Commit Graph

4004 Commits

Author SHA1 Message Date
weslambert
2fab00458b Add randomized play secrets for Cortex + TheHive 2020-07-30 10:23:00 -04:00
weslambert
646bf1cb4d Merge pull request #1118 from Security-Onion-Solutions/fix/wazuh_register_to
Fix/wazuh registration timeout
2020-07-29 13:53:45 -04:00
weslambert
c48ba8abaf Re-arrange config 2020-07-29 13:52:12 -04:00
weslambert
9db390023b Increase timeout from 10s to 30s 2020-07-29 13:51:46 -04:00
Mike Reeves
e3da326fcb Remove non used pillar items 2020-07-29 09:27:18 -04:00
weslambert
4b36c4a809 Merge pull request #1115 from Security-Onion-Solutions/fix/remove_ls_syslog
Remove LS syslog port binding
2020-07-29 08:35:41 -04:00
weslambert
7d432091e2 Remove LS syslog port binding 2020-07-29 08:35:07 -04:00
Josh Brower
e7b9e001e1 mysql init.sls - change startup time from 2 min to 15min
Closes https://github.com/Security-Onion-Solutions/securityonion/issues/1106
2020-07-28 22:08:00 -04:00
Josh Brower
b1c09a9b72 Typo fix - ingest parser - win.eventlogs 2020-07-28 15:23:17 -04:00
Josh Brower
fe76f1c87c Merge pull request #1111 from Security-Onion-Solutions/feature/refactor-sysmon-parsing
initial refactor - beats/sysmon parsing
2020-07-28 11:04:13 -04:00
Josh Brower
55e60cb749 initial refactor - beats/sysmon parsing 2020-07-28 11:03:33 -04:00
weslambert
0f6ecdf38a Merge pull request #1104 from Security-Onion-Solutions/feature/cortex_orguser
Create default orguser if empty
2020-07-27 09:50:23 -04:00
Wes Lambert
e81fd7464b Create default orguser if empty 2020-07-27 13:49:17 +00:00
weslambert
ced51761fa Merge pull request #1103 from Security-Onion-Solutions/feature/wazuh_version
Bump Wazuh version
2020-07-27 09:46:27 -04:00
Wes Lambert
ac5aeb4801 Bump Wazuh version 2020-07-27 13:45:34 +00:00
weslambert
88ffd0c17c Merge pull request #1101 from Security-Onion-Solutions/feature/wazuh_symlinks
Add Wazuh Wazuh symlinks for config/rules
2020-07-27 08:15:58 -04:00
Wes Lambert
51e27cadc8 Add Wazuh Wazuh symlinks for cpnfig/rules 2020-07-27 12:14:43 +00:00
weslambert
2d2bebdd9c Merge pull request #1100 from Security-Onion-Solutions/feature/wazuh_nsm
Move Wazuh from /opt/so/ to /nsm/wazuh
2020-07-27 07:59:39 -04:00
Wes Lambert
958ee25f6d Move Wazuh from /opt/so/ to /nsm/wazuh 2020-07-27 11:58:12 +00:00
weslambert
2d096ddd66 Merge pull request #1096 from Security-Onion-Solutions/fix/elastalert_thehive
Make sure we are searching all clusters when running rules
2020-07-24 18:05:46 -04:00
Wes Lambert
3ac9f1800b Make sure we are searching all clusters when running rules 2020-07-24 22:04:30 +00:00
William Wernert
6c9c60b8dd Merge branch 'master' into dev
# Conflicts:
#	VERSION
2020-07-24 11:50:34 -04:00
Doug Burks
25f6ec861a Merge pull request #1090 from Security-Onion-Solutions/fix/2.0.2
Fix/2.0.2
2020-07-24 11:47:19 -04:00
Mike Reeves
2cabcd4239 Update sig file and hashes 2020-07-24 10:19:38 -04:00
Mike Reeves
91e7a474d5 Update VERIFY_ISO.md 2020-07-24 10:18:09 -04:00
Mike Reeves
79c45156c2 Update changes.json 2020-07-23 22:13:02 -04:00
Mike Reeves
31daad1e5b Update VERIFY_ISO.md
still needs MD5s etc
2020-07-23 22:11:22 -04:00
Mike Reeves
650c983a2e Update README.md 2020-07-23 22:09:05 -04:00
Mike Reeves
95bb1147ca Update VERSION 2020-07-23 22:08:23 -04:00
Jason Ertel
ec09c064d0 If SENSOR_CHECKIN_INTERVAL_MS is still not set when using in a template, fallback to 10s 2020-07-23 21:19:45 -04:00
Jason Ertel
39426afffd Ensure SENSOR_CHECKIN_INTERVAL_MS var is non-null before saving static pillar 2020-07-23 21:00:10 -04:00
Jason Ertel
9eeb527ea7 Include UTC parameter when providing a hyperlink to Hunt from so-import-pcap output 2020-07-23 17:18:42 -04:00
Mike Reeves
bb6871a54a Merge pull request #1087 from Security-Onion-Solutions/TOoSmOotH-patch-2
Update VERIFY_ISO.md
2020-07-23 15:29:32 -04:00
Mike Reeves
261310ce92 Update VERIFY_ISO.md 2020-07-23 15:28:37 -04:00
Mike Reeves
5417b31a10 Merge pull request #1086 from Security-Onion-Solutions/TOoSmOotH-patch-2
Update VERIFY_ISO.md
2020-07-23 15:27:27 -04:00
Mike Reeves
11932366cd Update VERIFY_ISO.md 2020-07-23 15:25:53 -04:00
Doug Burks
2f73dcc6f6 Merge pull request #1085 from Security-Onion-Solutions/fix/2.0.1sig
Update Signature and hashes
2020-07-23 15:23:58 -04:00
Mike Reeves
acf20bf2e8 Update Signature and hashes 2020-07-23 15:20:22 -04:00
Mike Reeves
4d84b840e4 Update Signature and hashes 2020-07-23 15:16:39 -04:00
Mike Reeves
c112dfa098 Merge pull request #1074 from Security-Onion-Solutions/fix/2.0.1sig
Update Signature and Download Links
2020-07-23 13:36:30 -04:00
Mike Reeves
3dd8e1998d Update Signature and Download Links 2020-07-23 13:33:12 -04:00
Mike Reeves
d66f424e5e Merge pull request #1072 from Security-Onion-Solutions/fix/2.0.1-pcap-interval
Fix/2.0.1 Update Readme and changes.json
2.0.1-rc1.1
2020-07-23 12:12:13 -04:00
Mike Reeves
4b127010ee Update changes.json 2020-07-23 11:59:20 -04:00
Mike Reeves
75477fe9bf Update changes.json 2020-07-23 11:56:14 -04:00
Mike Reeves
30fa9872f9 Update README.md 2020-07-23 10:38:26 -04:00
Jason Ertel
1e993da31d Merge master into dev to pull in 2.0.1-rc.1 patch 2020-07-23 09:56:42 -04:00
Mike Reeves
42390eb8a2 Merge pull request #1069 from Security-Onion-Solutions/fix/2.0.1-pcap-interval
Fix/2.0.1 pcap interval and security fixes
2.0.1-rc1
2020-07-23 09:53:56 -04:00
Mike Reeves
ff77abfdc8 Update soup
Remove strelka that isn't an image. Fix formatting
2020-07-23 09:51:52 -04:00
Mike Reeves
74faab92ab Remove variables.txt 2020-07-23 09:21:05 -04:00
Mike Reeves
201efd285a Fix passwords from conflicting with yaml 2020-07-22 16:34:50 -04:00