Commit Graph

3840 Commits

Author SHA1 Message Date
Mike Reeves
07626905c5 Fix telegraf script perms 2020-07-16 15:20:11 -04:00
Josh Patterson
5634446fcb Merge pull request #1019 from Security-Onion-Solutions/quickfix/lstoes
fix the container watch for logstash container state
2020-07-16 15:06:29 -04:00
m0duspwnens
c61a52cc5e fix the container watch for logstash container state 2020-07-16 15:05:54 -04:00
William Wernert
25dbcfaebe [refactor] Add check for "Result: False" in setup 2020-07-16 14:08:56 -04:00
Josh Patterson
f1d8548913 Merge pull request #1017 from Security-Onion-Solutions/quickfix/lstoes
dont run templates script if there arent templates
2020-07-16 13:37:15 -04:00
m0duspwnens
9606d86e84 dont run templates script if there arent templates 2020-07-16 13:36:44 -04:00
William Wernert
8f62cd8f82 Merge branch 'dev' of github.com:Security-Onion-Solutions/securityonion-saltstack into dev 2020-07-16 11:33:20 -04:00
William Wernert
a041be5c21 [fix] Don't force YARA Strelka rules during setup 2020-07-16 11:33:11 -04:00
phil1090
5d2c6d330f Update README.md 2020-07-16 10:15:40 -04:00
Josh Patterson
582edd7aac Merge pull request #1016 from Security-Onion-Solutions/quickfix/lstoes
including elasticsearch in logstash state
2020-07-16 10:13:18 -04:00
m0duspwnens
f10f47ad4e including elasticsearch in logstash state 2020-07-16 10:12:10 -04:00
weslambert
f8bb094546 Merge pull request #1014 from Security-Onion-Solutions/fix/strelka_standalone
Fix module eval
2020-07-16 09:32:06 -04:00
Wes Lambert
8275f458a1 Fix module eval 2020-07-16 13:30:38 +00:00
William Wernert
5190e5d434 Update README.md 2020-07-16 09:20:20 -04:00
weslambert
7fecfdab32 Update README.md 2020-07-16 08:14:47 -04:00
weslambert
f7d527bb90 Update README.md 2020-07-16 08:14:23 -04:00
Josh Brower
350d2fbeda Update README.md 2020-07-15 19:07:25 -04:00
Josh Brower
29c28fcb5e Update README.md 2020-07-15 19:06:36 -04:00
Josh Brower
48c9244a81 Update README.md 2020-07-15 19:05:49 -04:00
Mike Reeves
a4672dedee Update README.md 2020-07-15 18:17:05 -04:00
Mike Reeves
473606371a Fix Features Download 2020-07-15 17:49:13 -04:00
Mike Reeves
d71dc89b13 New SOUP 2020-07-15 17:46:33 -04:00
Jason Ertel
9781d8d0e7 Ensure permissions are consistently applied to all imported PCAP files 2020-07-15 13:53:28 -04:00
Jason Ertel
0a976861f3 Dynamically set sensor checkin interval; allow overrides if var is preset 2020-07-15 13:22:14 -04:00
Josh Brower
80e081e828 Merge pull request #1010 from Security-Onion-Solutions/bugfix/playbook-anonymous-perms
Playbook anonymous perms fix
2020-07-15 12:40:47 -04:00
Josh Brower
d11ef08961 Playbook anonymous perms fix 2020-07-15 12:37:04 -04:00
Jason Ertel
3c42f50e99 Ensure whiptail success/summary screen is final step before reboot 2020-07-15 11:12:48 -04:00
Josh Patterson
83428d4785 Merge pull request #1009 from Security-Onion-Solutions/quickfix/lstoes
load templates for es for eval
2020-07-15 08:32:50 -04:00
m0duspwnens
e4fff05dbc load templates for es for eval 2020-07-15 08:30:43 -04:00
Jason Ertel
9dc1151347 Imported logs are sent to so-import index on eval installations 2020-07-14 22:59:42 -04:00
Jason Ertel
b53ce392ef Improve grammer of summary screen in whiptail 2020-07-14 22:45:38 -04:00
Jason Ertel
c0960e58e8 Improve grammer of so-allow input prompt 2020-07-14 19:42:53 -04:00
Josh Patterson
549916306c Merge pull request #1008 from Security-Onion-Solutions/quickfix/lstoes
Quickfix/lstoes
2020-07-14 17:37:19 -04:00
m0duspwnens
5cf71596b2 add curlys 2020-07-14 17:36:52 -04:00
Jason Ertel
acb800d1c9 Using static UID for Grafana overview dashboard to allow SOC to directly link to those dashboards 2020-07-14 17:36:30 -04:00
Jason Ertel
9bbbaa485c Switch PM to AM since we want to span midnight to midnight 2020-07-14 17:36:30 -04:00
m0duspwnens
acaec6c125 remove recurse causing issues 2020-07-14 17:12:29 -04:00
Josh Brower
e7e1982862 Merge pull request #1007 from Security-Onion-Solutions/bugfix/ingest-parsing
Parsing & Hunt query updates
2020-07-14 17:00:04 -04:00
Josh Brower
8647944ae6 Parsing & Hunt query updates 2020-07-14 16:59:06 -04:00
Mike Reeves
55056f3193 Merge pull request #1006 from Security-Onion-Solutions/fix/perms
Change opt/so perms
2020-07-14 16:19:02 -04:00
m0duspwnens
57bf23d83c move templates from logstash to elasticsearch 2020-07-14 16:07:46 -04:00
Doug Burks
a1e6a85a68 explicitly set Suricata timestamp timezone to UTC 2020-07-14 15:49:46 -04:00
weslambert
7a36803e2c Merge pull request #1002 from Security-Onion-Solutions/fix/strelka_observer
Add observer name for Strelka events
2020-07-14 13:39:52 -04:00
Wes Lambert
f9df39977b Add observer name for Strelka events 2020-07-14 17:38:43 +00:00
weslambert
7ed902c0ae Merge pull request #1001 from Security-Onion-Solutions/fix/suricata_timestamp
Convert message timestamp to @timestamp
2020-07-14 13:34:58 -04:00
Josh Brower
47388fa98d Merge pull request #998 from Security-Onion-Solutions/bugfix/fleet-soimage-fix
Fleet reactor fix
2020-07-14 13:06:52 -04:00
Josh Brower
ba8395fc11 Fleet reactor fix 2020-07-14 13:04:29 -04:00
William Wernert
3df5904269 Merge pull request #979 from Security-Onion-Solutions/feature/setup
Feature/setup
2020-07-14 11:17:03 -04:00
William Wernert
caf9e3f75a [fix] Redirect hive_init output to log 2020-07-14 11:13:50 -04:00
William Wernert
ad3c4c4950 [fix] master -> manager 2020-07-14 11:09:12 -04:00