Commit Graph
100 Commits
Author SHA1 Message Date
Jason ErtelandGitHub 6383712731 Merge pull request #11315 from Security-Onion-Solutions/jertel/auto
exclude docker pull unauth errors from failing setup
2023-09-14 07:41:59 -04:00
Jason ErtelandGitHub 55847c7bdc Merge pull request #11276 from Security-Onion-Solutions/jertel/auto
give priority to presets
2023-09-08 09:26:27 -04:00
Jason ErtelandGitHub 692625f8cd Merge pull request #11271 from Security-Onion-Solutions/jertel/auto
addl node types
2023-09-07 17:25:08 -04:00
Jason ErtelandGitHub 5c0045f9f8 Merge pull request #11256 from Security-Onion-Solutions/jertel/sod
only ingest pfsense on sensor nodes
2023-09-05 12:50:47 -04:00
Jason ErtelandGitHub 028b69c7d4 Merge pull request #11245 from Security-Onion-Solutions/jertel/sod
ensure hostname is set
2023-09-02 13:49:49 -04:00
Jason ErtelandGitHub 13fbcd712b Merge pull request #11243 from Security-Onion-Solutions/jertel/sod
ensure hostname is set
2023-09-01 20:43:35 -04:00
Jason ErtelandGitHub 2616a2bba3 Merge pull request #11186 from Security-Onion-Solutions/jertel/alts
fix path to intermediate ca cert on heavy nodes
2023-08-28 11:10:04 -04:00
Jason ErtelandGitHub 8c5aa4a0e6 Merge pull request #11178 from Security-Onion-Solutions/jertel/alts
ingest pfsense sample data
2023-08-25 16:53:41 -04:00
Jason ErtelandGitHub c957c6ce14 Merge pull request #11169 from Security-Onion-Solutions/jertel/alts
fix centos install
2023-08-24 15:06:10 -04:00
Jason ErtelandGitHub 3a0590f950 Merge pull request #11166 from Security-Onion-Solutions/jertel/alts
use the correct var
2023-08-24 13:08:35 -04:00
Jason ErtelandGitHub 92c6229e00 Merge pull request #11165 from Security-Onion-Solutions/jertel/alts
allow testing runs to proceed with unsupported os
2023-08-24 12:30:07 -04:00
Jason ErtelandGitHub bdb88cc87b Merge pull request #11161 from Security-Onion-Solutions/jertel/alts
use consistent cert dir and reduce jinja complexity
2023-08-24 11:18:34 -04:00
Jason ErtelandGitHub 222352b4b3 fix typo 2023-08-17 17:26:35 -04:00
Jason ErtelandGitHub e7be8991f1 Merge pull request #11083 from Security-Onion-Solutions/jertel/souptty
force image pulls to go into soup log
2023-08-17 13:47:37 -04:00
Jason ErtelandGitHub d1210e946c Merge pull request #11043 from Security-Onion-Solutions/jertel/up
Jertel/up
2023-08-14 16:46:21 -04:00
Jason ErtelandGitHub 007720132b Merge pull request #11034 from Security-Onion-Solutions/dougburks-patch-1
soup should respect current indentation in soc_global.sls
2023-08-13 16:56:50 -04:00
Jason ErtelandGitHub d53489d674 Merge pull request #11023 from Security-Onion-Solutions/jertel/fixann
add missing annotations to avoid soc crash
2023-08-11 13:58:40 -04:00
Jason ErtelandGitHub dad541423d Merge pull request #10978 from Security-Onion-Solutions/jertel/bumpver
update version
2023-08-07 16:36:10 -04:00
Jason ErtelandGitHub e108bb9bcd Merge pull request #10932 from Security-Onion-Solutions/jertel/agentcommon
remove unused vars
2023-08-02 19:29:03 -04:00
Jason ErtelandGitHub 11c827927c Merge pull request #10931 from Security-Onion-Solutions/jertel/agentcommon
refactor elastic-agent download for soup ctrl+c anomalies
