CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-07-14 04:43:09 +02:00
Code Issues Packages Projects Releases Wiki Activity
6,682 Commits 40 Branches 127 Tags
1b6f681ae1b45cda2e0da170e95372d705dd8820
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
m0duspwnens 53c3b19a08 Merge remote-tracking branch 'remotes/origin/dev' into issue/3288 2021-03-16 16:46:32 -04:00
m0duspwnens 38a497932c https://github.com/Security-Onion-Solutions/securityonion/issues/3288 2021-03-16 16:36:35 -04:00
m0duspwnens a197d5addf revert version to 2.3.30 https://github.com/Security-Onion-Solutions/securityonion/issues/3206 2021-03-01 13:58:04 -05:00
m0duspwnens 3983e08fe5 exclude zeekcaptureloss when suricata metadata selected https://github.com/Security-Onion-Solutions/securityonion/issues/3206 2021-03-01 13:31:05 -05:00
Josh PattersonandGitHub b6fe8dec3b Merge pull request #3170 from Security-Onion-Solutions/bugfix/setup-configure-network 
Fix logic for configure network option in setup
 2021-02-26 15:43:38 -05:00
Josh PattersonandGitHub b893a2b887 Merge pull request #3154 from Security-Onion-Solutions/salt-3002.5 
upgrade to Salt 3002.5
 2021-02-26 08:57:23 -05:00
m0duspwnens b4c1c56e72 Merge remote-tracking branch 'remotes/origin/dev' into salt-3002.5 2021-02-26 08:38:02 -05:00
Josh PattersonandGitHub dc673eef77 Merge pull request #3148 from Security-Onion-Solutions/salt-3002.5 
Salt 3002.5
 2021-02-25 23:00:35 -05:00
m0duspwnens 9fa625189f upgrade to salt 3002.5 https://github.com/Security-Onion-Solutions/securityonion/issues/3147 2021-02-25 20:07:29 -05:00
Josh PattersonandGitHub 8a0e0e88e0 Merge pull request #3142 from Security-Onion-Solutions/issue/3130 
stop zeek state.db from getting owned by root
 2021-02-25 15:01:20 -05:00
Josh PattersonandGitHub 18365ed87d Merge pull request #3140 from Security-Onion-Solutions/issue/3130 
Issue/3130
 2021-02-25 11:27:46 -05:00
m0duspwnens fcd3f81400 fix quotes 2021-02-25 11:16:53 -05:00
m0duspwnens c8213fa3d4 change docker exec 2021-02-25 11:07:54 -05:00
m0duspwnens add66e750e forgot to add -c 2021-02-25 10:49:09 -05:00
m0duspwnens d52abcbcbd ensure zeekctl is run as user zeek https://github.com/Security-Onion-Solutions/securityonion/issues/3130 2021-02-25 09:58:07 -05:00
Josh PattersonandGitHub 25ca70efd8 Merge pull request #3120 from Security-Onion-Solutions/issue/3115 
ensure log_level and log_level_logfile are set to info in /etc/salt/minion
 2021-02-24 13:36:34 -05:00
Josh PattersonandGitHub 81331264e7 Merge pull request #3117 from Security-Onion-Solutions/issue/3115 
logfile is 1 word
 2021-02-24 11:57:33 -05:00
m0duspwnens eba5d271aa logfile is 1 word https://github.com/Security-Onion-Solutions/securityonion/issues/3115 2021-02-24 11:56:43 -05:00
Josh PattersonandGitHub a9066f491d Merge pull request #3116 from Security-Onion-Solutions/issue/3115 
Issue/3115
 2021-02-24 11:51:42 -05:00
m0duspwnens 3552abfca1 ensure info log level - 2021-02-24 11:50:08 -05:00
Josh PattersonandGitHub 988ad5f8fc Merge pull request #3086 from Security-Onion-Solutions/issue/3056 
Issue/3056
 2021-02-23 14:53:42 -05:00
m0duspwnens 6ee69ff21b Merge remote-tracking branch 'remotes/origin/dev' into issue/3056 2021-02-23 11:11:50 -05:00
