CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-07-14 21:03:10 +02:00
Code Issues Packages Projects Releases Wiki Activity
13,098 Commits 40 Branches 127 Tags
3368789b43f78c6fa3616151d94de4ee99c46a66
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Jason ErtelandGitHub e108bb9bcd Merge pull request #10932 from Security-Onion-Solutions/jertel/agentcommon 
remove unused vars
 2023-08-02 19:29:03 -04:00
Jason ErtelandGitHub 11c827927c Merge pull request #10931 from Security-Onion-Solutions/jertel/agentcommon 
refactor elastic-agent download for soup ctrl+c anomalies
 2023-08-02 19:20:45 -04:00
Jason ErtelandGitHub 99b61b5e1d Merge pull request #10925 from Security-Onion-Solutions/jertel/fiximportsuri 
ensure suri rules are synced for import installs
 2023-08-02 15:13:59 -04:00
Jason ErtelandGitHub 6692fffb9b Merge pull request #10910 from Security-Onion-Solutions/jertel/noautoredirforapi 
Fix login flicker; so-status sluggishness
 2023-08-01 17:05:48 -04:00
Jason ErtelandGitHub 266fc4e866 Merge pull request #10792 from Security-Onion-Solutions/regup 
upgrade registry version
 2023-07-19 10:00:40 -04:00
Jason ErtelandGitHub 6297a2632b Merge pull request #10756 from Security-Onion-Solutions/kilo 
catch up branch
 2023-07-12 10:38:18 -04:00
Jason ErtelandGitHub 1646459052 Merge pull request #10707 from Security-Onion-Solutions/kilo 
add default pillar file
 2023-07-06 14:49:40 -04:00
Jason ErtelandGitHub 224f0606c2 Merge pull request #10706 from Security-Onion-Solutions/kilo 
incorporate features pillar
 2023-07-06 14:04:12 -04:00
Jason ErtelandGitHub c89582ffb6 Merge pull request #10685 from Security-Onion-Solutions/kilo 
remove use of pipe
 2023-06-30 12:23:48 -04:00
Jason ErtelandGitHub 2e42eddbc2 Merge pull request #10656 from Security-Onion-Solutions/jertel/fix-import 
fix agent extract error during install; simplify logic
 2023-06-23 17:21:39 -04:00
Jason ErtelandGitHub d247c9d704 Merge pull request #10648 from Security-Onion-Solutions/jertel/fix-import 
use cluster-unique password for import encryption
 2023-06-23 09:40:26 -04:00
Jason ErtelandGitHub 7623dd20b9 Merge pull request #10644 from Security-Onion-Solutions/cogburn/salt-relay-fix 
WIP: Fix `salt cmd.run` commands for importing
 2023-06-22 20:31:19 -04:00
Jason ErtelandGitHub f4cbe20ddf Merge pull request #10641 from Security-Onion-Solutions/jertel/fix-import 
fix quotations
 2023-06-22 14:46:41 -04:00
Jason ErtelandGitHub cae9e6230f Merge pull request #10638 from Security-Onion-Solutions/cogburn/import-fix 
Change upload path
 2023-06-22 13:04:22 -04:00
Jason ErtelandGitHub 594900a8d4 Merge pull request #10609 from Security-Onion-Solutions/kilo 
webauthn for SOC
 2023-06-16 13:15:25 -04:00
Jason ErtelandGitHub 6894fa4e4d Update VERSION 2023-06-16 13:09:01 -04:00
Jason ErtelandGitHub 7093254439 Merge pull request #10582 from Security-Onion-Solutions/jertel/pcap 
ensure status line shows dates for new and existing imports
 2023-06-13 15:16:43 -04:00
Jason ErtelandGitHub e06787445c Merge pull request #10561 from Security-Onion-Solutions/jertel/pcap 
Node description config setting should not accept a grid-wide value
 2023-06-09 12:02:51 -04:00
Jason ErtelandGitHub 6f7de954d9 Merge pull request #10559 from Security-Onion-Solutions/jertel/pcap 
