Commit Graph
100 Commits
Author SHA1 Message Date
Mike ReevesandGitHub 2f3488b134 Merge pull request #3476 from Security-Onion-Solutions/issue/3288
Issue/3288
2021-03-16 18:56:07 -04:00
Mike ReevesandGitHub d92c1c11aa Merge pull request #3463 from Security-Onion-Solutions/kilo
Ignore TIME_WAIT when checking for Strelka frontend port reservation
2021-03-16 12:59:16 -04:00
Mike ReevesandGitHub 05ec7dba21 Merge pull request #3452 from Security-Onion-Solutions/Telegraf-Fix
Turn off SSL Verification in Telegraf
2021-03-15 16:47:27 -04:00
Mike ReevesandGitHub 674bb342ea Turn off SSL Verification in Telegraf 2021-03-15 16:39:43 -04:00
Mike ReevesandGitHub c93aab7a85 Merge pull request #3448 from Security-Onion-Solutions/kilo
Allow for moving Strelka files to processed directory after scanning
2021-03-15 14:51:04 -04:00
Mike ReevesandGitHub d931e57fd8 Merge pull request #3428 from Security-Onion-Solutions/kilo 2021-03-12 17:03:48 -05:00
Mike ReevesandGitHub 4ac408ad38 Merge pull request #3423 from Security-Onion-Solutions/issue/3422
FIX: Improve Setup verbiage #3422
2021-03-12 11:04:25 -05:00
Mike ReevesandGitHub cdd95986a8 Merge pull request #3398 from Security-Onion-Solutions/issue/3397
FIX: Improve Suricata DHCP logging and parsing #3397
2021-03-11 11:07:53 -05:00
Mike ReevesandGitHub 6bbcc7a5e9 Merge pull request #3382 from Security-Onion-Solutions/kilo
Ensure MTU is defined for advanced sensor automation
2021-03-10 09:27:20 -05:00
Mike ReevesandGitHub 18203513ab Update cert location for eval.import 2021-03-10 09:14:14 -05:00
Mike ReevesandGitHub 2e74cb6abf Merge pull request #3377 from Security-Onion-Solutions/kilo 2021-03-09 21:40:43 -05:00
Mike ReevesandGitHub 2e01330e1b Update 9101_output_osquery_livequery.conf.jinja 2021-03-09 13:15:04 -05:00
Mike ReevesandGitHub 734d25b1ac Merge pull request #3361 from Security-Onion-Solutions/nomorefeatures
Make saved objects less hacky
2021-03-09 10:05:23 -05:00
Mike ReevesandGitHub 3967e581cf Merge pull request #3356 from Security-Onion-Solutions/kilo
fix: Sensors can temporarily show offline while processing large PCAP…
2021-03-08 19:14:54 -05:00
Mike ReevesandGitHub 39d4f077b4 Merge pull request #3290 from Security-Onion-Solutions/foxtrot
Foxtrot
2021-03-04 13:44:00 -05:00
Mike ReevesandGitHub 05c7bd5789 Merge pull request #3285 from Security-Onion-Solutions/elastic
Elastic
2021-03-04 10:57:06 -05:00
Mike ReevesandGitHub 8c474cc7df Merge pull request #3268 from Security-Onion-Solutions/issue/3254
FIX: Custom Kibana settings are not being applied properly on upgrades #3254
2021-03-04 08:39:50 -05:00
Mike ReevesandGitHub bff446543a Merge pull request #3215 from Security-Onion-Solutions/foxtrot
Foxtrot
2021-03-01 15:58:41 -05:00
Mike ReevesandGitHub 85204dbb14 Merge pull request #3210 from Security-Onion-Solutions/dev2340
Update VERSION
2021-03-01 15:28:45 -05:00
Mike ReevesandGitHub 2c75cb74db Update VERSION 2021-03-01 15:17:38 -05:00
Mike ReevesandGitHub 0d70d2e6f8 Merge pull request #3208 from Security-Onion-Solutions/sigs
Update Signatures
2021-03-01 14:48:04 -05:00
Mike ReevesandGitHub 852f588512 Merge pull request #3207 from Security-Onion-Solutions/telegraf_suri_meta
Telegraf suri meta
2021-03-01 13:59:36 -05:00
Mike ReevesandGitHub 8f8651c52c Merge pull request #3204 from Security-Onion-Solutions/foxtrot
Update VERSION file to 2.3.40
2021-03-01 12:18:50 -05:00
Mike ReevesandGitHub 4e9bfbefda Merge pull request #3200 from Security-Onion-Solutions/release-merge-fix
