Commit Graph

2491 Commits

Author SHA1 Message Date
Josh Patterson
1bf4b86d07 Merge pull request #1206 from Security-Onion-Solutions/issue/1188
remove monint from manager since it doesnt have a monint
2020-08-18 15:10:40 -04:00
m0duspwnens
5a3d95d9a1 remove monint from manager since it doesnt have a monint 2020-08-18 15:09:21 -04:00
Mike Reeves
44fcd999fd Address #1205 2020-08-18 15:08:24 -04:00
m0duspwnens
c8dfc2495c add strelka to heavynode if strelka is enabled - https://github.com/Security-Onion-Solutions/securityonion/issues/1188 2020-08-18 14:21:23 -04:00
m0duspwnens
9f8f59f4df fix monint for several node types for grafana 2020-08-18 10:48:52 -04:00
Josh Brower
9c1c4b1a98 Merge pull request #1198 from Security-Onion-Solutions/feature/playbook-tweaks
Playbook schema update - RC2
2020-08-17 14:10:26 -04:00
Josh Brower
a8aa97edd2 Playbook schema update - RC2 2020-08-17 14:09:17 -04:00
m0duspwnens
eb1272c127 add sls extension 2020-08-17 12:26:44 -04:00
m0duspwnens
a82c4c24fb move url_base from manager to global in when running soup 2020-08-17 10:55:07 -04:00
Mike Reeves
dcb110b31f Add rc1 conditional logic 2020-08-17 09:57:00 -04:00
Jason Ertel
d8833abf73 Use load instead of import on the registry image itself 2020-08-15 09:42:56 -04:00
m0duspwnens
e6da423dc3 change reference from manager:url_base to global:url_base - https://github.com/Security-Onion-Solutions/securityonion/issues/1039 2020-08-14 17:55:30 -04:00
m0duspwnens
4946bb54d8 Merge remote-tracking branch 'remotes/origin/dev' into issue/1039 2020-08-14 17:25:13 -04:00
m0duspwnens
5220b5ae0c use new module.run style 2020-08-14 16:37:45 -04:00
m0duspwnens
47faee48a6 heavynode firewall rules 2020-08-14 15:58:59 -04:00
m0duspwnens
d963222f31 provide proper url for so-import-pcap based on redirect strategy chosen during setup - https://github.com/Security-Onion-Solutions/securityonion/issues/1039 2020-08-14 15:28:47 -04:00
m0duspwnens
35027e32b3 dont constantly run steno or suricata containers for import node 2020-08-14 14:43:37 -04:00
m0duspwnens
f9a6b8d231 remove zeek and suricata from so-status for import node 2020-08-14 14:39:02 -04:00
m0duspwnens
3836f00309 allow sensori port for import node 2020-08-14 14:32:34 -04:00
m0duspwnens
ff84640aad add pcap to import node, test not starting zeek docker by default 2020-08-14 13:59:23 -04:00
Mike Reeves
283f91459a Fix rule update cron 2020-08-14 10:05:56 -04:00
Mike Reeves
a3d8b7d0d3 Add watch statements 2020-08-14 09:40:38 -04:00
Josh Brower
34d8261669 Merge pull request #1176 from Security-Onion-Solutions/feature/playbook
Elastalert/Playbook Stability updates
2020-08-13 17:19:01 -04:00
Josh Brower
7400bbd6c1 Elastalert Stability Fixes 2020-08-13 17:14:53 -04:00
Doug Burks
ed4bee0d0b so-allow has no usage function #1133 2020-08-13 16:42:50 -04:00
Jason Ertel
40b5b96e17 Respond with 403 status code to unauthorized sensor requests 2020-08-13 15:00:49 -04:00
m0duspwnens
9fafd5f721 update trusted containers for soup to minimize downloaded containers 2020-08-13 08:32:51 -04:00
m0duspwnens
3387114389 Merge remote-tracking branch 'remotes/origin/dev' into issue/1049 2020-08-13 08:21:43 -04:00
Mike Reeves
5a53194313 Update sotls.yml 2020-08-12 21:12:48 -04:00
Mike Reeves
59ddac57bf Rename sotls.yaml to sotls.yml 2020-08-12 17:48:37 -04:00
m0duspwnens
a746d597bb rename to .yml 2020-08-12 17:42:45 -04:00
m0duspwnens
dbe14fcbdb Merge remote-tracking branch 'remotes/origin/dev' into issue/1049 2020-08-12 16:46:03 -04:00
m0duspwnens
f59b8683ae allow soup to run on import node 2020-08-12 15:48:34 -04:00
m0duspwnens
5d5fcecdca set the cluster for import node 2020-08-12 15:46:34 -04:00
Mike Reeves
0129519d0c Merge pull request #1165 from Security-Onion-Solutions/feature/esssl
TLS Transport Encryption
2020-08-12 15:39:17 -04:00
Mike Reeves
9980d02844 Elastic Transport TLSgit add . 2020-08-12 15:38:19 -04:00
Mike Reeves
7e3e4d0f54 Convert ES cert to p12 2020-08-12 15:16:12 -04:00
Mike Reeves
82821fbb25 Convert ES cert to p12 2020-08-12 15:09:52 -04:00
Mike Reeves
daaffd5185 Convert ES cert to p12 2020-08-12 15:05:33 -04:00
Mike Reeves
683799d077 Convert ES cert to p12 2020-08-12 15:02:54 -04:00
Mike Reeves
c02a363e92 Merge pull request #1163 from Security-Onion-Solutions/feature/esssl
Feature/esssl
2020-08-12 14:02:27 -04:00
Mike Reeves
69e7285e30 Fix a bug where minio passwrods cause issues 2020-08-12 12:44:55 -04:00
m0duspwnens
c166bc84f3 add zeek to import node top 2020-08-12 11:48:22 -04:00
m0duspwnens
b5c9d44d91 nginx config for import node 2020-08-12 11:15:14 -04:00
Mike Reeves
32083132e5 Back out some ES settings 2020-08-12 11:10:36 -04:00
m0duspwnens
0f53b4d703 set esheapsize and filebeat config for import node 2020-08-12 10:39:31 -04:00
m0duspwnens
5a0df27193 rename importpcap node to import 2020-08-12 10:27:15 -04:00
m0duspwnens
53b4a73bb9 add idstools to importpcap node 2020-08-11 15:59:08 -04:00
m0duspwnens
de05403237 ensure nids rules dir exists 2020-08-11 15:52:15 -04:00
Mike Reeves
0f7074a499 SSL intraca 2020-08-11 15:49:04 -04:00