Wes Lambert
|
1beff65cc9
|
fix typo
|
2020-06-17 13:20:32 +00:00 |
|
Wes Lambert
|
cbfe375407
|
Custom analyzer and responder dirs
|
2020-06-17 13:16:52 +00:00 |
|
Mike Reeves
|
6410087994
|
1.4.0
|
2020-06-16 13:52:37 -04:00 |
|
Josh Brower
|
2986926ce9
|
Merge pull request #861 from Security-Onion-Solutions/bugfix/fleet-kibana
Beta3 Kibana dashboard updates
|
2020-06-16 10:17:26 -04:00 |
|
Josh Brower
|
a9df5d75b0
|
Beta3 Kibana dashboard updates
|
2020-06-16 10:16:31 -04:00 |
|
William Wernert
|
0c9c7002dc
|
[fix] Simplify if statements and apply mine.update during setup
|
2020-06-16 08:38:50 -04:00 |
|
Mike Reeves
|
0961fe7091
|
Merge pull request #857 from Security-Onion-Solutions/feature/metasuri
Feature/metasuri
|
2020-06-15 21:52:41 -04:00 |
|
Mike Reeves
|
4573b346f8
|
Merge remote-tracking branch 'remotes/origin/dev' into feature/metasuri
|
2020-06-15 21:46:07 -04:00 |
|
Mike Reeves
|
3681f91c37
|
Suricata Conn
|
2020-06-15 21:46:04 -04:00 |
|
Jason Ertel
|
97d127218a
|
fix: stop updating salt mine - this is an attempt to sort out why the CA intermittently disappears from the mine
|
2020-06-15 17:40:58 -04:00 |
|
Josh Patterson
|
9340b633e2
|
Merge pull request #855 from Security-Onion-Solutions/quickfix/searchnode2node
fix so-status for searchnode
|
2020-06-15 17:01:50 -04:00 |
|
m0duspwnens
|
fe39179ba1
|
fix so-status for searchnode
|
2020-06-15 17:01:23 -04:00 |
|
Josh Patterson
|
3b920b2cd8
|
Merge pull request #854 from Security-Onion-Solutions/quickfix/searchnode2node
place searchnode role with node where referenced
|
2020-06-15 16:59:55 -04:00 |
|
m0duspwnens
|
91a50c0915
|
place searchnode role with node where referenced
|
2020-06-15 16:58:30 -04:00 |
|
Josh Patterson
|
578e2b5d1d
|
Merge pull request #853 from Security-Onion-Solutions/quickfix/playbook
fix for master not having a node:mainip pillar - playbook
|
2020-06-15 15:15:23 -04:00 |
|
m0duspwnens
|
b396c39352
|
fix for master not having a node:mainip pillar - playbook
|
2020-06-15 15:13:29 -04:00 |
|
Mike Reeves
|
a91dbf0d1d
|
Fix wording for Suricata meta data in whiptail
|
2020-06-15 15:10:16 -04:00 |
|
Josh Patterson
|
1a6fc3ef6c
|
Merge pull request #852 from Security-Onion-Solutions/quickfix/fleetfwsetup
add firewall rules for fleet standalone
|
2020-06-15 13:51:39 -04:00 |
|
m0duspwnens
|
51e500f521
|
add firewall rules for fleet standalone
|
2020-06-15 13:50:37 -04:00 |
|
weslambert
|
91c32725fb
|
Merge pull request #851 from Security-Onion-Solutions/fix/es_field_fixes
Fix/es field fixes
|
2020-06-15 12:59:01 -04:00 |
|
Wes Lambert
|
f3c9f2e5ea
|
update templates
|
2020-06-15 16:57:46 +00:00 |
|
Wes Lambert
|
206261fbe6
|
rename id to log.id.fuid for X509
|
2020-06-15 16:55:14 +00:00 |
|
Wes Lambert
|
18547e8ea8
|
enforce field types
|
2020-06-15 16:54:33 +00:00 |
|
Josh Patterson
|
8403d72b8e
|
Merge pull request #849 from Security-Onion-Solutions/quickfix/fleetfwsetup
add another pillar default to self hostgroup
|
2020-06-15 10:40:03 -04:00 |
|
m0duspwnens
|
dc56c449b7
|
add another pillar default to self hostgroup
|
2020-06-15 10:38:58 -04:00 |
|
Josh Patterson
|
896f081f70
|