Release merge fix
2021-03-01 10:49:41 -05:00
Mike ReevesandGitHub 8a9c7fa279 Merge pull request #3198 from Security-Onion-Solutions/sigs
Add Signature Files
2021-03-01 10:42:15 -05:00
Mike ReevesandGitHub ed2c836250 Merge pull request #3196 from Security-Onion-Solutions/foxtrot
Update changes for 2.3.30
2021-03-01 10:00:12 -05:00
Mike ReevesandGitHub 6e8777b9d6 Merge pull request #3193 from Security-Onion-Solutions/bugfix/revert-default-route-msg
Revert "[refactor] Make default route message a warning"
2021-03-01 09:49:58 -05:00
Mike ReevesandGitHub 64cc894948 Merge pull request #3192 from Security-Onion-Solutions/bugfix/input-validation-fixes
Bugfix/input validation fixes
2021-03-01 09:27:48 -05:00
Mike ReevesandGitHub 55b6efba7b Merge pull request #3189 from Security-Onion-Solutions/bugfix/mtu-input
Add max to MTU input validation to encompass default + jumbo frames
2021-03-01 09:26:54 -05:00
Mike ReevesandGitHub c1a8e1971b Merge pull request #3174 from Security-Onion-Solutions/foxtrot 2021-02-27 09:49:46 -05:00
Mike ReevesandGitHub 26a22b8e3b Merge pull request #3169 from Security-Onion-Solutions/foxtrot
Foxtrot
2021-02-26 14:37:09 -05:00
Mike ReevesandGitHub e06ca75677 Merge pull request #3144 from Security-Onion-Solutions/interfaces
Don't disable NICs
2021-02-25 17:28:47 -05:00
Mike ReevesandGitHub a47a3d51c9 Merge pull request #3139 from Security-Onion-Solutions/feature/soup-log_size_limit
Show log_size_limit message at end of soup instead of during
2021-02-25 17:10:38 -05:00
Mike ReevesandGitHub ae89260793 Merge pull request #3127 from Security-Onion-Solutions/foxtrot
Add automation files for Suricata metadata
2021-02-25 08:26:20 -05:00
Mike ReevesandGitHub c39b516f38 Merge pull request #3121 from Security-Onion-Solutions/strelkainstall
Fix Strelka Rule updates, repo fix
2021-02-24 17:13:41 -05:00
Mike ReevesandGitHub 39860ea6bd Merge pull request #3123 from Security-Onion-Solutions/kilo
Add function to soup to notify user of log_size_limit issues
2021-02-24 17:09:07 -05:00
Mike ReevesandGitHub 701cfe7e9a Merge branch 'dev' into strelkainstall 2021-02-24 17:07:26 -05:00
Mike ReevesandGitHub ff577cdf41 Merge pull request #3079 from petiepooo/feature/eslogsize
calculate log_size_limit based on /nsm/elasticsearch
2021-02-24 17:03:35 -05:00
Mike ReevesandGitHub 52fd3c0470 Merge pull request #3122 from Security-Onion-Solutions/strelka_repo_update
Modify soup to add Strelka rule repo in pillar
2021-02-24 15:35:35 -05:00
Mike ReevesandGitHub 38d60752b7 Merge pull request #3110 from Security-Onion-Solutions/dockerclean
Docker Cleanup
2021-02-24 13:44:06 -05:00
Mike ReevesandGitHub 68c683e3bf Merge pull request #3114 from Security-Onion-Solutions/foxtrot
Add retry support for 'docker pull' command
2021-02-24 11:25:14 -05:00
Mike ReevesandGitHub 09c94ddf95 Docker Cleanup 2021-02-24 08:57:25 -05:00
Mike ReevesandGitHub 54367db99b Merge pull request #3108 from Security-Onion-Solutions/issue/3056
add estimated EPS graphs to Grafana for manager, mastersearch and standalone nodes
2021-02-24 08:49:36 -05:00
Mike ReevesandGitHub 56daae64be Merge pull request #3097 from Security-Onion-Solutions/sometacleanup
Clean up on sid numbers
2021-02-24 08:24:48 -05:00
Mike ReevesandGitHub 00deab9305 Merge pull request #3100 from Security-Onion-Solutions/kilo
Add so-preflight + usage to so-monitor-add, fix managersearch missing from so-rule
2021-02-23 17:32:41 -05:00