2023-08-02 19:20:45 -04:00
Jason ErtelandGitHub 99b61b5e1d Merge pull request #10925 from Security-Onion-Solutions/jertel/fiximportsuri
ensure suri rules are synced for import installs
2023-08-02 15:13:59 -04:00
Jason ErtelandGitHub 6692fffb9b Merge pull request #10910 from Security-Onion-Solutions/jertel/noautoredirforapi
Fix login flicker; so-status sluggishness
2023-08-01 17:05:48 -04:00
Jason ErtelandGitHub 266fc4e866 Merge pull request #10792 from Security-Onion-Solutions/regup
upgrade registry version
2023-07-19 10:00:40 -04:00
Jason ErtelandGitHub 6297a2632b Merge pull request #10756 from Security-Onion-Solutions/kilo
catch up branch
2023-07-12 10:38:18 -04:00
Jason ErtelandGitHub 1646459052 Merge pull request #10707 from Security-Onion-Solutions/kilo
add default pillar file
2023-07-06 14:49:40 -04:00
Jason ErtelandGitHub 224f0606c2 Merge pull request #10706 from Security-Onion-Solutions/kilo
incorporate features pillar
2023-07-06 14:04:12 -04:00
Jason ErtelandGitHub c89582ffb6 Merge pull request #10685 from Security-Onion-Solutions/kilo
remove use of pipe
2023-06-30 12:23:48 -04:00
Jason ErtelandGitHub 2e42eddbc2 Merge pull request #10656 from Security-Onion-Solutions/jertel/fix-import
fix agent extract error during install; simplify logic
2023-06-23 17:21:39 -04:00
Jason ErtelandGitHub d247c9d704 Merge pull request #10648 from Security-Onion-Solutions/jertel/fix-import
use cluster-unique password for import encryption
2023-06-23 09:40:26 -04:00
Jason ErtelandGitHub 7623dd20b9 Merge pull request #10644 from Security-Onion-Solutions/cogburn/salt-relay-fix
WIP: Fix `salt cmd.run` commands for importing
2023-06-22 20:31:19 -04:00
Jason ErtelandGitHub f4cbe20ddf Merge pull request #10641 from Security-Onion-Solutions/jertel/fix-import
fix quotations
2023-06-22 14:46:41 -04:00
Jason ErtelandGitHub cae9e6230f Merge pull request #10638 from Security-Onion-Solutions/cogburn/import-fix
Change upload path
2023-06-22 13:04:22 -04:00
Jason ErtelandGitHub 594900a8d4 Merge pull request #10609 from Security-Onion-Solutions/kilo
webauthn for SOC
2023-06-16 13:15:25 -04:00
Jason ErtelandGitHub 6894fa4e4d Update VERSION 2023-06-16 13:09:01 -04:00
Jason ErtelandGitHub 7093254439 Merge pull request #10582 from Security-Onion-Solutions/jertel/pcap
ensure status line shows dates for new and existing imports
2023-06-13 15:16:43 -04:00
Jason ErtelandGitHub e06787445c Merge pull request #10561 from Security-Onion-Solutions/jertel/pcap
Node description config setting should not accept a grid-wide value
2023-06-09 12:02:51 -04:00
Jason ErtelandGitHub 6f7de954d9 Merge pull request #10559 from Security-Onion-Solutions/jertel/pcap
Telegraf should monitor all mount points
2023-06-09 09:18:54 -04:00
Jason ErtelandGitHub db5abcb3cf Merge pull request #10503 from Security-Onion-Solutions/jertel/pcap
add ability to output PCAP import results in JSON format
2023-06-05 14:32:32 -04:00
Jason ErtelandGitHub 374ab0779a Merge pull request #10458 from Security-Onion-Solutions/jertel/debugrsa
Add short sleeps around show_top to isolate if there's a race conditi…
2023-05-30 12:09:34 -04:00
