Merge pull request #7738 from Security-Onion-Solutions/feature/idh-allow-multiple-int
Include firewall state
2022-04-07 14:52:31 -04:00
Josh Brower 36b2d78dfe Include firewall state 2022-04-07 14:02:21 -04:00
Josh BrowerandGitHub 86771e1fe6 Merge pull request #7732 from Security-Onion-Solutions/feature/idh-allow-multiple-int
Feature/idh allow multiple int
2022-04-06 17:21:30 -04:00
Josh Brower f5e539a05c Initial support for restricting IDH services on MGT IP 2022-04-06 17:16:38 -04:00
Josh Brower 7906c053b1 Initial support for restricting IDH services on MGT IP 2022-04-04 16:46:05 -04:00
Josh BrowerandGitHub 5b9c82a434 Merge pull request #7494 from Security-Onion-Solutions/fix/fleetdm-custom-hostname
Force regen of ssl cert
2022-03-16 15:17:05 -04:00
Josh Brower f0e44827a5 rm extra line 2022-03-10 08:48:46 -05:00
Josh Brower 814e16ba95 Force regen of ssl cert 2022-03-10 08:47:26 -05:00
Josh Brower 2ba72791aa Remove sigma regen cron 2022-03-02 10:31:15 -05:00
Josh BrowerandGitHub 39718561ce Merge pull request #7366 from Security-Onion-Solutions/delta
Enable state tracking for sigma refresh
2022-03-01 05:53:14 -05:00
Josh Brower e960d99901 Enable state tracking for sigma refresh 2022-02-28 21:18:41 -05:00
Josh Brower 09f1a5025d Merge remote-tracking branch 'remotes/origin/dev' into delta 2022-02-28 21:18:07 -05:00
Josh Brower 41a58b791a Enable state tracking for sigma refresh 2022-02-28 21:17:59 -05:00
Josh BrowerandGitHub f824717094 Merge pull request #7364 from Security-Onion-Solutions/delta
IDH Node verbiage
2022-02-28 17:09:08 -05:00
Josh Brower 0cee0d5dea IDH Node verbiage 2022-02-28 16:47:24 -05:00
Josh BrowerandGitHub d71bde0e38 Merge pull request #7362 from Security-Onion-Solutions/delta
Navigator - include attack json for airgap
2022-02-28 16:33:10 -05:00
Josh Brower 2075412ca2 Navigator - include attack json for airgap 2022-02-28 16:15:30 -05:00
Josh BrowerandGitHub 25b0069353 Merge pull request #7334 from Security-Onion-Solutions/delta
IDH Setup - dont show ssh fix screen
2022-02-25 15:01:25 -05:00
Josh Brower 6a270eb8b3 IDH Setup - dont show ssh fix screen - fix 2022-02-25 14:58:30 -05:00
Josh Brower ee39ec1882 IDH Setup - dont show ssh fix screen 2022-02-25 14:55:28 -05:00
Josh BrowerandGitHub ce4c859f3a Merge pull request #7328 from Security-Onion-Solutions/fix/soup-sigma-refresh
.110 Post processing - sigma refresh
2022-02-25 12:24:19 -05:00
Josh BrowerandGitHub 1abf27873d .110 Post processing - sigma refresh 2022-02-25 12:19:59 -05:00
Josh BrowerandGitHub be80f0530c Merge pull request #7321 from Security-Onion-Solutions/delta
IDH Improvements
2022-02-24 21:27:36 -05:00
Josh Brower 96ed3cb158 IDH - Setup Summary new lines 2022-02-24 20:59:47 -05:00
Josh Brower 4a597b9f0e Merge remote-tracking branch 'remotes/origin/dev' into delta 2022-02-24 19:58:10 -05:00