Mike ReevesandGitHub fa6fd20ff9 Merge pull request #3088 from Security-Onion-Solutions/soupairgap
Syn the latest rules on an airgap install
2021-02-23 17:31:29 -05:00
Mike ReevesandGitHub d195efa8e5 Merge pull request #3098 from Security-Onion-Solutions/feature/update-soup
Update SOUP with so-playbook-sigma-refresh
2021-02-23 15:46:48 -05:00
Mike ReevesandGitHub 40721d7dec Merge pull request #3084 from Security-Onion-Solutions/feature/log-rotate
Configure fleet result.log to rotate
2021-02-23 10:20:53 -05:00
Mike ReevesandGitHub d5069d12cf Merge pull request #3071 from Security-Onion-Solutions/delta
Add acng to import installs for consistency
2021-02-22 11:34:23 -05:00
Mike ReevesandGitHub 40780f192e Merge pull request #3062 from Security-Onion-Solutions/delta
fix merge issue
2021-02-20 19:15:16 -05:00
Mike ReevesandGitHub e07e0b201d Merge pull request #3058 from Security-Onion-Solutions/delta
Fix intermittent Suricata rules load issue
2021-02-20 10:27:13 -05:00
Mike ReevesandGitHub cb6fe75ddb Merge pull request #3055 from Security-Onion-Solutions/TOoSmOotH-patch-1
Rename filter.rules to filters.rules
2021-02-19 15:36:01 -05:00
Mike ReevesandGitHub 8ab12c71a1 Rename filter.rules to filters.rules 2021-02-19 15:34:45 -05:00
Mike ReevesandGitHub 8db3602679 Merge pull request #3049 from Security-Onion-Solutions/TOoSmOotH-patch-1
Fix name and update examples
2021-02-19 15:01:04 -05:00
Mike ReevesandGitHub 08abad747d Fix name and update examples 2021-02-19 14:59:27 -05:00
Mike ReevesandGitHub 0ea29144a8 Merge pull request #3047 from Security-Onion-Solutions/surifile2
Suricata as Meta Data, File Extraction, And Parsing changes
2021-02-19 14:09:38 -05:00
Mike ReevesandGitHub 97594f84cb Merge pull request #2930 from Security-Onion-Solutions/vpn
VPN Configuration
2021-02-11 09:21:17 -05:00
Mike ReevesandGitHub 10553938b5 Merge pull request #2901 from Security-Onion-Solutions/curatorwarm
add warm node action for hot/warm
2021-02-08 12:08:23 -05:00
Mike ReevesandGitHub 940bac3634 Merge pull request #2889 from Security-Onion-Solutions/backupsfix
Backupsfix
2021-02-08 10:40:20 -05:00
Mike ReevesandGitHub d4e5ab477f Merge pull request #2854 from Security-Onion-Solutions/revert-2830-filebeatlimits
Revert "Make filebeat retry forever"
2021-02-03 22:26:03 -05:00
Mike ReevesandGitHub 179efa3a51 Merge pull request #2833 from Security-Onion-Solutions/automation/ami
Adjust AMI test network
2021-02-02 21:05:34 -05:00
Mike ReevesandGitHub 929896c191 Merge pull request #2797 from Security-Onion-Solutions/raid2
Raid Setup for Appliances
2021-01-29 16:30:43 -05:00
Mike ReevesandGitHub aa93e2b48f Merge pull request #2794 from Security-Onion-Solutions/foxtrot
Add retry capabilities to image/sig pulls
2021-01-29 15:57:41 -05:00
Mike ReevesandGitHub bcd5bdd82d Merge pull request #2730 from Security-Onion-Solutions/telegraf3
Add EPS and RAID status collection for telegraf
2021-01-25 19:37:03 -05:00
Mike ReevesandGitHub 3b1cea94d1 Merge branch 'dev' into telegraf3 2021-01-25 19:36:49 -05:00
Mike ReevesandGitHub 6e9bdde9e2 Merge pull request #2721 from Security-Onion-Solutions/sosappliance
Fix function for appliances
2021-01-25 13:26:28 -05:00
Mike ReevesandGitHub 560e510b44 Merge pull request #2715 from Security-Onion-Solutions/sosappliance
Sosappliance
2021-01-24 12:06:18 -05:00
Mike ReevesandGitHub 636687ac59 Merge pull request #2702 from Security-Onion-Solutions/essecurity
SSL with Elastic Basic license. Remove features option.
