Mike Reeves
06ddae13b5
Update filecheck
2022-10-31 15:41:57 -04:00
Mike Reeves
16d3dead04
Update sensor-rotate.conf
2022-10-31 15:33:10 -04:00
Mike Reeves
f7043f3f62
Update init.sls
2022-10-31 15:25:38 -04:00
Mike Reeves
bf41f2984a
Update init.sls
2022-10-31 14:58:55 -04:00
Mike Reeves
86ca3602f3
Update init.sls
2022-10-31 14:44:01 -04:00
Mike Reeves
416c28fded
Update init.sls
2022-10-31 14:42:23 -04:00
Mike Reeves
297373877a
Update init.sls
2022-10-31 14:36:40 -04:00
Mike Reeves
db9b93a96c
Update init.sls
2022-10-31 14:35:02 -04:00
Mike Reeves
5635375d8d
Update init.sls
2022-10-31 14:30:11 -04:00
Mike Reeves
07e72e4013
Update filecheck
2022-10-31 13:47:49 -04:00
Mike Reeves
518d2aaa9c
Update filecheck.yaml
2022-10-31 13:45:00 -04:00
Mike Reeves
e93e2995b7
Update filecheck
2022-10-31 13:42:18 -04:00
Mike Reeves
d2eb61a830
Update filecheck.yaml
2022-10-31 13:41:45 -04:00
Mike Reeves
4c5a2c0610
Update filecheck
2022-10-31 13:36:42 -04:00
Mike Reeves
e9e7362005
Add Filechecks
2022-10-31 12:57:08 -04:00
Mike Reeves
b8355b3a03
Update soup
2022-09-22 09:10:12 -04:00
bryant-treacle
535b9f86db
Merge pull request #8633 from Security-Onion-Solutions/bryant-sysmon
...
Fix issues: 8591-8953
2022-09-19 11:53:34 -04:00
Josh Brower
e171dd52b8
Upgrade Elastic to 8.4.1
2022-08-30 16:11:40 -04:00
Josh Brower
27a837369d
Upgrade Elastic to 8.4.1
2022-08-30 16:09:57 -04:00
bryant-treacle
82dff3e9da
Fix issues: 8591-8953
2022-08-30 13:48:53 +00:00
Mike Reeves
76cca8594d
Merge pull request #8623 from Security-Onion-Solutions/TOoSmOotH-patch-6
...
Update soup
2022-08-29 09:50:06 -04:00
weslambert
5c9c95ba1f
Merge pull request #8622 from Security-Onion-Solutions/fix/strelka_yara_gen_webshells_ignore
...
Ignore gen_webshells.yar
2022-08-29 09:40:51 -04:00
Mike Reeves
e62bebeafe
Update soup
2022-08-29 09:39:41 -04:00
weslambert
8a0e92cc6f
Add 'gen_webshells.yar' and re-arrange to put ignored rules in alphabetical order
2022-08-29 09:37:29 -04:00
Mike Reeves
30b9868de1
Update soup
2022-08-29 09:32:46 -04:00
weslambert
f00d9074ff
Allow local modification acceptance prompt to be skipped when passing 'skip-prompt' as a parameter value to check_local_mods() function
2022-08-19 16:07:14 -04:00
Mike Reeves
fea2b481e3
Update rulecat.conf
2022-08-19 13:12:49 -04:00
weslambert
fbf0803906
Update verbiage around major Elasticsearch version and not requiring Elastalert index maintenance
2022-08-18 09:16:22 -04:00
weslambert
5deda45b66
Update elastalert_indices_check() function to only delete Elastalert indices if major Elasticsearch version is less than 8
...
Update elastalert_indices_check() function to only delete Elastalert indices if major Elasticsearch version is less than 8. Also clean up the output to only emit one notification regarding index deletion, and additional verbiage around function operation.
2022-08-18 09:11:38 -04:00
m0duspwnens
2dfd41bd3c
remove pipeline time panel - https://github.com/Security-Onion-Solutions/securityonion/issues/8369
2022-08-17 09:17:27 -04:00
Doug Burks
179f669acf
FIX: so-curator-closed-delete-delete needs to reference new Elasticsearch directory #8529
2022-08-12 13:10:47 -04:00
Doug Burks
32c29b28eb
revert to lower case #8469
2022-08-11 15:33:30 -04:00
Doug Burks
7bf2603414
revert to lower case #8469
2022-08-11 15:32:49 -04:00
Doug Burks
4003876465
FIX: Fix TLP options in Cases to align with TLP 2.0 #8469
2022-08-11 08:49:54 -04:00
Doug Burks
4c677961c4
FIX: Fix TLP options in Cases to align with TLP 2.0 #8469
2022-08-11 08:49:25 -04:00
weslambert
fd7a118664
Invoke check_local_mods() function earlier so we don't have to wait for Docker image downloads or OS updates before checking and potentially exiting SOUP
2022-08-08 08:58:19 -04:00
weslambert
d7906945df
Add extra set of brackets for comparison of integers
2022-08-08 08:24:38 -04:00
weslambert
cb384ae024
Ensure check_local_mods() runs at the beginning of SOUP, in addition to the end, and also that it prompts (forces) the user to accept/review local modifications.
2022-08-05 11:25:33 -04:00
Josh Patterson
4827c9e0d4
Merge pull request #8475 from Security-Onion-Solutions/issue/8441
...
add SYSTEMD_UNIT_FILE back to map file
2022-08-05 10:55:44 -04:00
m0duspwnens
3b62fc63c9
add SYSTEMD_UNIT_FILE back to map file
2022-08-05 10:53:07 -04:00
Josh Patterson
ad32c2b1a5
Merge pull request #8472 from Security-Onion-Solutions/issue/8441
...
ensure ExecStartPre is removed from default salt-minion service file
2022-08-04 16:36:16 -04:00
m0duspwnens
f02f431dab
ensure ExecStartPre is removed from default salt-minion service file
2022-08-04 16:34:06 -04:00
Josh Patterson
812964e4d8
Merge pull request #8460 from Security-Onion-Solutions/issue/8441
...
ensure parent dirs are created
2022-08-03 17:01:50 -04:00
m0duspwnens
99805cc326
ensure parent dirs are created
2022-08-03 16:54:22 -04:00
Josh Patterson
8d2b3f3dfe
Merge pull request #8457 from Security-Onion-Solutions/issue/8441
...
fix the requisite
2022-08-03 15:17:44 -04:00
m0duspwnens
15f7fd8920
fix the requisite
2022-08-03 15:16:12 -04:00
Josh Patterson
50460bf91e
Merge pull request #8456 from Security-Onion-Solutions/issue/8441
...
manage salt-minion start delay with systemd drop-in file
2022-08-03 13:44:09 -04:00
weslambert
8c694a7ca3
Disable ingest.geoip.downloader by default
2022-08-03 09:21:40 -04:00
weslambert
9ac640fa67
Remove airgap-specific logic for ingest.geoip.downloader
2022-08-03 09:21:03 -04:00
m0duspwnens
db8d9fff2c
manage salt-minion start delay with systemd drop-in file - https://github.com/Security-Onion-Solutions/securityonion/issues/8441
2022-08-02 16:22:26 -04:00
