Commit Graph

3191 Commits

Author SHA1 Message Date
Josh Brower
0830f63c4e SOUP - Regen Osquery Packages 2020-11-18 14:55:14 -05:00
weslambert
6b4af30fc1 Change clean_removed to true cleanup tracking of Zeek logs removed from current 2020-11-18 13:47:32 -05:00
Jason Ertel
57e9f69c97 Add new so-ip-update script (Work in progress) 2020-11-18 12:35:38 -05:00
William Wernert
bc0c395b7f Merge pull request #1963 from Security-Onion-Solutions/feature/rem-so-setup-perm-entry
Feature/rem so-setup perm entry
2020-11-18 09:12:25 -05:00
Jason Ertel
bfbc0f354c Only default to logging out to tty if tty exists as a character device 2020-11-17 22:48:40 -05:00
William Wernert
ee3708a428 [fix] Move sudoers check in soup to correct place + fix styling issue 2020-11-17 15:44:20 -05:00
William Wernert
b146700303 [feat] Remove so-setup permission from sudoers file after iso setup
Closes #1701
2020-11-17 15:36:25 -05:00
Jason Ertel
1ec8b52353 Replace scan.exiftool.* fields due to reduction in strelka field counts 2020-11-17 15:12:06 -05:00
m0duspwnens
e162be2e1d change salt upgrade command https://github.com/Security-Onion-Solutions/securityonion/issues/1961 2020-11-17 14:29:39 -05:00
m0duspwnens
4f4f64a47d Merge remote-tracking branch 'remotes/origin/dev' into soup-verify-salt 2020-11-17 13:16:18 -05:00
m0duspwnens
4cd1086efa new way for soup to install and resart salt for upgrade 2020-11-17 13:15:55 -05:00
Mike Reeves
2184c3b8ee Revert "The Hive ES update"
This reverts commit 88c2ee0d36.
2020-11-17 12:51:42 -05:00
Mike Reeves
65d28f98b5 Revert "The Hive ES Update"
This reverts commit f31d459a24.
2020-11-17 12:51:13 -05:00
Mike Reeves
f31d459a24 The Hive ES Update 2020-11-17 11:59:03 -05:00
Mike Reeves
88c2ee0d36 The Hive ES update 2020-11-17 11:58:22 -05:00
Jason Ertel
d13733e716 Queue the registry state in case a highstate is already active 2020-11-17 09:59:09 -05:00
m0duspwnens
65440f9aef verify new salt version is installed during soup if not, exit before proceeding 2020-11-17 09:51:28 -05:00
Josh Brower
cc4357d567 Merge pull request #1954 from Security-Onion-Solutions/bugfix/ingest-mappings
Cleanup & fix sysmon pid ingest
2020-11-17 09:05:31 -05:00
Jason Ertel
5c310327e4 Merge pull request #1942 from Security-Onion-Solutions/jertel/refactor-seed
Jertel/refactor seed
2020-11-16 18:46:28 -05:00
Jason Ertel
4311f66110 Remove unnecessary redirect 2020-11-16 16:58:09 -05:00
m0duspwnens
4436f02f6d fix nginx for non manaager/fleet nodes 2020-11-16 16:46:22 -05:00
Jason Ertel
3cf8afc1dd Remove unused redirect descriptors and ensure gpg import output is not leaked to console 2020-11-16 16:39:54 -05:00
m0duspwnens
0d9b22fe2d fix so-status to work with so.status module and change padding 2020-11-16 16:33:29 -05:00
Jason Ertel
1ec4af1a4d Destroy the old registry before updating SO images 2020-11-16 15:41:15 -05:00
Jason Ertel
8234b6f835 Switch remaining containers over to new registries; Continued bash refactoring 2020-11-16 15:11:08 -05:00
Jason Ertel
2ff738a61c Refactor docker_seed_registry to eliminate duplicate logic 2020-11-16 13:27:23 -05:00
Josh Patterson
7a49c55ea0 Merge pull request #1930 from Security-Onion-Solutions/issue/1831
Issue/1831
2020-11-16 10:09:49 -05:00
m0duspwnens
cc50eba6cb make sure /opt/so/log/salt/so-salt-minion-check gets touched even if salt-minon verison isnt correct https://github.com/Security-Onion-Solutions/securityonion/issues/1831 2020-11-16 10:01:40 -05:00
m0duspwnens
5c25dcf192 add /opt/so/log/salt/so-salt-minion-check to log rotate https://github.com/Security-Onion-Solutions/securityonion/issues/1831 2020-11-16 09:50:10 -05:00
Jason Ertel
c744d389f7 More bash cleanup 2020-11-15 10:44:14 -05:00
Jason Ertel
76c917d977 Continued bash cleanup 2020-11-15 09:57:12 -05:00
Josh Brower
1908a68330 Cleanup & fix sysmon pid ingest 2020-11-14 16:19:23 -05:00
Jason Ertel
d22040fb5d Annual fall bash cleanup event 2020-11-14 11:53:31 -05:00
Jason Ertel
372f694cc1 Set curl type to 'features' when adding features to existing installation 2020-11-14 11:04:40 -05:00
Jason Ertel
1c079f7ff4 Remove duplicate docker pull/sigverify logic from so-features-enable; Provide current SO version to curl 2020-11-14 10:35:45 -05:00
m0duspwnens
4e6e29e7dc update logging 2020-11-13 20:26:06 -05:00
m0duspwnens
43a244e0da change log path https://github.com/Security-Onion-Solutions/securityonion/issues/1831 2020-11-13 19:37:03 -05:00
m0duspwnens
e958246457 touch file at start of highstate, just kill salt dont systemctl stop it https://github.com/Security-Onion-Solutions/securityonion/issues/1831 2020-11-13 19:34:17 -05:00
m0duspwnens
b210092534 logging changes issue/1831 2020-11-13 19:09:53 -05:00
m0duspwnens
e820c6fa42 logging changes issue/1831 2020-11-13 19:04:09 -05:00
m0duspwnens
71a409f210 fix threshold logic https://github.com/Security-Onion-Solutions/securityonion/issues/1831 2020-11-13 18:23:55 -05:00
m0duspwnens
a5823be0ac fix typo 2020-11-13 17:55:19 -05:00
Mike Reeves
13c261178a fix soup so-image-common 2020-11-13 17:26:04 -05:00
m0duspwnens
2f0eaff8b3 sbin 2020-11-13 17:25:45 -05:00
Mike Reeves
977eea131e fix soup so-image-common 2020-11-13 17:18:55 -05:00
Mike Reeves
fb9b07b0eb fix soup so-image-common 2020-11-13 17:13:05 -05:00
m0duspwnens
6a010bb3e6 change var name 2020-11-13 17:08:47 -05:00
Mike Reeves
51b3e066be fix soup so-image-common 2020-11-13 17:01:42 -05:00
Mike Reeves
7dfb8f5b12 fix soup so-image-common 2020-11-13 16:50:12 -05:00
Mike Reeves
23f2dee840 fix soup so-image-common 2020-11-13 16:30:34 -05:00