Telegraf should monitor all mount points
 2023-06-09 09:18:54 -04:00
Jason ErtelandGitHub db5abcb3cf Merge pull request #10503 from Security-Onion-Solutions/jertel/pcap 
add ability to output PCAP import results in JSON format
 2023-06-05 14:32:32 -04:00
Jason ErtelandGitHub 374ab0779a Merge pull request #10458 from Security-Onion-Solutions/jertel/debugrsa 
Add short sleeps around show_top to isolate if there's a race conditi…
 2023-05-30 12:09:34 -04:00
Jason ErtelandGitHub 482c5324db Merge pull request #10442 from Security-Onion-Solutions/airgaps 
Rule Updates
 2023-05-26 20:32:39 -04:00
Jason ErtelandGitHub 32021cf272 Merge pull request #10438 from Security-Onion-Solutions/jertel/redircurl 
support forwarding urls
 2023-05-26 13:42:57 -04:00
Jason ErtelandGitHub 657ef97d17 Merge pull request #10433 from Security-Onion-Solutions/kilo 
Use common fail routine when explicitly aborting setup; Enhance cloud detection
 2023-05-26 09:54:15 -04:00
Jason ErtelandGitHub aad08a830b Merge pull request #10425 from Security-Onion-Solutions/kilo 
fix malformed alert templates
 2023-05-24 10:21:21 -04:00
Jason ErtelandGitHub f53fb69ffb Merge pull request #10407 from Security-Onion-Solutions/kilo 
Ignore Synchronize button clicks when an active salt job is running and another is already in queue
 2023-05-22 14:59:42 -04:00
Jason ErtelandGitHub 02cf1074f2 Merge pull request #10400 from Security-Onion-Solutions/kilo 
use the same requests version that's already packaged with the analyzer
 2023-05-20 08:45:21 -04:00
Jason ErtelandGitHub 2f942a3e37 Merge pull request #10393 from Security-Onion-Solutions/kilo 
fix lib dependency issue with whoisit
 2023-05-19 14:34:42 -04:00
Jason ErtelandGitHub b7e0923ec4 Merge pull request #10382 from Security-Onion-Solutions/kilo 
add missing var for local dev
 2023-05-17 18:58:29 -04:00
Jason ErtelandGitHub dcd761ad74 Merge pull request #10364 from Security-Onion-Solutions/kilo 
import installs do not use monitor ifaces
 2023-05-16 10:15:26 -04:00
Jason ErtelandGitHub 1724565331 Merge pull request #10362 from Security-Onion-Solutions/kilo 
ensure automated tests have passwordless sudo
 2023-05-16 08:49:00 -04:00
Jason ErtelandGitHub cea9af4e01 Merge pull request #10359 from Security-Onion-Solutions/kilo 
missing braces
 2023-05-16 07:25:36 -04:00
Jason ErtelandGitHub 1ddc4b6ff8 Merge pull request #10357 from Security-Onion-Solutions/kilo 
ISO tests also use DHCP
 2023-05-15 19:04:31 -04:00
Jason ErtelandGitHub de28e15805 Merge pull request #10354 from Security-Onion-Solutions/kilo 
Relax rate limiting thresholds when installing in test mode
 2023-05-15 13:02:07 -04:00
Jason ErtelandGitHub 2ec8d6abf0 Merge pull request #10337 from Security-Onion-Solutions/kilo 
Prevent duplicate telegraph data from elastic from distorting Influx graphs
 2023-05-11 13:38:14 -04:00
Jason ErtelandGitHub 7700a5a1bf Merge pull request #10328 from Security-Onion-Solutions/kilo 
add missing dollar sign
 2023-05-10 17:06:35 -04:00
Jason ErtelandGitHub 6f7f09f1cd Merge pull request #10310 from Security-Onion-Solutions/kilo 
nginx changes: add rate limiting, remove old HH html
 2023-05-08 16:32:27 -04:00
Jason ErtelandGitHub b46a5c4b2a Merge pull request #10267 from Security-Onion-Solutions/kilo 
