CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity
4,745 Commits 24 Branches 119 Tags
10f4e09b70189fa3f04a20e917f30acead7e632f
Commit Graph

250 Commits

Author SHA1 Message Date
William Wernert
f77305e22f Generate zeeklogs sls earlier to avoid error 2020-09-28 16:45:06 -04:00
William Wernert
f782299281 Remove preconfigured zeeklog + create it during setup 2020-09-28 15:12:36 -04:00
William Wernert
3b9de2b7ca Disable ipv6 earlier in setup 2020-09-28 09:14:45 -04:00
William Wernert
9acf610262 Also disable ipv6 for install 2020-09-25 16:10:26 -04:00
William Wernert
d76a4b1359 Show welcome screen on both iso and network installs 2020-09-25 14:59:27 -04:00
Mike Reeves
aca98e01f3 Set the path 2020-09-23 12:00:25 -04:00
Mike Reeves
112a0b426e Merge branch 'dev' into experimental 2020-09-13 14:54:00 -04:00
Mike Reeves
48d1d0c168 Strelkas Rules Update 2020-09-11 18:24:56 -04:00
Josh Patterson
2d508d9e57 Merge pull request #1328 from Security-Onion-Solutions/issue/1281 
Issue/1281
 2020-09-11 15:02:30 -04:00
m0duspwnens
5f7c270984 only allow strelka to run on nodes that are sensors 2020-09-11 10:22:12 -04:00
Mike Reeves
7ebf93fcb5 IDSTools Overhaul 2020-09-09 15:53:32 -04:00
Mike Reeves
951fe2ac69 Create repo 2020-09-01 11:26:33 -04:00
Mike Reeves
9cff7c1427 Enable airgap functions 2020-09-01 11:24:22 -04:00
Mike Reeves
643dab12d0 Enable airgap 2020-09-01 11:09:33 -04:00
Doug Burks
45c0a7ac77 Kernel messages can overwrite whiptail screen #812 
Kernel messages can overwrite whiptail screen #812
 2020-09-01 08:55:34 -04:00
Wes Lambert
6d14f2af96 Remove minio for now 2020-08-31 14:07:47 +00:00
Jason Ertel
3877706f20 Remove auto-start regardless of how setup was started 2020-08-28 09:10:35 -04:00
Mike Reeves
e1a52a4921 Update core counts if heavy node or SA 2020-08-26 11:00:23 -04:00
m0duspwnens
a7a0520cfe remove bonding for import node 2020-08-20 14:20:09 -04:00
Mike Reeves
4c246dc30d remove airgap install option until rc3 2020-08-19 14:40:31 -04:00
Jason Ertel
47ad3f65ef Only fail setup when the root mailbox is not empty for ISO installations, since network installations can't be sure if the error came from setup or something unrelated 2020-08-18 15:26:30 -04:00
weslambert
eaad0487b5 Enable YARA rules by default 2020-08-18 14:54:11 -04:00
Jason Ertel
45d957566d Only show 'Waiting for TheHive to start up' status if setup is actually installing thehive 2020-08-18 11:36:29 -04:00
Mike Reeves
eb6b2f6ca0 Merge pull request #1186 from Security-Onion-Solutions/feature/airgap 
Airgap round 1
 2020-08-14 15:41:36 -04:00
Mike Reeves
bac58abf3e Airgap round 1 2020-08-14 15:32:33 -04:00
Josh Patterson
0ba0c16c38 Merge pull request #1185 from Security-Onion-Solutions/issue/1049 
Issue/1049
 2020-08-14 14:55:14 -04:00
weslambert
c9d6293f8f Don't copy SSH key if automated install 2020-08-14 14:41:35 -04:00
m0duspwnens
ff84640aad add pcap to import node, test not starting zeek docker by default 2020-08-14 13:59:23 -04:00
Mike Reeves
2a8e4e4eb2 Merge pull request #1182 from Security-Onion-Solutions/feature/airgap 
Feature/airgap
 2020-08-14 12:32:26 -04:00
Mike Reeves
c64faacdbc Install registry if the image is local 2020-08-14 12:15:56 -04:00
Wes Lambert
7686a05f42 Set Strelka rules enabled by default for Eval Mode 2020-08-14 15:33:38 +00:00
Jason Ertel
e6830e9cba Avoid reusing header function from so-common 2020-08-14 01:09:47 -04:00
Jason Ertel
3c113a7a89 Add system information at beginning of installation; provide logging functions to be used instead of echo commands 2020-08-13 17:29:50 -04:00
m0duspwnens
dbe14fcbdb Merge remote-tracking branch 'remotes/origin/dev' into issue/1049 2020-08-12 16:46:03 -04:00
Doug Burks
5640faef13 Kernel consoleblank is causing whiptail progress screen to appear to hang #1084 2020-08-12 16:34:59 -04:00
m0duspwnens
68f5c1c3c5 create web user during setup for import node 2020-08-12 12:01:25 -04:00
m0duspwnens
dfd3a1de6a set monitor interface to bond0 for import node 2020-08-12 10:42:07 -04:00
m0duspwnens
0f53b4d703 set esheapsize and filebeat config for import node 2020-08-12 10:39:31 -04:00
m0duspwnens
5a0df27193 rename importpcap node to import 2020-08-12 10:27:15 -04:00
m0duspwnens
53b4a73bb9 add idstools to importpcap node 2020-08-11 15:59:08 -04:00
m0duspwnens
a81d14463c add logstash to registry for importpcap, change PATCHSCHEDULENAME=auto 2020-08-11 15:01:20 -04:00
m0duspwnens
40006752a1 Merge remote-tracking branch 'remotes/origin/dev' into issue/1049 2020-08-11 13:30:48 -04:00
m0duspwnens
ee91450424 fix patch schedule name for importpcap node 2020-08-11 13:30:41 -04:00
m0duspwnens
ec62668eb7 firewall rules for importpcap node 2020-08-11 12:31:37 -04:00
m0duspwnens
f6a85ac852 top and seed registry for importpcap node 2020-08-11 12:27:21 -04:00
Jason Ertel
854cc487f7 Always disable screen blanking, to simplify logic 2020-08-11 09:21:06 -04:00
m0duspwnens
0c2ea53f25 revert back to local_salt_dir 2020-08-07 16:42:46 -04:00
m0duspwnens
7d11fc345f dont ask for patch schedule for importpcap node 2020-08-07 11:19:31 -04:00
m0duspwnens
d668b85033 copy_ssh_key for is_importpcap also 2020-08-07 11:09:12 -04:00
m0duspwnens
fce22c1cc4 Merge remote-tracking branch 'remotes/origin/dev' into issue/1049 2020-08-07 10:27:11 -04:00