Commit Graph

13498 Commits

Author SHA1 Message Date
weslambert fe1bae96ed Merge pull request #11297 from Security-Onion-Solutions/fix/soc_idh
Change description to indicate that opencanary modules only apply to IDH nodes
2023-09-15 11:16:06 -04:00
weslambert eab6173a31 Merge pull request #11329 from Security-Onion-Solutions/fix/elastic_templates_clean
Clean component template directory
2023-09-15 11:00:17 -04:00
Wes 98499c3963 Clean component template directory 2023-09-15 13:51:46 +00:00
Josh Patterson 26da525ebe Merge pull request #11328 from Security-Onion-Solutions/fix/checkreq
improvents for checking system requirements
2023-09-15 09:17:04 -04:00
m0duspwnens c65c9777bd improvents for checking system requirements 2023-09-14 17:42:25 -04:00
Josh Brower af68af7f18 Merge pull request #11317 from Security-Onion-Solutions/2.4/fixes
Regex & Transform Role
2023-09-14 10:59:56 -04:00
defensivedepth 0c11a9b733 Add transform role 2023-09-14 09:33:17 -04:00
defensivedepth 59d077f3ff Fix regex 2023-09-14 08:32:17 -04:00
Jason Ertel 6383712731 Merge pull request #11315 from Security-Onion-Solutions/jertel/auto
exclude docker pull unauth errors from failing setup
2023-09-14 07:41:59 -04:00
Jason Ertel e067b7134e exclude docker pull unauth errors from failing setup since they'll be retried 2023-09-14 07:38:07 -04:00
Mike Reeves 183c530c82 Merge pull request #11308 from Security-Onion-Solutions/pcapfree
Update so-minion
2023-09-13 13:47:21 -04:00
Mike Reeves 33d68478b6 Update so-minion 2023-09-13 11:48:16 -04:00
Mike Reeves 22c0323bda Update so-minion 2023-09-13 10:57:45 -04:00
Doug Burks 19114c1a26 Merge pull request #11303 from Security-Onion-Solutions/dougburks-patch-1
FIX: SOC Config pcap doc links should point to steno docs #11302
2023-09-13 07:50:43 -04:00
Doug Burks 11b8e13418 FIX: SOC Config pcap doc links should point to steno docs #11302 2023-09-13 07:37:54 -04:00
Josh Patterson 6fdd7b3751 Merge pull request #11295 from Security-Onion-Solutions/issue/11229
dont manage sorules
2023-09-12 09:30:29 -04:00
m0duspwnens 30c3255cb2 dont manage sorules 2023-09-12 08:39:42 -04:00
Wes 35ebbc974c Change description to indicate that opencanary modules only apply to IDH nodes 2023-09-11 13:52:16 +00:00
Wes f1d0db8171 /app to /kibana/app 2023-09-11 13:30:11 +00:00
Josh Patterson 9968d697f3 Merge pull request #11288 from Security-Onion-Solutions/issue/11229
Issue/11229
2023-09-11 09:19:31 -04:00
m0duspwnens 02c54a264d Merge remote-tracking branch 'origin/2.4/dev' into issue/11229 2023-09-08 15:29:04 -04:00
m0duspwnens e814a3409f fix rule location for rulecat.conf. run so-rule-update if rules change in /opt/so/rules/nids 2023-09-08 15:28:24 -04:00
Jason Ertel 55847c7bdc Merge pull request #11276 from Security-Onion-Solutions/jertel/auto
give priority to presets
2023-09-08 09:26:27 -04:00
Jason Ertel 598515e5b4 give priority to presets 2023-09-08 09:21:13 -04:00
Jason Ertel 692625f8cd Merge pull request #11271 from Security-Onion-Solutions/jertel/auto
addl node types
2023-09-07 17:25:08 -04:00
Jason Ertel f8ae3f12e6 addl node types 2023-09-07 17:22:10 -04:00
Josh Patterson 3780ed1b4f Merge pull request #11269 from Security-Onion-Solutions/issue/11210
Issue/11210
2023-09-07 16:54:16 -04:00
m0duspwnens 8d269fee30 Merge remote-tracking branch 'origin/2.4/dev' into issue/11210 2023-09-07 15:46:25 -04:00
m0duspwnens 35157f2e8b add comment 2023-09-07 15:46:04 -04:00
m0duspwnens 60f1947eb4 prevent endgame_dict from being added to standard_actions if it is already present 2023-09-07 14:01:19 -04:00
m0duspwnens ffaab4a1b4 only add endgame to action if it is populated 2023-09-06 14:19:53 -04:00
weslambert 70e1309c9f Merge pull request #11261 from Security-Onion-Solutions/fix/remove_default_templates
Remove templates
2023-09-06 10:57:09 -04:00
Jason Ertel 5c0045f9f8 Merge pull request #11256 from Security-Onion-Solutions/jertel/sod
only ingest pfsense on sensor nodes
2023-09-05 12:50:47 -04:00
Jason Ertel b66be9c226 only ingest pfsense on sensor nodes 2023-09-05 12:46:49 -04:00
Josh Patterson 651393988a Merge pull request #11255 from Security-Onion-Solutions/issue/10975
Issue/10975
2023-09-05 11:57:58 -04:00
Wes cf19c8f8c2 Remove templates 2023-09-05 13:43:41 +00:00
Mike Reeves ba3ae92702 Merge pull request #11249 from Security-Onion-Solutions/jertel/sod 2023-09-03 22:23:55 -04:00
Jason Ertel 8e2bed7f91 MS testing 2023-09-03 19:56:40 -04:00
Jason Ertel 028b69c7d4 Merge pull request #11245 from Security-Onion-Solutions/jertel/sod
ensure hostname is set
2023-09-02 13:49:49 -04:00
Jason Ertel 0cf913a7c1 ensure hostname is set 2023-09-02 06:05:37 -04:00
Jason Ertel 13fbcd712b Merge pull request #11243 from Security-Onion-Solutions/jertel/sod
ensure hostname is set
2023-09-01 20:43:35 -04:00
Jason Ertel 0aae107155 ensure hostname is set 2023-09-01 20:30:53 -04:00
Mike Reeves d2dcf7e7c1 Merge pull request #11241 from Security-Onion-Solutions/jertel/sod 2023-09-01 18:22:38 -04:00
Jason Ertel 6efdf1b9d0 add additional test modes 2023-09-01 17:24:12 -04:00
Jason Ertel a11259c683 add additional test modes 2023-09-01 17:08:27 -04:00
Jason Ertel 863db14b61 add additional test modes 2023-09-01 16:27:02 -04:00
Jason Ertel 335aaa5594 add additional test modes 2023-09-01 15:30:53 -04:00
m0duspwnens 07ed93de19 add elastic agent to desktop 2023-09-01 14:33:32 -04:00
Jason Ertel 8093e5ce7c use IP to avoid host issues 2023-09-01 13:01:17 -04:00
m0duspwnens 585fba4bc6 add functions salt_install_module_deps and salt_patch_x509_v2 2023-09-01 12:40:01 -04:00