m0duspwnens 00cc640224 add EPS to managersearch dashboard 2021-02-23 11:08:08 -05:00
m0duspwnens e76ee07932 add CPUS for cpu count 2021-02-23 10:10:58 -05:00
m0duspwnens 1f2475c1c5 add eps graph to manager 2021-02-23 10:06:11 -05:00
m0duspwnens 141fbaced1 add eps graph to standalone 2021-02-23 09:40:21 -05:00
Josh PattersonandGitHub 4a510df205 Merge pull request #3026 from Security-Onion-Solutions/delta 
Delta
 2021-02-18 16:31:18 -05:00
Josh PattersonandGitHub 79e7b1da4d Merge pull request #3021 from Security-Onion-Solutions/issue/2989 
change suricata clean cron to run once a day
 2021-02-18 14:07:40 -05:00
m0duspwnens 03487c2a31 change suricata clean cron to run once a day 2021-02-18 14:06:45 -05:00
Josh PattersonandGitHub 0ab9577863 Merge pull request #3018 from Security-Onion-Solutions/all_rules_dont_show_changes 
dont show changes since file can be large
 2021-02-18 12:23:54 -05:00
m0duspwnens bf100a2310 dont show changes since file can be large 2021-02-18 12:23:22 -05:00
Josh PattersonandGitHub 2092044335 Merge pull request #3017 from Security-Onion-Solutions/issue/1237 
load templates all the time
 2021-02-18 12:13:49 -05:00
m0duspwnens e730efb4ec load templates all the time 2021-02-18 12:12:18 -05:00
Josh PattersonandGitHub 76cdc45fad Merge pull request #3016 from Security-Onion-Solutions/all_rules_dont_show_changes 
Don't show changes because all.rules can be large
 2021-02-18 12:00:08 -05:00
m0duspwnens 069997a65c Don't show changes because all.rules can be large 2021-02-18 11:56:25 -05:00
Josh PattersonandGitHub a9da761fab Merge pull request #3012 from Security-Onion-Solutions/issue/2989 
Issue/2989
 2021-02-18 10:52:23 -05:00
m0duspwnens 95df18c545 limit eve logs and gz files based on days 2021-02-18 10:45:20 -05:00
m0duspwnens a4d5f58256 fix surilogcompress 2021-02-18 10:33:47 -05:00
Josh PattersonandGitHub 3f7cdb933f Merge pull request #3010 from Security-Onion-Solutions/issue/2989 
Issue/2989
 2021-02-18 09:58:35 -05:00
m0duspwnens 74ca4487de ensure at least 2 eve files are kept https://github.com/Security-Onion-Solutions/securityonion/issues/2989 2021-02-18 09:51:40 -05:00
m0duspwnens 4b07d5e457 add identifier to eve clean cron 2021-02-18 09:39:54 -05:00
m0duspwnens 041d193f2d fix brackets 2021-02-18 09:37:37 -05:00
m0duspwnens 0bef8b6662 limit number of eve.json files for suricata https://github.com/Security-Onion-Solutions/securityonion/issues/2989 2021-02-18 09:26:59 -05:00
Josh PattersonandGitHub 174ed84750 Merge pull request #2993 from Security-Onion-Solutions/issue/2736 
logrotate strelka
 2021-02-17 11:47:52 -05:00
m0duspwnens 7a595df5b6 strelka logrotate - https://github.com/Security-Onion-Solutions/securityonion/issues/2736 2021-02-17 11:17:41 -05:00
m0duspwnens 2b07d89b5a error: /opt/so/conf/sensor-rotate.conf:8 unknown option 'endscript' -- ignoring line 2021-02-17 11:01:18 -05:00
m0duspwnens e6ae1af85f test rotating strelka log at 100k 2021-02-17 10:47:06 -05:00
Josh PattersonandGitHub ce313d8dc4 Merge pull request #2992 from Security-Onion-Solutions/issue/2737 
fix logic for log_size_limit
 2021-02-17 10:09:54 -05:00