more detection improvements
 2023-05-02 08:17:09 -04:00
Jason ErtelandGitHub 6c151d3ebd Merge pull request #10260 from Security-Onion-Solutions/kilo 
simplify cloud detection
 2023-05-01 11:26:34 -04:00
Jason ErtelandGitHub 73aceb9697 Merge pull request #10251 from Security-Onion-Solutions/kilo 
Kilo
 2023-04-28 14:44:25 -04:00
Jason ErtelandGitHub 8459054ff8 Merge pull request #10220 from Security-Onion-Solutions/kilo 
timeout more quickly on aws imdsv2 detection
 2023-04-26 07:56:22 -04:00
Jason ErtelandGitHub 969cf25818 Merge pull request #10199 from Security-Onion-Solutions/jertel/imdsv2 
Detect cloud install on forced imdsv2 instances
 2023-04-24 16:33:56 -04:00
Jason ErtelandGitHub 3f14885539 Merge pull request #10151 from Security-Onion-Solutions/kilo 
avoid docker and lo nics getting used by test profiles
 2023-04-18 11:56:35 -04:00
Jason ErtelandGitHub aade62491c Merge pull request #10132 from Security-Onion-Solutions/kilo 
fix log dir
 2023-04-14 16:58:14 -04:00
Jason ErtelandGitHub 9bd176621d Merge pull request #10130 from Security-Onion-Solutions/kilo 
detect root using id command
 2023-04-14 16:17:44 -04:00
Jason ErtelandGitHub 9bc44c122f Merge pull request #10129 from Security-Onion-Solutions/kilo 
wrong and
 2023-04-14 12:46:11 -04:00
Jason ErtelandGitHub dc227df229 Merge pull request #10128 from Security-Onion-Solutions/kilo 
Skip raid state for cloud images
 2023-04-14 10:31:17 -04:00
Jason ErtelandGitHub a8d3363a6f Merge pull request #10115 from Security-Onion-Solutions/kilo 
discover appliance model grain during setup
 2023-04-12 19:12:45 -04:00
Jason ErtelandGitHub 3883a89212 Merge pull request #10102 from Security-Onion-Solutions/kilo 
elastic-fleet typo fix; remote dev enhancement
 2023-04-10 14:09:20 -04:00
Jason ErtelandGitHub 44c696a495 Merge pull request #10036 from Security-Onion-Solutions/commonprofile 
ensure scripts are run as root, have copyright, and path is correct
 2023-03-28 11:59:10 -04:00
Jason ErtelandGitHub 4efe22efb3 Update so-elasticsearch-cluster-settings 2023-03-28 11:57:41 -04:00
Jason ErtelandGitHub 591129b98c Update so-elasticsearch-pipelines 2023-03-28 11:57:22 -04:00
Jason ErtelandGitHub 60d770411a Update so-elasticsearch-roles-load 2023-03-28 11:57:07 -04:00
Jason ErtelandGitHub 5f49a120de Update so-elasticsearch-templates-load 2023-03-28 11:56:51 -04:00
Jason ErtelandGitHub 492fe1fc85 Ensure /usr/sbin is in path 2023-03-28 11:48:31 -04:00
Jason ErtelandGitHub 100d9f14e9 Merge pull request #10023 from Security-Onion-Solutions/kilo 
fix role
 2023-03-27 19:31:06 -04:00
Jason ErtelandGitHub 890e1897af Merge pull request #9999 from Security-Onion-Solutions/kilo 
prune system volumes during upgrade
 2023-03-24 13:30:57 -04:00
Jason ErtelandGitHub ca363053e6 Merge pull request #9975 from Security-Onion-Solutions/kilo 
catch errors and exit with proper exit code
 2023-03-21 10:51:36 -04:00
Jason ErtelandGitHub 331d4833b1 Merge pull request #9967 from Security-Onion-Solutions/kilo 
Kilo
 2023-03-20 18:27:35 -04:00
Jason ErtelandGitHub 1771a3123f Merge pull request #9961 from Security-Onion-Solutions/kilo 
Backup old setup logs earlier in setup
 2023-03-20 11:24:08 -04:00