Jason ErtelandGitHub 482c5324db Merge pull request #10442 from Security-Onion-Solutions/airgaps
Rule Updates
2023-05-26 20:32:39 -04:00
Jason ErtelandGitHub 32021cf272 Merge pull request #10438 from Security-Onion-Solutions/jertel/redircurl
support forwarding urls
2023-05-26 13:42:57 -04:00
Jason ErtelandGitHub 657ef97d17 Merge pull request #10433 from Security-Onion-Solutions/kilo
Use common fail routine when explicitly aborting setup; Enhance cloud detection
2023-05-26 09:54:15 -04:00
Jason ErtelandGitHub aad08a830b Merge pull request #10425 from Security-Onion-Solutions/kilo
fix malformed alert templates
2023-05-24 10:21:21 -04:00
Jason ErtelandGitHub f53fb69ffb Merge pull request #10407 from Security-Onion-Solutions/kilo
Ignore Synchronize button clicks when an active salt job is running and another is already in queue
2023-05-22 14:59:42 -04:00
Jason ErtelandGitHub 02cf1074f2 Merge pull request #10400 from Security-Onion-Solutions/kilo
use the same requests version that's already packaged with the analyzer
2023-05-20 08:45:21 -04:00
Jason ErtelandGitHub 2f942a3e37 Merge pull request #10393 from Security-Onion-Solutions/kilo
fix lib dependency issue with whoisit
2023-05-19 14:34:42 -04:00
Jason ErtelandGitHub b7e0923ec4 Merge pull request #10382 from Security-Onion-Solutions/kilo
add missing var for local dev
2023-05-17 18:58:29 -04:00
Jason ErtelandGitHub dcd761ad74 Merge pull request #10364 from Security-Onion-Solutions/kilo
import installs do not use monitor ifaces
2023-05-16 10:15:26 -04:00
Jason ErtelandGitHub 1724565331 Merge pull request #10362 from Security-Onion-Solutions/kilo
ensure automated tests have passwordless sudo
2023-05-16 08:49:00 -04:00
Jason ErtelandGitHub cea9af4e01 Merge pull request #10359 from Security-Onion-Solutions/kilo
missing braces
2023-05-16 07:25:36 -04:00
Jason ErtelandGitHub 1ddc4b6ff8 Merge pull request #10357 from Security-Onion-Solutions/kilo
ISO tests also use DHCP
2023-05-15 19:04:31 -04:00
Jason ErtelandGitHub de28e15805 Merge pull request #10354 from Security-Onion-Solutions/kilo
Relax rate limiting thresholds when installing in test mode
2023-05-15 13:02:07 -04:00
Jason ErtelandGitHub 2ec8d6abf0 Merge pull request #10337 from Security-Onion-Solutions/kilo
Prevent duplicate telegraph data from elastic from distorting Influx graphs
2023-05-11 13:38:14 -04:00
Jason ErtelandGitHub 7700a5a1bf Merge pull request #10328 from Security-Onion-Solutions/kilo
add missing dollar sign
2023-05-10 17:06:35 -04:00
Jason ErtelandGitHub 6f7f09f1cd Merge pull request #10310 from Security-Onion-Solutions/kilo
nginx changes: add rate limiting, remove old HH html
2023-05-08 16:32:27 -04:00
Jason ErtelandGitHub b46a5c4b2a Merge pull request #10267 from Security-Onion-Solutions/kilo
more detection improvements
2023-05-02 08:17:09 -04:00
Jason ErtelandGitHub 6c151d3ebd Merge pull request #10260 from Security-Onion-Solutions/kilo
simplify cloud detection
2023-05-01 11:26:34 -04:00
Jason ErtelandGitHub 73aceb9697 Merge pull request #10251 from Security-Onion-Solutions/kilo
Kilo
2023-04-28 14:44:25 -04:00
Jason ErtelandGitHub 8459054ff8 Merge pull request #10220 from Security-Onion-Solutions/kilo
