William Wernert
262d2023b5
Add new ipv4 address w/ cidr mask validator
2021-11-17 12:41:25 -05:00
m0duspwnens
ac400f1c41
change how soc endgame added to manager pillar in soup
2021-11-17 11:07:12 -05:00
Josh Patterson
a16e6aca22
Merge pull request #6257 from Security-Onion-Solutions/es_soup_ingest
...
escape raw and endraw
2021-11-17 07:56:01 -05:00
m0duspwnens
ce21ae11f5
escape raw and endraw
2021-11-17 07:53:15 -05:00
Mike Reeves
fdd9706669
Merge pull request #6255 from Security-Onion-Solutions/kilo
2021-11-16 18:09:40 -05:00
Jason Ertel
8fa9a180b2
Refactor upgrade and post-upgrade version to function mappings; fix missing version upgrades from older 2.3.61 releases and earlier; Drop support for upgrading ancient RC releases
2021-11-16 18:08:28 -05:00
Josh Patterson
6288365a50
Merge pull request #6254 from Security-Onion-Solutions/es_soup_ingest
...
wrap common ingest in raw endraw since json and no jinja
2021-11-16 16:47:53 -05:00
m0duspwnens
5448107310
wrap common ingest in raw endraw since json and no jinja
2021-11-16 16:43:33 -05:00
Jason Ertel
1bd8e226b4
Force DB migration since installations on 2.3.50 or earlier will skip the Kratos 0.6 version
2021-11-16 15:58:04 -05:00
m0duspwnens
5945326817
soup for es ingest common and watch esingestdynamicconf for so-elastic docker
2021-11-16 14:00:41 -05:00
Josh Brower
8bb2789c6f
Merge pull request #6237 from Security-Onion-Solutions/kilo
...
Migrate to email field instead of username due to breaking change in …
2021-11-16 12:06:08 -05:00
Jason Ertel
11fc0da971
Migrate to email field instead of username due to breaking change in FleetDM 4.x
2021-11-16 12:03:46 -05:00
Mike Reeves
b51405d5e8
Update soup
2021-11-15 17:04:46 -05:00
William Wernert
f674555290
Check CIDR validity completely
2021-11-15 15:43:05 -05:00
Mike Reeves
146e1f4297
Update soup
2021-11-15 14:05:29 -05:00
William Wernert
052192e1d6
Revert "Use python lib to make cidr validation more strict"
...
This reverts commit 569cb24861
2021-11-15 09:43:18 -05:00
m0duspwnens
cc1dea446c
Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into issue/5809
2021-11-12 15:02:22 -05:00
m0duspwnens
7f3379e034
verify manager pillars can be rendered before proceeding with soup - https://github.com/Security-Onion-Solutions/securityonion/issues/5809
2021-11-12 15:02:16 -05:00
weslambert
8c46a2d1db
Merge pull request #6210 from Security-Onion-Solutions/fix/soc_pillar_soup
...
Add SOC pillar entry
2021-11-12 13:35:46 -05:00
William Wernert
ba621639bd
Merge pull request #6201 from Security-Onion-Solutions/fix/cidr-ip-validation
...
Improve cidr validation in setup and match ip validation to similar method
2021-11-12 13:34:19 -05:00
Wes Lambert
2fb9196604
Move logic above version declaration
2021-11-12 18:26:21 +00:00
Wes Lambert
48c71c8b12
Add soc pillar entry
2021-11-12 18:23:09 +00:00
m0duspwnens
6bf4d5a576
https://github.com/Security-Onion-Solutions/securityonion/issues/6206
2021-11-12 11:37:55 -05:00
William Wernert
569cb24861
Use python lib to make cidr validation more strict
...
Also update ipv4 validation to match the method used to validate cidr strings
2021-11-10 16:53:01 -05:00
Mike Reeves
fcf889be2f
Add soup to 2.3.90
2021-11-10 16:46:24 -05:00
Mike Reeves
8168f19b31
Add soup to 2.3.90
2021-11-10 16:37:54 -05:00
Mike Reeves
ba553d971c
Add soup to 2.3.90
2021-11-10 16:31:44 -05:00
Mike Reeves
9137454a25
Add soup placeholders
2021-11-10 16:08:07 -05:00
William Wernert
3806f10f8b
Fix so-rule modify example
2021-11-10 14:18:32 -05:00
Josh Brower
b350174df1
Merge remote-tracking branch 'remotes/origin/dev' into delta
2021-11-10 11:08:36 -05:00
m0duspwnens
202977a323
create so script to load saved object defaults
2021-11-09 15:54:15 -05:00
Josh Brower
f6e6b20392
Add Name and OrgName to Fleet setup
2021-11-09 09:20:47 -05:00
Josh Brower
a6f399acf4
Fix evtx import logging
2021-11-02 09:19:32 -04:00
Josh Brower
3534256517
Add evtx import logging
2021-11-02 09:03:52 -04:00
Josh Brower
b756c0cd38
Pull ES Creds at Runtime
2021-11-02 08:57:11 -04:00
William Wernert
90d473f2d6
Update ip for root user in mysql when running so-ip-update
2021-10-27 10:42:33 -04:00
William Wernert
f374dcbb58
Check for IP environment variable in so-allow and so-deny
2021-10-21 13:54:06 -04:00
William Wernert
0beeeb94bf
Actually add new so-allow script
2021-10-21 10:48:17 -04:00
William Wernert
387d4d6ad5
Add so-deny script + rewrite so-allow to match so-deny
2021-10-20 16:44:57 -04:00
William Wernert
adf6cb4b3c
Merge branch 'dev' into foxtrot
2021-10-20 16:44:50 -04:00
William Wernert
b5cb47e066
Fix sbin perms
2021-10-20 16:43:55 -04:00
Mike Reeves
e1ad02c28d
Merge pull request #5949 from Security-Onion-Solutions/kilo
...
Fix Docker-created corruption of SOC user roles file
2021-10-19 18:37:37 -04:00
Jason Ertel
2f8bb5a2a6
Fix Docker-created corruption of SOC user roles file
2021-10-19 16:04:10 -04:00
Mike Reeves
4016b416ec
Merge pull request #5923 from Security-Onion-Solutions/kilo
...
Upgrade to ES 7.15.1
2021-10-16 09:15:06 -04:00
weslambert
d0a6dafc8b
Add TI module
2021-10-15 17:09:59 -04:00
Jason Ertel
1800ec4570
Upgrade to Elastalert 2 v2.2.2
2021-10-15 09:25:44 -04:00
Jason Ertel
9797a15218
Fix issue with 'so-user delete' resetting all user roles - note that this function is not technically supported or published since it's not intended for production use
2021-10-14 17:23:18 -04:00
Pete
e7581036f7
remove tty/interactive flags
...
This call to docker exec simply returns a number. No interaction (stdin) or tty is required. Specifically, having the -t option prevents running via salt using a command such as:
> salt '*' cmd.run 'so-redis-count'
2021-10-13 13:51:05 -04:00
Mike Reeves
2561480371
Merge pull request #5850 from Security-Onion-Solutions/kilo
...
Upgrade to Kratos 0.7.6-alpha.1
2021-10-12 08:19:25 -04:00
Jason Ertel
d21dee162d
Add Note field to user traits; Enforce max length restrictions on email, firstname, lastname, and note fields
2021-10-08 12:39:17 -04:00
