Commit Graph

3018 Commits

Author SHA1 Message Date
weslambert 59ece8fd29 Merge pull request #699 from Security-Onion-Solutions/fix/dce_rpc_parsing
update DCE/RPC parsing
2020-05-15 14:20:37 -04:00
Wes Lambert 5d5f5cf105 update DCE/RPC parsing 2020-05-15 18:19:05 +00:00
Mike Reeves 7e1016ff07 Update firewall rules to allow minions to connect 2020-05-15 13:59:07 -04:00
Mike Reeves 10896c1add Update Release Notes 2020-05-15 13:41:51 -04:00
m0duspwnens 2f566bf6d7 add so-standalone to agent/wazuh-register-agent 2020-05-15 13:25:31 -04:00
m0duspwnens 1a157eb6a5 add so-standalone to agent/ossec.conf 2020-05-15 13:23:58 -04:00
m0duspwnens 9c7481a0c7 add so-status map for standalone 2020-05-15 13:21:05 -04:00
Mike Reeves d04f58a27e Update README.md 2020-05-15 13:10:52 -04:00
William Wernert 2f4ce40095 [fix] Change verbiage to indicate the master vs open is only for OS packages 2020-05-15 11:40:37 -04:00
William Wernert 692d1d72a3 [fix] Change verbiage to indicate the master vs open is only for OS packages 2020-05-15 11:39:59 -04:00
William Wernert c9614f9baf [fix] Only add user to SOC on masters 2020-05-15 11:20:33 -04:00
m0duspwnens 74290eca2a change = to in - https://github.com/Security-Onion-Solutions/securityonion-saltstack.git 2020-05-15 11:20:06 -04:00
m0duspwnens f3a2c1fb4d add missing ] - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/140 2020-05-15 11:08:10 -04:00
m0duspwnens f4db261baf change elif - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/140 2020-05-15 10:57:25 -04:00
m0duspwnens fdae84bb74 remove = in - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/140 2020-05-15 10:56:16 -04:00
William Wernert cfec4eb5a2 Merge branch 'dev' of github.com:Security-Onion-Solutions/securityonion-saltstack into dev 2020-05-15 10:52:33 -04:00
William Wernert b37b993eea [fix] Don't say we're downloading containers on iso install 2020-05-15 10:43:20 -04:00
William Wernert eeb0579acb [fix] Don't change settings during whiptail menus on ISO 2020-05-15 10:42:52 -04:00
William Wernert b9456dcc98 [fix] Set output dir for docker registry untar 2020-05-15 10:42:13 -04:00
Doug Burks d6d27a2861 avoid duplicate entries in _cluster/settings for mastersearch
https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/696
2020-05-15 10:29:24 -04:00
m0duspwnens 509188092c adding so-standalone state logic, add zeek pillar to so-standalone - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/140 2020-05-15 10:02:25 -04:00
m0duspwnens e8244cb2f2 add standalone to case statement in configure_minion so-functions - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/140 2020-05-14 17:14:35 -04:00
m0duspwnens 5f1582f39f remove extra space for standalone from pillar/top = https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/140 2020-05-14 16:57:50 -04:00
Doug Burks e41c1b6755 fix typo 2020-05-14 16:57:34 -04:00
m0duspwnens fb020f4fcd update so-functions to handle STANDALONE mode - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/140 2020-05-14 16:26:04 -04:00
m0duspwnens 692f04727f add standalone mode to pillar and state top - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/140 2020-05-14 16:06:19 -04:00
m0duspwnens 3064af753b allow STANDALONE mode to install salt-master - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/140 2020-05-14 15:23:53 -04:00
Josh Patterson 09368b05f7 Merge pull request #688 from Security-Onion-Solutions/issue/140
rename PROD to STANDALONE
2020-05-14 15:06:38 -04:00
m0duspwnens 5f4ec41497 rename PROD to STANDALONE 2020-05-14 15:05:37 -04:00
Josh Patterson 989dc418a8 Merge pull request #686 from Security-Onion-Solutions/quickfix/sostatus
rename so-aptcacherng for so-status
2020-05-14 14:12:24 -04:00
m0duspwnens 9667f8b853 rename so-aptcacherng for so-status 2020-05-14 14:11:06 -04:00
Doug Burks 34d9882987 fix Wazuh and Sysmon queries 2020-05-14 13:47:01 -04:00
Josh Patterson 8cd3d0c16c Merge pull request #684 from Security-Onion-Solutions/issue/682
run so-elasticsearch-pipelines only on changes
2020-05-14 13:41:07 -04:00
m0duspwnens 7f464af5fa run so-elasticsearch-pipelines only on changes - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/682 2020-05-14 13:39:19 -04:00
William Wernert 02cd70c2e0 Merge branch 'dev' of github.com:Security-Onion-Solutions/securityonion-saltstack into dev 2020-05-14 12:33:34 -04:00
William Wernert 80cd408821 [fix] Only install nc, not full nmap 2020-05-14 12:33:28 -04:00
Mike Reeves dbef2e2832 Update soc.json 2020-05-14 11:56:18 -04:00
William Wernert 5078ea8692 Merge branch 'dev' of github.com:Security-Onion-Solutions/securityonion-saltstack into dev 2020-05-14 11:50:22 -04:00
William Wernert 2642968089 [fix] Correct wazuh + suricata pillar placement 2020-05-14 11:50:16 -04:00
Mike Reeves 6991900ceb Update Query for geo 2020-05-14 11:34:10 -04:00
Doug Burks 5c3e7acc6d change resp_mime_types to file.resp_mime_types 2020-05-14 11:21:32 -04:00
Doug Burks 6112322bce change file.path to smb.path 2020-05-14 11:20:11 -04:00
Josh Brower daf2936635 Merge pull request #680 from Security-Onion-Solutions/bugfix/navigator-top
Navigator top.sls fix
2020-05-14 11:20:00 -04:00
Josh Brower 554612d25f Navigator top.sls fix 2020-05-14 11:19:07 -04:00
Mike Reeves 937f488a8f Update static pillar 2020-05-14 11:13:43 -04:00
Doug Burks c7b4ab116f fix rfb typo 2020-05-14 10:57:44 -04:00
Josh Brower 9186a553ca Merge pull request #678 from Security-Onion-Solutions/bugfix/nids-and-osquerypackages
osquery packages fix
2020-05-13 20:40:41 -04:00
Josh Brower 3db67de27a osquery packages fix 2020-05-13 20:39:56 -04:00
Josh Brower a37ce376a7 Merge pull request #676 from Security-Onion-Solutions/bugfix/elastalert-nidsalert
Playbook hivealert fixes
2020-05-13 19:28:19 -04:00
Josh Brower 8a68e6adb3 Playbook hivealert fixes 2020-05-13 19:27:14 -04:00