timeout more quickly on aws imdsv2 detection
2023-04-26 07:56:22 -04:00
Jason ErtelandGitHub 969cf25818 Merge pull request #10199 from Security-Onion-Solutions/jertel/imdsv2
Detect cloud install on forced imdsv2 instances
2023-04-24 16:33:56 -04:00
Jason ErtelandGitHub 3f14885539 Merge pull request #10151 from Security-Onion-Solutions/kilo
avoid docker and lo nics getting used by test profiles
2023-04-18 11:56:35 -04:00
Jason ErtelandGitHub aade62491c Merge pull request #10132 from Security-Onion-Solutions/kilo
fix log dir
2023-04-14 16:58:14 -04:00
Jason ErtelandGitHub 9bd176621d Merge pull request #10130 from Security-Onion-Solutions/kilo
detect root using id command
2023-04-14 16:17:44 -04:00
Jason ErtelandGitHub 9bc44c122f Merge pull request #10129 from Security-Onion-Solutions/kilo
wrong and
2023-04-14 12:46:11 -04:00
Jason ErtelandGitHub dc227df229 Merge pull request #10128 from Security-Onion-Solutions/kilo
Skip raid state for cloud images
2023-04-14 10:31:17 -04:00
Jason ErtelandGitHub a8d3363a6f Merge pull request #10115 from Security-Onion-Solutions/kilo
discover appliance model grain during setup
2023-04-12 19:12:45 -04:00
Jason ErtelandGitHub 3883a89212 Merge pull request #10102 from Security-Onion-Solutions/kilo
elastic-fleet typo fix; remote dev enhancement
2023-04-10 14:09:20 -04:00
Jason ErtelandGitHub 44c696a495 Merge pull request #10036 from Security-Onion-Solutions/commonprofile
ensure scripts are run as root, have copyright, and path is correct
2023-03-28 11:59:10 -04:00
Jason ErtelandGitHub 4efe22efb3 Update so-elasticsearch-cluster-settings 2023-03-28 11:57:41 -04:00
Jason ErtelandGitHub 591129b98c Update so-elasticsearch-pipelines 2023-03-28 11:57:22 -04:00
Jason ErtelandGitHub 60d770411a Update so-elasticsearch-roles-load 2023-03-28 11:57:07 -04:00
Jason ErtelandGitHub 5f49a120de Update so-elasticsearch-templates-load 2023-03-28 11:56:51 -04:00
Jason ErtelandGitHub 492fe1fc85 Ensure /usr/sbin is in path 2023-03-28 11:48:31 -04:00
Jason ErtelandGitHub 100d9f14e9 Merge pull request #10023 from Security-Onion-Solutions/kilo
fix role
2023-03-27 19:31:06 -04:00
Jason ErtelandGitHub 890e1897af Merge pull request #9999 from Security-Onion-Solutions/kilo
prune system volumes during upgrade
2023-03-24 13:30:57 -04:00
Jason ErtelandGitHub ca363053e6 Merge pull request #9975 from Security-Onion-Solutions/kilo
catch errors and exit with proper exit code
2023-03-21 10:51:36 -04:00
Jason ErtelandGitHub 331d4833b1 Merge pull request #9967 from Security-Onion-Solutions/kilo
Kilo
2023-03-20 18:27:35 -04:00
Jason ErtelandGitHub 1771a3123f Merge pull request #9961 from Security-Onion-Solutions/kilo
Backup old setup logs earlier in setup
2023-03-20 11:24:08 -04:00
Jason ErtelandGitHub ad2616900c Merge pull request #9939 from Security-Onion-Solutions/kilo
automated testing support; removal of nonexistent ScanRuby strelka scanner
2023-03-16 09:30:05 -04:00
Jason ErtelandGitHub aed41404fc Merge pull request #9852 from Security-Onion-Solutions/kilo
Remove FleetDM tool from SOC instead of deactivating it; generate SRV key during setup
2023-02-24 13:05:58 -05:00