Josh PattersonandGitHub fddef1a6f4 Merge pull request #2985 from Security-Onion-Solutions/issue/2915 
remove old backup files
 2021-02-17 09:43:58 -05:00
Josh PattersonandGitHub bec437c2cf Merge pull request #2984 from Security-Onion-Solutions/issue/2737 
Issue/2737
 2021-02-16 15:41:46 -05:00
m0duspwnens 996bf0768b fix logic for log_size_limit https://github.com/Security-Onion-Solutions/securityonion/issues/2737 2021-02-16 15:40:01 -05:00
Josh PattersonandGitHub eb18ec552c Merge pull request #2980 from Security-Onion-Solutions/issue/2915 
Issue/2915
 2021-02-16 12:01:37 -05:00
m0duspwnens 7099ed4bf5 delete many backup files 2021-02-16 11:55:49 -05:00
m0duspwnens 1ccc5480e1 remove oldest backup 2021-02-16 11:40:45 -05:00
Josh PattersonandGitHub bf3b609a44 Merge pull request #2955 from Security-Onion-Solutions/issue/1237 
Issue/1237
 2021-02-12 16:04:58 -05:00
m0duspwnens 100601c452 only laod templates if they change https://github.com/Security-Onion-Solutions/securityonion/issues/1237 2021-02-12 16:03:45 -05:00
Josh PattersonandGitHub ce04b109fe Merge pull request #2950 from Security-Onion-Solutions/delta 
Disable ICMP timestamps by default
 2021-02-12 13:54:59 -05:00
Josh PattersonandGitHub a8598a50e4 Merge pull request #2953 from Security-Onion-Solutions/issue/2756 
remove /etc/yum.repos.d/salt-2019-2-5.repo if present
 2021-02-12 12:05:21 -05:00
m0duspwnens 3b0c2b3e91 remove /etc/yum.repos.d/salt-2019-2-5.repo if present https://github.com/Security-Onion-Solutions/securityonion/issues/2756 2021-02-12 12:04:08 -05:00
m0duspwnens b4e9a44572 Merge remote-tracking branch 'remotes/origin/dev' into issue/1704 2021-02-11 11:10:06 -05:00
m0duspwnens 7e4d7a6985 drop icmp timestamp replies https://github.com/Security-Onion-Solutions/securityonion/issues/1704 2021-02-11 11:09:21 -05:00
Josh PattersonandGitHub bf8ca590d0 Merge pull request #2932 from Security-Onion-Solutions/delta 
only save at the end
 2021-02-11 09:25:31 -05:00
m0duspwnens 3cfbc61f4e only save at the end 2021-02-10 11:15:39 -05:00
Josh PattersonandGitHub ef2fe2bb61 Merge pull request #2828 from Security-Onion-Solutions/delta 
adjust timeout for ssl states and pillarize ElastAlert
 2021-02-02 13:35:28 -05:00
m0duspwnens b3c08229db Merge remote-tracking branch 'remotes/origin/sslstate/timeouts_retry' into delta 2021-02-01 15:33:31 -05:00
m0duspwnens 8cf0a3da98 remove seconds 2021-02-01 15:19:47 -05:00
m0duspwnens 8ff6d1639a Merge remote-tracking branch 'remotes/origin/dev' into issue/1191 2021-02-01 12:51:00 -05:00
m0duspwnens 0ea504c16a remove space 2021-01-29 17:32:48 -05:00
m0duspwnens 8ca15a6679 Merge remote-tracking branch 'remotes/origin/dev' into issue/1191 2021-01-29 16:54:26 -05:00
m0duspwnens 618b94b9b6 add newline 2021-01-29 15:31:05 -05:00
m0duspwnens f50a89a0cf watch elastalert config and restart docker if chagnes 2021-01-29 15:28:59 -05:00
m0duspwnens 482b6eb699 Merge remote-tracking branch 'remotes/origin/dev' into sslstate/timeouts_retry 2021-01-29 13:44:27 -05:00
m0duspwnens e6ecd609cc change timeouts to 30s 2021-01-29 13:44:11 -05:00
m0duspwnens 0936dbdb1c add timeouts and retries to ca/ssl states 2021-01-28 11:40:31 -05:00
