CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-08 18:22:47 +01:00
Code Issues Packages Projects Releases Wiki Activity
5,049 Commits 24 Branches 119 Tags
23bc5e303e873372f12ad51ca2d02d05b52be64c
Commit Graph

5049 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
m0duspwnens
5f567368be add redis to eval if playbook enabled 2020-09-11 18:30:21 -04:00
m0duspwnens
77911acfb4 so-status module 2020-09-11 18:28:53 -04:00
Mike Reeves
48d1d0c168 Strelkas Rules Update 2020-09-11 18:24:56 -04:00
Josh Patterson
2d508d9e57 Merge pull request #1328 from Security-Onion-Solutions/issue/1281 
Issue/1281
 2020-09-11 15:02:30 -04:00
m0duspwnens
15563f2ee6 add nginx to top for sensor 2020-09-11 12:28:42 -04:00
m0duspwnens
bb0e686444 add elasticsearch to top for nodes missing it 2020-09-11 11:35:17 -04:00
Mike Reeves
46866f40b3 Merge pull request #1325 from Security-Onion-Solutions/experimental 
Update Script
 2020-09-11 11:02:57 -04:00
Mike Reeves
6e0cdf7be4 Update Script help 2020-09-11 11:01:56 -04:00
m0duspwnens
5f7c270984 only allow strelka to run on nodes that are sensors 2020-09-11 10:22:12 -04:00
Mike Reeves
af9a19b6e8 Merge pull request #1321 from Security-Onion-Solutions/experimental 
IDS Tools now with Airgap support
 2020-09-10 19:05:16 -04:00
Mike Reeves
53319738c4 Fix Nginx state 2020-09-10 16:56:48 -04:00
Mike Reeves
ef46094b0c Update all nginx configs 2020-09-10 13:55:56 -04:00
Josh Patterson
53ff87b0ee Merge pull request #1312 from Security-Onion-Solutions/issue/1281 
add elasticsearch state to top for manager node
 2020-09-10 12:47:05 -04:00
m0duspwnens
bc420d4a02 add 2020-09-10 11:57:15 -04:00
Josh Patterson
ca26548b2c Merge pull request #1310 from Security-Onion-Solutions/issue/1281 
Issue/1281
 2020-09-10 10:08:25 -04:00
m0duspwnens
0ed9c65646 remove logic from fleet state to only run if in top 2020-09-10 10:07:05 -04:00
Doug Burks
8c280221da Hunt: Fix Intel groupby #1131 2020-09-10 07:00:54 -04:00
Doug Burks
24c325e9a1 Fix Elasticsearch parsing for Zeek Intel Indicator #1309 2020-09-10 06:41:19 -04:00
Josh Brower
56587f0df5 Merge pull request #1308 from Security-Onion-Solutions/feature/wel-ingest 
Add event.category to WEL
 2020-09-10 06:16:56 -04:00
Josh Brower
c3b2d98ffb Add event.category to WEL 2020-09-10 06:15:30 -04:00
Doug Burks
7161a662aa improve Wazuh support in Hunt 2020-09-10 06:03:33 -04:00
Mike Reeves
5d4e8925a3 Add Firewall Logic 2020-09-09 21:16:40 -04:00
Mike Reeves
45b11b2321 Fix Rulecat 2020-09-09 18:38:07 -04:00
Doug Burks
d18c498574 Update so-features-enable 2020-09-09 17:32:42 -04:00
m0duspwnens
09cc8ae1fb fail the state if it isnt in top 2020-09-09 16:48:50 -04:00
m0duspwnens
01c9f7b2ae merge with dev and resolve conflicts 2020-09-09 16:23:36 -04:00
Mike Reeves
7ebf93fcb5 IDSTools Overhaul 2020-09-09 15:53:32 -04:00
Josh Patterson
1e32b32659 Merge pull request #1302 from Security-Onion-Solutions/fix/sostatus 
Fix/sostatus
 2020-09-09 15:07:12 -04:00
m0duspwnens
39f200f565 fix whitespace 2020-09-09 14:59:21 -04:00
Mike Reeves
a77532c1d8 Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into dev 2020-09-09 14:57:17 -04:00
Mike Reeves
04f4539385 Fix Airgap Repo Name 2020-09-09 14:57:10 -04:00
m0duspwnens
b0c526364f handle strelka 2020-09-09 14:55:54 -04:00
m0duspwnens
921262b9a5 prevent duplicate containers for so-stauts 2020-09-09 14:07:38 -04:00
Jason Ertel
a5b87850df Remove user sync between SOC and Cortex due to the unnecesary complexities involved with this style of integration 2020-09-09 14:07:36 -04:00
m0duspwnens
05d736d2df handle strelka 2020-09-09 14:00:58 -04:00
m0duspwnens
918d9cf00f handle strelka 2020-09-09 13:57:53 -04:00
m0duspwnens
3433b90029 fix so-status for strelka and wazuh 2020-09-09 13:53:10 -04:00
Doug Burks
82b582540e Add period 2020-09-09 12:56:19 -04:00
Doug Burks
90ba1be978 Improve formatting of NIDS selection screen 2020-09-09 12:55:14 -04:00
m0duspwnens
e84507c386 Merge remote-tracking branch 'remotes/origin/dev' into fix/sostatus 2020-09-09 12:51:01 -04:00
m0duspwnens
9ee9a199b1 predefine each component as 0 to fix issues with it being unset 2020-09-09 12:50:22 -04:00
Jason Ertel
fc4ad1d556 Add Google search quick action to Hunt; Change VirusTotal quick action to be applicable to all field values 2020-09-09 12:22:38 -04:00
Jason Ertel
9babc445ce Add Google search quick action to Hunt; Change VirusTotal quick action to be applicable to all field values 2020-09-09 12:07:23 -04:00
Mike Reeves
90feb503ce Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into dev 2020-09-09 10:54:53 -04:00
Mike Reeves
426257443a Final airgap tweaks 2020-09-09 10:54:47 -04:00
Doug Burks
eaf3281ab7 Remove Suricata version numbers from Setup screens #1300 
https://github.com/Security-Onion-Solutions/securityonion/issues/1300
 2020-09-09 10:43:41 -04:00
Josh Patterson
c2398f966b Merge pull request #1295 from Security-Onion-Solutions/fix/salt-ca-ssl 
Fix/salt ca ssl
 2020-09-09 10:36:54 -04:00
m0duspwnens
7facff2b7d change from cmd.run to cp.get_file_str 2020-09-09 10:34:53 -04:00
Jason Ertel
ad05e75ce7 Add new quick actions to SOC config template 2020-09-09 00:46:23 -04:00
Mike Reeves
7d524a0723 Add Firewall Rule for yum and airgap 2020-09-08 18:51:14 -04:00