8035 Commits

Author	SHA1	Message	Date
m0duspwnens	0f52530d07	soc_firewall.yaml update adding idh and rename analyst to workstation	2023-08-04 09:37:58 -04:00
m0duspwnens	726ec72350	allow idh to connect to salt_manager ports on managres	2023-08-04 09:22:59 -04:00
m0duspwnens	a51acfc314	rename analyst to workstation for fw rules. allow workstation to connect to salt_manager port on managers	2023-08-04 09:17:22 -04:00
m0duspwnens	682289ef23	add sensoroni ports where missing	2023-08-04 09:01:09 -04:00
m0duspwnens	593cdbd060	add rules for idh to connect to managers, change idh from sensor to idh in so-firewall-minion	2023-08-04 08:50:06 -04:00
Josh Patterson	13c3e7f5ff	Merge pull request #10934 from Security-Onion-Solutions/fix/soupairgap ... ensure AIRGAP is lowercase and check for true	2023-08-03 12:00:06 -04:00
m0duspwnens	d4389d5057	ensure AIRGAP is lowercase and check for true	2023-08-03 11:56:48 -04:00
Jason Ertel	e108bb9bcd	Merge pull request #10932 from Security-Onion-Solutions/jertel/agentcommon ... remove unused vars	2023-08-02 19:29:03 -04:00
Jason Ertel	5414b0756c	remove unused vars	2023-08-02 19:25:07 -04:00
Jason Ertel	11c827927c	Merge pull request #10931 from Security-Onion-Solutions/jertel/agentcommon ... refactor elastic-agent download for soup ctrl+c anomalies	2023-08-02 19:20:45 -04:00
Jason Ertel	3054b8dcb9	refactor elastic-agent download for soup ctrl+c anomalies	2023-08-02 18:57:46 -04:00
Josh Patterson	435da77388	add gtk2	2023-08-02 16:53:45 -04:00
Josh Patterson	eb512d9aa2	add mono-devel	2023-08-02 16:21:23 -04:00
Josh Brower	aab55c8cf6	Regen Agent Installers	2023-08-02 15:09:26 -04:00
Josh Patterson	f3c5d26a4e	Merge pull request #10923 from Security-Onion-Solutions/soupaloop ... Soupaloop	2023-08-02 14:44:49 -04:00
m0duspwnens	64776936cc	no longer need so-user migrate in 2.4	2023-08-02 14:09:43 -04:00
m0duspwnens	c17b324108	dont count adv_ sls files for number of minions in deployment	2023-08-02 14:04:19 -04:00
weslambert	f102351052	Add event	2023-08-02 13:25:44 -04:00
weslambert	ac28f90af3	Remove override	2023-08-02 13:15:11 -04:00
m0duspwnens	f6c6204555	procps to procps-ng	2023-08-02 13:05:24 -04:00
m0duspwnens	9873121000	change pgrep for salt-minion PID	2023-08-02 12:54:31 -04:00
m0duspwnens	5630b353c4	change how pgrep finds salt-master PID	2023-08-02 11:20:51 -04:00
Josh Patterson	04ed5835ae	Merge pull request #10918 from Security-Onion-Solutions/issue/10917 ... force portgroups added to hostgroups in roles to be list of strings	2023-08-02 11:00:41 -04:00
m0duspwnens	407cb2a537	force portgroups added to hostgroups in roles to be list of strings	2023-08-02 10:56:41 -04:00
weslambert	25b11c35fb	Merge pull request #10915 from Security-Onion-Solutions/fix/ea_elastic_defend ... Set version for Elastic Defend and enable updates	2023-08-02 10:32:30 -04:00
Wes	e694019027	Add package list	2023-08-02 13:50:14 +00:00
weslambert	22ebb2faf6	Merge pull request #10907 from Security-Onion-Solutions/fix/ea_container_logs ... EA Container Logs	2023-08-02 09:26:53 -04:00
Wes	0d5ed2e835	Set version for Elastic Defend and enable updates	2023-08-02 13:21:03 +00:00
Jason Ertel	23414599ee	use simple json (w/o template) to resolve sluggishness	2023-08-01 16:53:26 -04:00
Jason Ertel	8b3a38f573	resolve login page flicker	2023-08-01 16:30:24 -04:00
Wes	0e047cffad	Add to logrotate	2023-08-01 20:14:53 +00:00
Wes	44b086a028	Change path	2023-08-01 20:13:50 +00:00
Wes	4e2eb86b36	Move LOGS_PATH to environment vars	2023-08-01 20:11:51 +00:00
weslambert	1cbf60825d	Add log dir	2023-08-01 14:40:52 -04:00
weslambert	2d13bf1a61	Present logs to the host	2023-08-01 14:40:12 -04:00
Doug Burks	3fa0a98830	Update verbiage and links in soc_sensor.yaml	2023-08-01 12:45:09 -04:00
weslambert	e7bef745eb	Merge pull request #10904 from Security-Onion-Solutions/fix/syslog ... Move syslog to the INPUT chain where needed	2023-08-01 12:14:48 -04:00
Mike Reeves	f35f42c83d	Sensor NIC offload	2023-08-01 10:23:45 -04:00
weslambert	4adaddf13f	Move syslog to the INPUT chain where needed	2023-08-01 10:14:59 -04:00
Mike Reeves	b6579d7d45	Sensor NIC offload	2023-08-01 10:13:44 -04:00
Mike Reeves	87a5d20ac9	Sensor NIC offload	2023-08-01 10:03:59 -04:00
Mike Reeves	2875a7a2e5	Sensor NIC offload	2023-08-01 09:48:44 -04:00
Josh Brower	63b4bdcebe	Merge remote-tracking branch 'origin/2.4/dev' into 2.4/heavyrc2	2023-08-01 08:53:07 -04:00
weslambert	ba3660d0da	Merge pull request #10894 from Security-Onion-Solutions/fix/soc_auth ... SOC Auth msg fix	2023-08-01 08:35:41 -04:00
weslambert	527a6ba454	Use asterisk when searching 'msg' since it is now a keyword	2023-07-31 23:52:38 -04:00
Wes	48d9c14563	Enable log package by default	2023-08-01 02:20:43 +00:00
Wes	29b64eadd4	Change log.log to log.logs	2023-08-01 02:20:22 +00:00
weslambert	5dd5f9fc1c	Elastic 8.8.2	2023-07-31 22:18:43 -04:00
weslambert	44c926ba8d	Elastic 8.8.2	2023-07-31 22:18:07 -04:00
weslambert	6a55a8e5c0	Elastic 8.2.2	2023-07-31 22:17:22 -04:00