Commit Graph

6410 Commits

Author SHA1 Message Date
Mike Reeves
9f984036c5 Use the internmediate cert 2021-01-21 13:00:46 -05:00
Mike Reeves
b0914fa604 try .p12 2021-01-21 12:46:00 -05:00
Mike Reeves
9759990233 Switch to java key store 2021-01-21 12:29:45 -05:00
Mike Reeves
bb523c44e6 Enable features temporarily 2021-01-21 12:19:41 -05:00
Mike Reeves
013b706ce4 Enable http ssl 2021-01-21 12:13:23 -05:00
weslambert
583b65e952 Fix syntax 2021-01-21 11:52:23 -05:00
Mike Reeves
84b75a38a3 Fix error in init.sls for ES 2021-01-21 11:21:04 -05:00
Mike Reeves
6de70ec820 Update docker mappings for ES 2021-01-21 11:12:12 -05:00
weslambert
d6043d091b Merge pull request #2701 from Security-Onion-Solutions/feature/filebeat_events
Allow for Filebeat queue/output adjustments via pillar
2021-01-21 10:36:33 -05:00
Wes Lambert
19d22e1f8a Allow for Filebeat queue/output adjustments via pillar 2021-01-21 15:34:54 +00:00
Mike Reeves
35c741ae63 Turn on Xpack SSL 2021-01-21 09:49:31 -05:00
m0duspwnens
76aadbd04e Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into dev 2021-01-21 09:30:03 -05:00
weslambert
a99246c600 Merge pull request #2698 from Security-Onion-Solutions/fix/reserved_ports
Fix/reserved ports
2021-01-21 08:39:35 -05:00
Wes Lambert
0039877779 Check for port availability for Wazuh and Strelka 2021-01-21 13:29:09 +00:00
Wes Lambert
9a91674688 Add reserved ports file for sysctl 2021-01-21 13:18:22 +00:00
Wes Lambert
74e315841a Modify common to reserve Docker proxy ports 2021-01-21 13:17:16 +00:00
Masaya-A
cd5abf924c To make log rotation working 2021-01-21 09:31:15 +09:00
Masaya-A
845ab92d36 To make log rotation working 2021-01-21 09:30:34 +09:00
Josh Patterson
516634ef8d Merge pull request #2691 from Security-Onion-Solutions/issue/2679
Issue/2679
2021-01-20 17:41:43 -05:00
m0duspwnens
18217ba38b change so-searchnode role to so-node https://github.com/Security-Onion-Solutions/securityonion/issues/2679 2021-01-20 17:40:02 -05:00
m0duspwnens
6e756b3586 allow heathcheck state for standalone and heavynode 2021-01-20 17:34:53 -05:00
Josh Patterson
e7e6243399 Merge pull request #2689 from Security-Onion-Solutions/issue/2679
Issue/2679
2021-01-20 15:14:38 -05:00
m0duspwnens
18278a97ac fix salt top formatting 2021-01-20 15:13:55 -05:00
m0duspwnens
b693373d8d change how we allow or disallow states to be run https://github.com/Security-Onion-Solutions/securityonion/issues/2679 2021-01-20 15:09:53 -05:00
Jason Ertel
58f922aac3 Skip image pull if so-tcpreplay image already exists and is current 2021-01-20 11:17:10 -05:00
m0duspwnens
b1c5b83fd5 removing old search node logic and managersensor from salt top 2021-01-20 09:53:42 -05:00
m0duspwnens
caaa8cc764 add schedule state to fleet node so it gets highstate schedule 2021-01-20 09:46:49 -05:00
Masaya-A
d53945888c Add sensoroni dir 2021-01-20 14:54:55 +09:00
Masaya-A
d3d11ff67b Delete some directories
Delete some directories that should not be handled by common-rotate.
2021-01-20 13:42:20 +09:00
Masaya-A
b2b221fa46 Specify the file name for Suricata
stats.log will be rotated by surirotate
2021-01-20 13:20:04 +09:00
Masaya-A
e20891ac44 Fix spacing 2021-01-20 13:10:33 +09:00
Masaya-A
8cca792a8f To avoid lots of "[stenoloss.sh] <defunct>" 2021-01-20 12:16:17 +09:00
Masaya-A
5dad143c42 Need full path in order to work on cron 2021-01-20 12:14:09 +09:00
Masaya-A
9dd3199ec4 Merge pull request #1 from Security-Onion-Solutions/dev
Update Dev
2021-01-20 12:09:35 +09:00
Jason Ertel
71e0014115 Wrap parenthesis around correlation filter to allow additional filtering 2021-01-19 17:51:23 -05:00
m0duspwnens
0fec46505d Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into dev 2021-01-19 14:35:53 -05:00
William Wernert
8023e79020 [fix] Don't remove answer file when checking version on manager, file does not yet exist 2021-01-19 11:28:33 -05:00
m0duspwnens
3ef8106d8d Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into dev 2021-01-19 11:28:27 -05:00
William Wernert
650008e1e6 [fix] Replace leftover /root/install_opt strings with variable 2021-01-19 11:20:53 -05:00
Jason Ertel
d91913e58e Redirect tcpreplay warnings to dev null when running so-test 2021-01-18 21:42:50 -05:00
Mike Reeves
12aa4033b6 Fix soup in case airgap is in the hostname 2021-01-18 18:08:34 -05:00
Jason Ertel
a795f0a487 Correct airgap IPs; Remove auto tcpreplay during post-setup phase 2021-01-16 12:01:49 -05:00
Jason Ertel
2006677a22 Add default customization file (Blank) 2021-01-15 20:08:27 -05:00
William Wernert
32839f8a53 [feat] Various input validation changes + fixes
* Keep invalid input in subsequent prompts
* Remove useless placeholder values
* Only set PROCS variable once
* Make input collection loops more consistent
2021-01-15 18:05:29 -05:00
Jason Ertel
0af6afa216 Add method for making adjustments to the SOC UI 2021-01-15 16:26:06 -05:00
William Wernert
8cb836a17a [fix] Don't preset HOSTNAME var, interferes with automation 2021-01-15 16:22:07 -05:00
William Wernert
432d231a0e [fix] Don't use set -e since we depend on non-zero exit codes for this function 2021-01-15 13:52:10 -05:00
William Wernert
9726ff9ce6 [fix] Correct logic for verbose flag 2021-01-15 13:39:12 -05:00
Mike Reeves
9cf63545bc Merge pull request #2640 from Masaya-A/influxdb/strengthen
Disable weak cipher suites from influxdb
2021-01-15 10:50:21 -05:00
m0duspwnens
76c7c46887 Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into dev 2021-01-15 10:48:19 -05:00