Jason ErtelandGitHub ad2616900c Merge pull request #9939 from Security-Onion-Solutions/kilo 
automated testing support; removal of nonexistent ScanRuby strelka scanner
 2023-03-16 09:30:05 -04:00
Jason ErtelandGitHub aed41404fc Merge pull request #9852 from Security-Onion-Solutions/kilo 
Remove FleetDM tool from SOC instead of deactivating it; generate SRV key during setup
 2023-02-24 13:05:58 -05:00
Jason ErtelandGitHub b62a0c5d5c Merge pull request #9846 from Security-Onion-Solutions/kilo 
Kilo
 2023-02-23 12:12:06 -05:00
Jason ErtelandGitHub 1f37af0e57 Merge pull request #9800 from Security-Onion-Solutions/kilo 
influx upgrade
 2023-02-16 13:51:53 -05:00
Jason ErtelandGitHub e4de89c960 Merge pull request #9798 from Security-Onion-Solutions/jertel-remove-kilo-from-ver 
Update VERSION
 2023-02-16 10:57:19 -05:00
Jason ErtelandGitHub dcbf5a2fa6 Update VERSION 2023-02-16 10:55:32 -05:00
Jason ErtelandGitHub 6e9d1f7c2c Merge pull request #9797 from Security-Onion-Solutions/kilo 
Influx upgrade
 2023-02-16 10:46:57 -05:00
Jason ErtelandGitHub c9f18891b2 Merge pull request #9639 from Security-Onion-Solutions/kilo 
auto extract source/dest IP on case related event attachments; improve so-verify stream to console
 2023-01-25 11:37:16 -05:00
Jason ErtelandGitHub fd7d51a59b Merge pull request #9630 from Security-Onion-Solutions/kilo 
Kilo
 2023-01-24 10:45:12 -05:00
Jason ErtelandGitHub 2bffd9b473 Merge pull request #9628 from Security-Onion-Solutions/kilo 
try paths filter on both even though docs only mention support for push
 2023-01-24 10:27:30 -05:00
Jason ErtelandGitHub 5da1b03d9b Merge pull request #9619 from Security-Onion-Solutions/kilo 
switch MySQL 8 to use native password for playbook compat; fix so-verify mail inspection
 2023-01-23 15:14:00 -05:00
Jason ErtelandGitHub a613d960b9 Merge pull request #9608 from Security-Onion-Solutions/kilo 
setup improvements
 2023-01-20 13:11:11 -05:00
Jason ErtelandGitHub 4044706cd9 Merge pull request #9603 from Security-Onion-Solutions/kilo 
Handle setup failures
 2023-01-19 15:49:41 -05:00
Jason ErtelandGitHub 8d797ad9df Merge pull request #9490 from Security-Onion-Solutions/kilo 
Ensure create/update dates are both reset when an admin sets a user pass
 2022-12-30 11:47:01 -05:00
Jason ErtelandGitHub ba13ad7151 Merge pull request #9454 from Security-Onion-Solutions/kilo 
fix redis defaults to force string keys instead of numeric
 2022-12-21 18:16:40 -05:00
Jason ErtelandGitHub 5a5c565fae Merge pull request #9449 from Security-Onion-Solutions/kilo 
Ensure user/pass values are quoted due to symbol chars appearing in values
 2022-12-21 14:02:38 -05:00
Jason ErtelandGitHub 33a1aea729 Merge pull request #9448 from Security-Onion-Solutions/kilo 
improve so-status rendering on terminals that only support 8 colors
 2022-12-21 10:14:47 -05:00
Jason ErtelandGitHub 2edc3cac11 Clarify Kratos annotations 2022-12-20 14:08:49 -05:00
Jason ErtelandGitHub 1b42965a6d Merge pull request #9416 from Security-Onion-Solutions/jertel/lic 
license key format change and eventFields dedup
 2022-12-16 15:58:08 -05:00
Jason ErtelandGitHub 6a73410be9 Merge pull request #9394 from Security-Onion-Solutions/jertel/mvkr 
move Kratos DB to /nsm
 2022-12-14 15:00:44 -05:00
