Commit Graph

71 Commits

Author SHA1 Message Date
weslambert 13062099b3 Remove YARA script update and reference to exclusions 2024-05-13 18:04:16 -04:00
Mike Reeves 283939b18a Gather metrics from elastic agent to influx 2024-04-02 15:36:01 -04:00
weslambert f431e9ae08 Remove Strelka config 2024-03-21 10:06:25 -04:00
weslambert 34d5954e16 Fix indent 2024-03-11 09:12:05 -04:00
Josh Brower 4a9e8265ce Merge remote-tracking branch 'origin/2.4/dev' into kilo 2024-03-08 14:48:04 -05:00
Wes 4e32935991 Add Strelka config back 2024-03-08 16:24:37 +00:00
Mike Reeves 1fe8f3d9e4 Merge pull request #12405 from Security-Onion-Solutions/repochange
Manage the repo files
2024-02-29 14:01:48 -05:00
Mike Reeves 9ca0f586ae Manage the repos 2024-02-21 11:45:02 -05:00
Corey Ogburn 858166bcae WIP: Detections Changes
Removed some strelka/yara rules from salt.

Removed yara scripts for downloading and updating rules. This will be managed by SOC.

Added a new compile_yara.py script.

Added the strelka repos folder.
2024-01-30 15:43:51 -07:00
Jason Ertel 9231c8d2f2 replace reset sed with new script 2023-11-08 19:17:32 -05:00
defensivedepth 310a6b4f27 Add kibana curl config 2023-10-24 14:21:01 -04:00
Mike Reeves 95d32cb076 Fix manager cron logic 2023-09-28 12:49:46 -04:00
Mike Reeves 5040df7551 Fix manager cron logic 2023-09-28 12:32:40 -04:00
Mike Reeves 7a21b7903d Fix manager cron logic 2023-09-28 11:46:43 -04:00
Mike Reeves a77a53f20b Update init.sls 2023-09-28 11:10:17 -04:00
m0duspwnens da27fce95f run so-yara-download/update if scripts change 2023-07-11 13:48:26 -04:00
m0duspwnens f8ed2e6e8e make parent dirs 2023-07-10 16:11:45 -04:00
m0duspwnens 1ac72e5b24 ensure /nsm/rules/yara directory exists 2023-07-10 11:10:37 -04:00
m0duspwnens fa933d3f53 use file_mode 2023-07-10 10:26:30 -04:00
m0duspwnens f4dc73a206 yara download and update 2023-07-10 09:42:37 -04:00
m0duspwnens 8be5082b60 yara scripts 2023-07-07 16:43:26 -04:00
m0duspwnens 5b06aa518e makedirs if needed 2023-05-10 15:55:21 -04:00
m0duspwnens 54c9a3ec71 enable/disable each strelka container in ui 2023-05-10 15:50:07 -04:00
Mike Reeves d7972032e4 Update init.sls 2023-05-05 10:33:11 -04:00
Mike Reeves cbd1c05929 Sbin Changes 2023-05-04 10:36:03 -04:00
m0duspwnens 1047462898 add identifiers for all cron.present 2023-04-13 16:25:47 -04:00
Mike Reeves 0a096712cb Fix cache location 2023-03-23 12:39:31 -04:00
Mike Reeves c977f38a58 Change repo conf permissions 2023-03-23 11:56:40 -04:00
Mike Reeves 8f4076ccd6 Change repo conf permissions 2023-03-23 11:46:32 -04:00
Mike Reeves 02aa8662f7 Saltify it up 2023-03-23 10:52:05 -04:00
Mike Reeves f8d5acd37d Saltify it up 2023-03-23 10:43:47 -04:00
m0duspwnens 9d4e1cc149 jinja for strelka 2023-03-13 16:48:21 -04:00
m0duspwnens 58343e39fa 2.4 strelka 2023-03-10 17:32:14 -05:00
Mike Reeves 2bd9dd80e2 Move In Day 2022-09-07 09:06:25 -04:00
Jason Ertel eefcc929c2 Update copyright pattern to match other repos 2022-01-24 10:09:23 -05:00
m0duspwnens 716c98ec61 requires and ordering for socusersroles state 2022-01-10 14:39:00 -05:00
m0duspwnens 291ac7d361 https://github.com/Security-Onion-Solutions/securityonion/issues/6811 2022-01-10 10:36:42 -05:00
m0duspwnens 55fed43469 wait for up to 5 minutes for kratos to respond before proceeding 2021-11-18 16:35:35 -05:00
m0duspwnens cd1f0c0440 break kratos state out from soc state 2021-11-18 09:10:00 -05:00
m0duspwnens 59ef734064 syncesusers require so-kratos 2021-11-17 18:16:06 -05:00
m0duspwnens 57c6e26634 encrypt kibana saved objects - https://github.com/Security-Onion-Solutions/securityonion/issues/6146 2021-11-09 16:41:25 -05:00
m0duspwnens d7e5377a44 more requires 2021-10-22 16:46:45 -04:00
Jason Ertel 730503b69c Ensure highstate migrates user roles 2021-09-18 23:17:49 -04:00
Jason Ertel d2381b0209 Ensure empty/aborted users/roles files do not get copied onto final filenames 2021-06-08 11:03:56 -04:00
Jason Ertel bebba7d280 Switch ownership of curl config to socore 2021-06-06 07:43:53 -04:00
Jason Ertel 11b2b2a893 Switch ownership of curl config to socore 2021-06-06 05:42:34 -04:00
Jason Ertel ba29b5e036 Do not apply salt state if already applying a state 2021-06-04 21:56:41 -04:00
Jason Ertel 316035910f Remove inotify beacon due to it not functioning as documented; Add back so-user changes to sync upon so-user changes 2021-06-03 15:15:35 -04:00
Jason Ertel 588da4d7dc Resolve salt pillar/state/jinja race condition 2021-06-02 14:34:21 -04:00
m0duspwnens 867613669d changes for syncing users 2021-06-01 17:01:03 -04:00