Merge pull request #847 from Security-Onion-Solutions/quickfix/fleetfwsetup
set firewall during setup for fleet standalone
|
2020-06-15 09:43:35 -04:00 |
|
m0duspwnens
|
aaa6cf816a
|
set firewall during setup for fleet standalone
|
2020-06-15 09:42:06 -04:00 |
|
Jason Ertel
|
87514e7da3
|
revert: Use consistent casing for package names
|
2020-06-14 09:47:59 -04:00 |
|
Jason Ertel
|
8b64f5b499
|
Use consistent casing for package names
|
2020-06-13 10:19:24 -04:00 |
|
m0duspwnens
|
ce5d678ed9
|
change portgroup assignment for dockernet on searchnode
|
2020-06-12 17:09:08 -04:00 |
|
Josh Patterson
|
f8b5593bca
|
Merge pull request #845 from Security-Onion-Solutions/bugfix/standalonessl
fix issue with ssl state that prevented other node types being adding…
|
2020-06-12 16:25:43 -04:00 |
|
m0duspwnens
|
a125a94808
|
fix issue with ssl state that prevented other node types being adding to a standalone node
|
2020-06-12 16:24:46 -04:00 |
|
m0duspwnens
|
e25560bf6b
|
add missing roles fire firewall
|
2020-06-12 15:37:43 -04:00 |
|
Josh Patterson
|
1f305352a0
|
Merge pull request #844 from Security-Onion-Solutions/quickfix/addfwrules
Quickfix/addfwrules
|
2020-06-12 15:04:04 -04:00 |
|
Doug Burks
|
befc793a96
|
Improve files query #804
|
2020-06-12 14:25:38 -04:00 |
|
Doug Burks
|
d157c0da00
|
Improve DNS queries #804
|
2020-06-12 14:21:36 -04:00 |
|
Josh Patterson
|
bfee999688
|
Merge pull request #843 from Security-Onion-Solutions/quickfix/firewallsetup
apply switch for so-firewall to apply firewall state on master for distributed install
|
2020-06-12 13:55:28 -04:00 |
|
Jason Ertel
|
b3d2ce0e18
|
support applying the firewall state directly from so-firewall
|
2020-06-12 13:52:24 -04:00 |
|
Mike Reeves
|
cd90889b4c
|
Merge pull request #842 from Security-Onion-Solutions/feature/metasuri
Feature/metasuri
|
2020-06-12 12:32:04 -04:00 |
|
m0duspwnens
|
285468c059
|
user apply switch for so-firewall to apply firewall state on master for distributed install
|
2020-06-12 12:31:29 -04:00 |
|
Mike Reeves
|
03e410df68
|
Merge remote-tracking branch 'remotes/origin/dev' into feature/metasuri
|
2020-06-12 12:30:52 -04:00 |
|
Mike Reeves
|
6058d438bf
|
Fix Protocol
|
2020-06-12 12:28:29 -04:00 |
|
Mike Reeves
|
42938a4e67
|
Add the makor Suricata parsers
|
2020-06-12 12:14:48 -04:00 |
|
m0duspwnens
|
3c0caa4112
|
Merge remote-tracking branch 'remotes/origin/dev' into quickfix/addfwrules
|
2020-06-12 11:40:34 -04:00 |
|
Doug Burks
|
0b2dd5d0a4
|
add event.dataset to default hunt output view #841
|
2020-06-12 11:37:55 -04:00 |
|
m0duspwnens
|
1f0509cfd6
|
update so-allow for wazuh and syslog
|
2020-06-12 11:35:18 -04:00 |
|
m0duspwnens
|
d02bff22ac
|
adding fw rules to master nodes for wazuh and syslog
|
2020-06-12 11:27:28 -04:00 |
|
Doug Burks
|
3cc936a0a8
|
add event.dataset to default hunt output view #841
|
2020-06-12 11:13:56 -04:00 |
|
Mike Reeves
|
0559e2d16b
|
Merge remote-tracking branch 'remotes/origin/dev' into feature/metasuri
|
2020-06-12 08:54:17 -04:00 |
|
Jason Ertel
|
d146e65412
|
Remove pre-creation of dirs in favor of having docker image use correct permissions
|
2020-06-12 01:24:13 -04:00 |
|