Josh Brower cf7325a546 IDH - Play tweaks, Setup summary, log rotate 2022-02-24 19:57:11 -05:00
Josh BrowerandGitHub e8e683c2e9 Merge pull request #7319 from Security-Onion-Solutions/delta
Add and Update IDH Plays
2022-02-24 15:48:38 -05:00
Josh Brower fbc702375c Add and Update IDH Plays 2022-02-24 15:06:04 -05:00
Josh BrowerandGitHub 5779e40401 Merge pull request #7308 from Security-Onion-Solutions/defensivedepth-patch-1
UC true
2022-02-24 07:48:39 -05:00
Josh BrowerandGitHub 585c275df6 UC true 2022-02-23 19:35:10 -05:00
Josh Brower babc114d27 Merge branch 'delta' of https://github.com/Security-Onion-Solutions/securityonion into delta 2022-02-23 19:33:18 -05:00
Josh Brower 2bf20bd1f0 UC true 2022-02-23 19:33:10 -05:00
Josh BrowerandGitHub b7b2183c15 Merge pull request #7296 from Security-Onion-Solutions/delta
IDH - Import & Enables Plays
2022-02-23 10:52:37 -05:00
Josh Brower 83aa261d88 IDH - Import & Enables Plays 2022-02-23 10:50:13 -05:00
Josh BrowerandGitHub 0121eda536 Merge pull request #7282 from Security-Onion-Solutions/delta
Initial Support - IDH Node
2022-02-23 08:49:40 -05:00
Josh Brower 1d95aca4de IDH - VNC default port 2022-02-22 14:16:45 -05:00
Josh Brower 99554d5db8 IDH - UDP vs TCP support 2022-02-22 14:10:05 -05:00
Josh Brower df9fc807a3 IDH - restart scripts, filebeat fix 2022-02-22 08:05:53 -05:00
Josh Brower 3610b0cd30 merge in dev 2022-02-21 16:52:53 -05:00
Josh Brower eea2b9ccfd IDH - Play - ssh 2022-02-21 16:43:26 -05:00
Josh Brower 05be776f4b IDH - so-status 2022-02-21 16:41:36 -05:00
Josh Brower 2203e2fedd IDH - Final setup fixes 2022-02-19 21:01:48 -05:00
Josh Brower 780cd38adf IDH - setup tweaks 2022-02-19 12:28:45 -05:00
Josh Brower bf477a1c19 IDH - Initial whiptail 2022-02-18 17:21:04 -05:00
Josh Brower 0362afb260 IDH - Finalize Firewall config 2022-02-18 13:23:48 -05:00
Josh BrowerandGitHub 8de5a054d4 Merge pull request #7248 from Security-Onion-Solutions/feature/kratos-log-ingest
Ingest Kratos logs
2022-02-18 11:56:20 -05:00
Josh Brower 118277ebc5 Ingest Kratos logs 2022-02-18 11:49:02 -05:00
Josh Brower f995d0768f IDH - Initial firewall support 2022-02-17 15:54:20 -05:00
Josh Brower 6c124733b5 IDH - Enable default states 2022-02-17 10:50:26 -05:00
Josh Brower ef4df58510 IDH - Jinjafy hostname 2022-02-17 09:00:57 -05:00
Josh Brower 3ccef12df7 IDH - Pillarize OpenCanary Config 2022-02-15 13:57:31 -05:00
Josh Brower 1e5b9ef0bf IDH - Enable Filebeat 2022-02-10 11:37:10 -05:00
Josh Brower b66472eced IDH - disable nginx 2022-02-09 14:56:56 -05:00
Josh Brower f31fbbf1ed IDH - states allowed 2022-02-09 13:57:18 -05:00
Josh Brower 30c40ed3d7 IDH Initial Support 2022-02-09 10:37:47 -05:00
Josh Brower ac8e06e79b Initial support - IDH Node 2022-02-08 09:08:52 -05:00
Josh Brower a3602c9eb9 Initial support - IDH Node 2022-02-08 08:24:15 -05:00
Josh Brower 37b17b8821 Initial support - IDH Node 2022-02-07 19:27:51 -05:00