2021-01-21 13:57:28 -05:00
Mike ReevesandGitHub 12aa4033b6 Fix soup in case airgap is in the hostname 2021-01-18 18:08:34 -05:00
Mike ReevesandGitHub 9cf63545bc Merge pull request #2640 from Masaya-A/influxdb/strengthen
Disable weak cipher suites from influxdb
2021-01-15 10:50:21 -05:00
Mike ReevesandGitHub 2950779d91 Fix stralka rule update 2021-01-13 09:57:12 -05:00
Mike ReevesandWilliam Wernert 7d25e8a08b Remove ERSPAN so log doesn't show a warning 2021-01-06 14:37:28 -05:00
Mike ReevesandGitHub 1154b533d6 Remove ERSPAN so log doesn't show a warning 2021-01-05 13:56:56 -05:00
Mike ReevesandGitHub dc429494ac Merge pull request #2370 from Masaya-A/improve/yum
Make yum removing unneeded packages
2021-01-05 09:26:04 -05:00
Mike ReevesandGitHub aa15f3ca4a Merge pull request #2425 from Security-Onion-Solutions/patch/2.3.21
2.3.21 ISO sig
2020-12-22 08:39:00 -05:00
Mike ReevesandGitHub 36207d0440 Merge pull request #2417 from Security-Onion-Solutions/patch/2.3.21
2.3.21
2020-12-21 20:02:04 -05:00
Mike ReevesandGitHub 88bfe7c49c Update VERIFY_ISO.md 2020-12-21 19:52:31 -05:00
Mike ReevesandGitHub 7116c2103b Update Docker Clean 2020-12-21 17:06:14 -05:00
Mike ReevesandGitHub b49355d346 Update changes.json 2020-12-21 16:54:55 -05:00
Mike ReevesandGitHub aecde2dd54 Update README.md 2020-12-21 16:54:10 -05:00
Mike ReevesandGitHub f2d8c7f10d Update VERSION 2020-12-21 16:53:30 -05:00
Mike ReevesandGitHub 627d4da432 Merge pull request #2403 from Security-Onion-Solutions/fix/so-analyst-typo
fix typo in so-analyst-install warning
2020-12-21 11:48:25 -05:00
Mike ReevesandGitHub d73f3bb6f8 Update README.md 2020-12-21 10:53:41 -05:00
Mike ReevesandGitHub 48931116ab Update VERSION 2020-12-21 10:52:37 -05:00
Mike ReevesandGitHub 7b8f5aa8a9 Merge pull request #2402 from Security-Onion-Solutions/dev
2.3.20
2020-12-21 10:26:50 -05:00
Mike ReevesandGitHub 1f9151b407 Update README.md 2020-12-21 10:21:28 -05:00
Mike ReevesandGitHub 88be7bca3f Update VERIFY_ISO.md 2020-12-21 09:56:18 -05:00
Mike ReevesandGitHub a0f00e09c1 2.3.20 Readme Update 2020-12-21 09:55:23 -05:00
Mike ReevesandGitHub dea88e4c68 Update soup 2020-12-18 13:27:08 -05:00
Mike ReevesandGitHub 96bd1e72a7 Update soup 2020-12-18 11:55:24 -05:00
Mike ReevesandGitHub 575098e368 Update init.sls 2020-12-17 20:23:38 -05:00
Mike ReevesandGitHub 39425c1ba8 Fix extra extrahosts 2020-12-17 20:15:56 -05:00
Mike ReevesandGitHub 6ccbe47f10 Fix Jinja 2020-12-17 16:34:49 -05:00
Mike ReevesandGitHub 6fcc11eac2 Fix setup 2020-12-17 16:31:25 -05:00
Mike ReevesandGitHub b6f2cdce8c Fix whiptail menu 2020-12-17 15:57:13 -05:00
Mike ReevesandGitHub eecb323459 remove extra state.apply common 2020-12-16 13:12:38 -05:00
Mike ReevesandGitHub 09b5e6d227 Fix SSL issue 2020-12-16 11:57:27 -05:00
Mike ReevesandGitHub 06dd3432f8 Copy the correct files over that soup needs 2020-12-15 16:13:51 -05:00
Mike ReevesandGitHub 6cab65a548 Update so-image-common 2020-12-15 16:06:21 -05:00
Mike ReevesandGitHub 922534a5da Merge pull request #2352 from Security-Onion-Solutions/soup2320
SOUP Features
2020-12-15 12:07:19 -05:00