doug
3482df5ee1
fix jinja whitespace
2023-01-04 13:33:51 -05:00
doug
a67a254edc
update Copyright year
2023-01-04 12:44:18 -05:00
Jason Ertel
87cebedc85
Backup the new Kratos location
2022-12-14 14:12:47 -05:00
Jason Ertel
a7a15117f0
Improve soup wording when the script itself needs updated
2022-12-14 12:03:47 -05:00
Jason Ertel
865ba4264b
Stop backing up kratos since it now lives in /nsm. Ensure kratos is removed when re-installing.
2022-12-14 10:57:24 -05:00
Jason Ertel
6985b0ab27
Move kratos DB to /nsm
2022-12-14 10:50:24 -05:00
Doug Burks
aa08803f03
FIX: so-import utilities should hyperlink to dashboards #9373
2022-12-13 13:23:27 -05:00
Doug Burks
bb346d531d
FIX: so-import utilities should hyperlink to dashboards #9373
2022-12-13 13:22:53 -05:00
Doug Burks
6c057d0b0a
FIX: so-import utilities should hyperlink to dashboards #9373
2022-12-13 12:43:54 -05:00
Doug Burks
47e43e53d9
FIX: so-import utilities should hyperlink to dashboards #9373
2022-12-13 12:43:10 -05:00
Doug Burks
7184b9cb25
disable ecat_arp_info by default in so-zeek-logs
2022-12-01 07:18:05 -05:00
Mike Reeves
571ac4edec
Update soup
2022-11-29 18:36:47 -05:00
Wes
16cd1080be
Add dnp3_control reference in various places
2022-11-29 17:23:37 +00:00
Doug Burks
b06e9e8477
add new zeek opcua logs to so-zeek-logs
2022-11-26 18:44:28 -05:00
Doug Burks
ec0cf71c3f
add opcua_binary_opensecure_channel to so-zeek-logs
2022-11-26 17:00:32 -05:00
Doug Burks
33a478ff59
fix zeek ics logs in so-zeek-logs
2022-11-25 09:40:48 -05:00
Doug Burks
2ada4712bc
fix zeek ics logs in so-zeek-logs
2022-11-25 09:37:52 -05:00
Doug Burks
fad6c46e7c
fix zeek ics logs in so-zeek-logs
2022-11-25 09:35:00 -05:00
Doug Burks
9f5e75b302
add software to so-zeek-logs
2022-11-25 07:27:50 -05:00
Doug Burks
0536d174fe
Fix opcua_binary reference in so-zeek-logs
2022-11-21 14:03:22 -05:00
Doug Burks
a54bb2bad4
Remove descriptions from so-zeek-logs
2022-11-21 13:23:53 -05:00
lock-wire
f80c8b89e4
Shorten Log Descriptions
2022-11-21 09:49:31 -07:00
lock-wire
1b8e546045
Add s7comm,tds,stun,profinet,wireguard
2022-11-16 21:41:02 -06:00
lock-wire
8dc08f66fd
Merge branch 'foxtrot' of https://github.com/Security-Onion-Solutions/securityonion into foxtrot
...
merge remote
2022-11-11 12:18:02 -08:00
lock-wire
73b1e5949b
Add ecat, enip, cip, and opcua
2022-11-11 12:15:54 -08:00
Jason Ertel
595a95fdf5
merge conflicts
2022-11-10 16:47:52 -05:00
Mike Reeves
4acd9f8816
Update soup
2022-11-09 10:10:52 -05:00
Mike Reeves
a7417a7242
Update soup
2022-11-08 14:48:48 -05:00
Mike Reeves
16d8e9e5a0
Fix soup and perms updates
2022-11-01 09:05:26 -04:00
Mike Reeves
ee1f55361e
Add soup and perms updates
2022-10-31 16:33:38 -04:00
Mike Reeves
bd7e12f682
Merge pull request #8952 from Njinx/dev
...
FEATURE: so-pcap-export can run without needing to be attached to a TTY
2022-10-25 14:38:48 -04:00
Jason Ertel
05e271af47
update soup for 2.3.181
2022-10-21 11:52:54 -04:00
Ben Allen
f13f05eb94
Run without needing to be attached to a TTY
2022-10-19 14:11:11 -04:00
Doug Burks
7401008523
Update soup for 2.3.180
2022-10-11 12:58:37 -04:00
Mike Reeves
b8355b3a03
Update soup
2022-09-22 09:10:12 -04:00
Mike Reeves
e62bebeafe
Update soup
2022-08-29 09:39:41 -04:00
Mike Reeves
30b9868de1
Update soup
2022-08-29 09:32:46 -04:00
weslambert
f00d9074ff
Allow local modification acceptance prompt to be skipped when passing 'skip-prompt' as a parameter value to check_local_mods() function
2022-08-19 16:07:14 -04:00
weslambert
fbf0803906
Update verbiage around major Elasticsearch version and not requiring Elastalert index maintenance
2022-08-18 09:16:22 -04:00
weslambert
5deda45b66
Update elastalert_indices_check() function to only delete Elastalert indices if major Elasticsearch version is less than 8
...
Update elastalert_indices_check() function to only delete Elastalert indices if major Elasticsearch version is less than 8. Also clean up the output to only emit one notification regarding index deletion, and additional verbiage around function operation.
2022-08-18 09:11:38 -04:00
weslambert
fd7a118664
Invoke check_local_mods() function earlier so we don't have to wait for Docker image downloads or OS updates before checking and potentially exiting SOUP
2022-08-08 08:58:19 -04:00
weslambert
d7906945df
Add extra set of brackets for comparison of integers
2022-08-08 08:24:38 -04:00
weslambert
cb384ae024
Ensure check_local_mods() runs at the beginning of SOUP, in addition to the end, and also that it prompts (forces) the user to accept/review local modifications.
2022-08-05 11:25:33 -04:00
weslambert
340dbe8547
Check to see if Elastalert is enabled before trying to run 'so-elastalert-stop'. Also suppress error output for when so-elastalert container is not present.
2022-07-19 13:25:09 -04:00
Wes Lambert
5ceff52796
Move Elastalert indices check to function and call from beginning of soup and during pre-upgrade to 2.3.140
2022-07-19 14:54:39 +00:00
Wes Lambert
f3a0ab0b2d
Perform Elastalert index check twice
2022-07-19 14:48:19 +00:00
Wes Lambert
4a7c994b66
Revise Elastalert index check deletion logic
2022-07-19 14:31:45 +00:00
Mike Reeves
07b8785f3d
Update soup
2022-07-19 10:23:10 -04:00
weslambert
f5e10430ed
Add forward slash to fix issue with missing query path
2022-07-18 09:07:13 -04:00
weslambert
2443e8b97e
Change web_response to evaluate the response from the Spaces API and the default space query
2022-07-14 12:04:56 -04:00