Jason ErtelandGitHub b62a0c5d5c Merge pull request #9846 from Security-Onion-Solutions/kilo
Kilo
2023-02-23 12:12:06 -05:00
Jason ErtelandGitHub 1f37af0e57 Merge pull request #9800 from Security-Onion-Solutions/kilo
influx upgrade
2023-02-16 13:51:53 -05:00
Jason ErtelandGitHub e4de89c960 Merge pull request #9798 from Security-Onion-Solutions/jertel-remove-kilo-from-ver
Update VERSION
2023-02-16 10:57:19 -05:00
Jason ErtelandGitHub dcbf5a2fa6 Update VERSION 2023-02-16 10:55:32 -05:00
Jason ErtelandGitHub 6e9d1f7c2c Merge pull request #9797 from Security-Onion-Solutions/kilo
Influx upgrade
2023-02-16 10:46:57 -05:00
Jason ErtelandGitHub c9f18891b2 Merge pull request #9639 from Security-Onion-Solutions/kilo
auto extract source/dest IP on case related event attachments; improve so-verify stream to console
2023-01-25 11:37:16 -05:00
Jason ErtelandGitHub fd7d51a59b Merge pull request #9630 from Security-Onion-Solutions/kilo
Kilo
2023-01-24 10:45:12 -05:00
Jason ErtelandGitHub 2bffd9b473 Merge pull request #9628 from Security-Onion-Solutions/kilo
try paths filter on both even though docs only mention support for push
2023-01-24 10:27:30 -05:00
Jason ErtelandGitHub 5da1b03d9b Merge pull request #9619 from Security-Onion-Solutions/kilo
switch MySQL 8 to use native password for playbook compat; fix so-verify mail inspection
2023-01-23 15:14:00 -05:00
Jason ErtelandGitHub a613d960b9 Merge pull request #9608 from Security-Onion-Solutions/kilo
setup improvements
2023-01-20 13:11:11 -05:00
Jason ErtelandGitHub 4044706cd9 Merge pull request #9603 from Security-Onion-Solutions/kilo
Handle setup failures
2023-01-19 15:49:41 -05:00
Jason ErtelandGitHub 8d797ad9df Merge pull request #9490 from Security-Onion-Solutions/kilo
Ensure create/update dates are both reset when an admin sets a user pass
2022-12-30 11:47:01 -05:00
Jason ErtelandGitHub ba13ad7151 Merge pull request #9454 from Security-Onion-Solutions/kilo
fix redis defaults to force string keys instead of numeric
2022-12-21 18:16:40 -05:00
Jason ErtelandGitHub 5a5c565fae Merge pull request #9449 from Security-Onion-Solutions/kilo
Ensure user/pass values are quoted due to symbol chars appearing in values
2022-12-21 14:02:38 -05:00
Jason ErtelandGitHub 33a1aea729 Merge pull request #9448 from Security-Onion-Solutions/kilo
improve so-status rendering on terminals that only support 8 colors
2022-12-21 10:14:47 -05:00
Jason ErtelandGitHub 2edc3cac11 Clarify Kratos annotations 2022-12-20 14:08:49 -05:00
Jason ErtelandGitHub 1b42965a6d Merge pull request #9416 from Security-Onion-Solutions/jertel/lic
license key format change and eventFields dedup
2022-12-16 15:58:08 -05:00
Jason ErtelandGitHub 6a73410be9 Merge pull request #9394 from Security-Onion-Solutions/jertel/mvkr
move Kratos DB to /nsm
2022-12-14 15:00:44 -05:00
Jason ErtelandGitHub d1f554723a Merge pull request #9317 from Security-Onion-Solutions/config
Reduce cron noise; ensure filecheck is restarted if modified
2022-12-07 08:41:04 -05:00
Jason ErtelandGitHub 6443e702a5 Merge pull request #9305 from Security-Onion-Solutions/config
Filecheck support for Suricata
2022-12-06 12:53:19 -05:00