m0duspwnens b7aef32eeb fix missing } 2021-01-27 15:50:23 -05:00
m0duspwnens 8df9e020ac pillarize elastalert https://github.com/Security-Onion-Solutions/securityonion/issues/1191 2021-01-27 15:35:29 -05:00
m0duspwnens 0ac19142c4 Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into dev 2021-01-27 10:52:05 -05:00
m0duspwnens be0b2b99e9 Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into dev 2021-01-26 13:48:49 -05:00
Josh PattersonandGitHub f8242a931c Merge pull request #2733 from Security-Onion-Solutions/automation/ssh_prompts 
fix if statement for isntalling sshpass
 2021-01-26 09:57:32 -05:00
m0duspwnens ffd01d6975 fix if statement for isntalling sshpass 2021-01-26 09:49:19 -05:00
m0duspwnens f1faab7b1a Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into dev 2021-01-26 09:04:00 -05:00
Josh PattersonandGitHub 049daa6701 Merge pull request #2725 from Security-Onion-Solutions/automation/ssh_prompts 
Automation/ssh prompts
 2021-01-25 17:21:55 -05:00
m0duspwnens 2f8b5afe3e Merge remote-tracking branch 'remotes/origin/issue/2722' into automation/ssh_prompts 2021-01-25 15:23:39 -05:00
m0duspwnens 944817732b grep for the scrip to be running https://github.com/Security-Onion-Solutions/securityonion/issues/2722 2021-01-25 15:22:04 -05:00
m0duspwnens 17a1189e42 Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into dev 2021-01-25 15:20:46 -05:00
m0duspwnens 50345628f0 Merge remote-tracking branch 'remotes/origin/dev' into automation/ssh_prompts 2021-01-25 13:48:08 -05:00
m0duspwnens 7dcca6f364 change when we detect os and wait_for_apt when installing sshpass 2021-01-25 13:47:51 -05:00
m0duspwnens e1f7c090f3 detect os and cloud sooner 2021-01-25 10:25:41 -05:00
m0duspwnens fe09479dde Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into dev 2021-01-25 09:55:52 -05:00
m0duspwnens 76aadbd04e Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into dev 2021-01-21 09:30:03 -05:00
Josh PattersonandGitHub 516634ef8d Merge pull request #2691 from Security-Onion-Solutions/issue/2679 
Issue/2679
 2021-01-20 17:41:43 -05:00
m0duspwnens 18217ba38b change so-searchnode role to so-node https://github.com/Security-Onion-Solutions/securityonion/issues/2679 2021-01-20 17:40:02 -05:00
m0duspwnens 6e756b3586 allow heathcheck state for standalone and heavynode 2021-01-20 17:34:53 -05:00
Josh PattersonandGitHub e7e6243399 Merge pull request #2689 from Security-Onion-Solutions/issue/2679 
Issue/2679
 2021-01-20 15:14:38 -05:00
m0duspwnens 18278a97ac fix salt top formatting 2021-01-20 15:13:55 -05:00
m0duspwnens b693373d8d change how we allow or disallow states to be run https://github.com/Security-Onion-Solutions/securityonion/issues/2679 2021-01-20 15:09:53 -05:00
m0duspwnens b1c5b83fd5 removing old search node logic and managersensor from salt top 2021-01-20 09:53:42 -05:00
m0duspwnens caaa8cc764 add schedule state to fleet node so it gets highstate schedule 2021-01-20 09:46:49 -05:00
m0duspwnens 0fec46505d Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into dev 2021-01-19 14:35:53 -05:00
m0duspwnens 3ef8106d8d Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into dev 2021-01-19 11:28:27 -05:00