Jason ErtelandGitHub d1f554723a Merge pull request #9317 from Security-Onion-Solutions/config 
Reduce cron noise; ensure filecheck is restarted if modified
 2022-12-07 08:41:04 -05:00
Jason ErtelandGitHub 6443e702a5 Merge pull request #9305 from Security-Onion-Solutions/config 
Filecheck support for Suricata
 2022-12-06 12:53:19 -05:00
Jason ErtelandGitHub 88410bc8f8 Merge branch '2.4/dev' into config 2022-12-06 12:38:43 -05:00
Jason ErtelandGitHub 5f59ae52d5 Merge pull request #9162 from Security-Onion-Solutions/config 
Config
 2022-11-17 11:50:35 -05:00
Jason ErtelandGitHub 55f22af758 Merge pull request #9017 from Security-Onion-Solutions/config 
Retry so-user commands if another process is currently using so-user
 2022-10-27 15:41:37 -04:00
Jason ErtelandGitHub d7b370e31b Merge pull request #9010 from Security-Onion-Solutions/config 
regex should match entire input against allowed logLevel values
 2022-10-27 13:17:51 -04:00
Jason ErtelandGitHub fd6bea92da Merge pull request #8913 from Security-Onion-Solutions/config 
retry up to 25 minutes if APT is locked by an unattended upgrade. This is an increase from 8 minutes.
 2022-10-13 07:01:00 -04:00
Jason ErtelandGitHub fe62744c05 Merge pull request #8825 from Security-Onion-Solutions/config 
resolve inode issue with soc_users_roles when deleting a user; other minor improvements
 2022-09-27 17:38:20 -04:00
Jason ErtelandGitHub 16d24d4bc9 Merge pull request #8822 from Security-Onion-Solutions/config 
user management / sync
 2022-09-27 11:14:32 -04:00
Jason ErtelandGitHub 21f8b3b61c Merge pull request #8768 from Security-Onion-Solutions/config 
refactor sostatus telegraf input script
 2022-09-19 10:35:22 -04:00
Jason ErtelandGitHub f2b09c84d4 Merge pull request #8767 from Security-Onion-Solutions/config 
Config
 2022-09-19 09:18:10 -04:00
Jason ErtelandGitHub b4add5ebb3 Merge pull request #8766 from Security-Onion-Solutions/config 
complete rewrite of so-status
 2022-09-19 07:40:51 -04:00
Jason ErtelandGitHub 0d32cc38d6 Merge pull request #8733 from Security-Onion-Solutions/config 
Always use local docs
 2022-09-13 14:40:10 -04:00
Jason ErtelandGitHub 810d89eb6c Merge pull request #8731 from Security-Onion-Solutions/config 
Remove comments to avoid confusing config viewers within SOC
 2022-09-13 12:16:38 -04:00
Jason ErtelandGitHub 8c5cba58aa Merge pull request #8730 from Security-Onion-Solutions/config 
Config
 2022-09-13 11:52:05 -04:00
Jason ErtelandGitHub cfb3893c2b Merge pull request #8694 from Security-Onion-Solutions/salt-relay 
Salt relay
 2022-09-08 10:31:28 -04:00
Jason ErtelandGitHub 15124b6ad7 Merge pull request #8271 from Security-Onion-Solutions/kilo 
Add content-type header to PUT request, now required in Kratos 0.10.1
 2022-07-11 13:47:28 -04:00
Jason ErtelandGitHub f28c6d590a Merge pull request #8263 from Security-Onion-Solutions/kilo 
Remove Jinja from yaml files before parsing
 2022-07-08 20:32:22 -04:00
Jason ErtelandGitHub ac68fa822b Merge pull request #8200 from Security-Onion-Solutions/contrib 
Add gh action for contrib check
 2022-06-27 11:25:10 -04:00
Jason ErtelandGitHub 2e123b7a4f Merge pull request #8175 from Security-Onion-Solutions/kilo 
Avoid failing setup due to retrying while waiting for lock file
 2022-06-23 08:16:39 -04:00