Commit Graph

3477 Commits

Author SHA1 Message Date
Jason Ertel
07c0075fc0 Upgrade containerd.io and docker-ce to match ISO rpms 2020-06-02 08:43:06 -04:00
Josh Brower
b695b7f245 Fleet standalone fixes - firewall 2020-06-02 08:05:48 -04:00
Jason Ertel
9d5f4049b5 Avoid filtering NIC when it's an empty string 2020-06-02 05:52:03 -04:00
Mike Reeves
69f940fe8c Merge pull request #811 from Security-Onion-Solutions/feature/updatetool
Couple of QOL scripts
2020-06-01 20:49:42 -04:00
Mike Reeves
307cbe4b77 Couple of QOL scripts 2020-06-01 20:48:25 -04:00
Josh Brower
4b14ecf1d9 Fleet standalone fixes 2020-06-01 16:36:32 -04:00
Josh Patterson
cc6a323f45 Merge pull request #810 from Security-Onion-Solutions/issue/749
Issue/749
2020-06-01 12:20:28 -04:00
m0duspwnens
f5c8091fd6 remove unneeded INITIALSETUP var from addtotab 2020-06-01 12:17:52 -04:00
m0duspwnens
1737b46abb Merge remote-tracking branch 'remotes/origin/dev' into issue/749 2020-06-01 12:15:00 -04:00
Doug Burks
80d1814f10 remove event.module:zeek to make queries more generic 2020-06-01 12:00:33 -04:00
Mike Reeves
b091fe07c9 Merge pull request #809 from Security-Onion-Solutions/feature/metasuri
Suricata 5 Meta Data
2020-06-01 11:05:38 -04:00
Mike Reeves
03f34404b1 Suricata 5 Meta Data 2020-06-01 11:03:43 -04:00
weslambert
551c663046 Merge pull request #808 from Security-Onion-Solutions/fix/tunnel_parents
Rename tunnel_parents
2020-06-01 09:52:55 -04:00
Wes Lambert
51f5d64ef6 Rename tunnel_parents 2020-06-01 13:51:32 +00:00
weslambert
fa8b88b090 Merge pull request #806 from Security-Onion-Solutions/feature/vxlan_tunnel_id
fix naming of uid field for tunnel
2020-06-01 08:54:12 -04:00
Wes Lambert
d7ce3d4719 fix naming of uid field for tunnel 2020-06-01 12:52:57 +00:00
Doug Burks
f559621f00 add x509 issuer and subject groupby queries 2020-06-01 07:48:50 -04:00
Doug Burks
46dc5f42e9 combine two http queries into one with multiple groupby 2020-06-01 07:30:08 -04:00
m0duspwnens
5ddfb7ccce fix merge conflicts 2020-05-29 17:31:07 -04:00
Josh Patterson
0eeafa292e Merge pull request #802 from Security-Onion-Solutions/quickfix/wazuh/whitelistmanager
change how whitelist script determines if wazuh is enabled
2020-05-29 17:26:10 -04:00
m0duspwnens
4dfb58a98c change how whitelist script determines if wazuh is enabled 2020-05-29 17:22:39 -04:00
Josh Patterson
5f4e480b4c Merge pull request #801 from Security-Onion-Solutions/quickfix/search/nginx
add nginx state to searchnode in salt/top
2020-05-29 17:02:49 -04:00
m0duspwnens
17879ad88c add nginx state to searchnode in salt/top 2020-05-29 17:01:43 -04:00
m0duspwnens
a84203be7c Merge remote-tracking branch 'remotes/origin/dev' into issue/749 2020-05-29 16:38:10 -04:00
Josh Patterson
828f8a0df8 Merge pull request #800 from Security-Onion-Solutions/quickfix/node
fix minion_type for *NODE install_type
2020-05-29 16:37:04 -04:00
m0duspwnens
d7e904e1ab fix minion_type for *NODE install_type 2020-05-29 16:35:39 -04:00
m0duspwnens
9ae68b52ef Merge remote-tracking branch 'remotes/origin/dev' into issue/749 2020-05-29 16:22:00 -04:00
Josh Patterson
16d6e4ae2e Merge pull request #799 from Security-Onion-Solutions/quickfix/distrib_install_firewall
Quickfix/distrib install firewall
2020-05-29 15:36:53 -04:00
m0duspwnens
52954d8e5d set_intial_firewall policy sooner in install process so packages can be installed if masterupdates are enabled 2020-05-29 15:34:18 -04:00
m0duspwnens
15fc97e516 adding suricata.master state to mastersearch - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/749 2020-05-29 13:11:55 -04:00
m0duspwnens
6db8470de7 Merge remote-tracking branch 'remotes/origin/dev' into issue/749 2020-05-29 13:09:49 -04:00
m0duspwnens
42ea39ee35 Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion-saltstack into dev 2020-05-29 13:09:26 -04:00
Josh Patterson
aa24dacb86 Merge pull request #798 from Security-Onion-Solutions/quickfix/master_navigator
add navigator to master if enabled
2020-05-29 13:08:43 -04:00
m0duspwnens
3143643692 add navigator to master if enabled 2020-05-29 13:05:26 -04:00
m0duspwnens
30641d0fa9 Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion-saltstack into dev 2020-05-29 13:01:08 -04:00
m0duspwnens
2db2054cce update instructions in logstash customer pipelines and templates - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/749 2020-05-29 10:58:53 -04:00
m0duspwnens
7957b51409 change master roots priority to local 2020-05-29 10:57:43 -04:00
weslambert
2601ffe902 Merge pull request #797 from Security-Onion-Solutions/fix/radius_parsing
fix framed_addr field
2020-05-29 07:56:22 -04:00
Wes Lambert
4059121dd6 fix framed_addr field 2020-05-29 11:55:18 +00:00
Josh Brower
046bca626e Fleet pw check fix 2020-05-28 16:51:37 -04:00
Josh Brower
e8e48a4beb Fleet standalone bugfixes 2020-05-28 16:40:12 -04:00
Josh Brower
0d8c0e1fa6 Fleet standalone fixes 2020-05-28 16:27:18 -04:00
m0duspwnens
40fa5293bf move fileserve update to suricata.master 2020-05-28 15:54:11 -04:00
Jason Ertel
3952faba85 Add missing semi-colons to break out of the case block 2020-05-28 15:27:14 -04:00
weslambert
f5300d3d5a Merge pull request #794 from Security-Onion-Solutions/feature/zeek-stats
Add basic Zeek stats script
2020-05-28 13:55:43 -04:00
Wes Lambert
7f75050682 Add basic Zeek stats script 2020-05-28 17:54:15 +00:00
Josh Brower
aeb71bb8f0 Simplified setup script 2020-05-28 13:21:25 -04:00
m0duspwnens
71d381aeae apply suricata.master state during setup - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/749 2020-05-28 13:19:38 -04:00
weslambert
7c232318ad Merge pull request #793 from Security-Onion-Solutions/fix/so-stop-exact-match
Update for exact match (ex. thehive, thehive-es, thehive-cortex)
2020-05-28 13:17:56 -04:00
weslambert
b835c2e27e Update for exact match (ex. thehive, thehive-es, thehive-cortex) 2020-05-28 13:17:31 -04:00