62 Commits

Author	SHA1	Message	Date
m0duspwnens	5d50dbb69e	enabled/disable zeek	2023-05-08 10:12:32 -04:00
m0duspwnens	a97fa9675b	enable/disable zeek in ui	2023-05-05 16:33:59 -04:00
Mike Reeves	cbd1c05929	Sbin Changes	2023-05-04 10:36:03 -04:00
m0duspwnens	7c8ba04820	set file limit for zeek container	2023-04-18 11:30:39 -04:00
m0duspwnens	1be86cdf8e	issue 10050 and issue 10062	2023-03-29 17:21:40 -04:00
m0duspwnens	903ad530fe	move zeek bpf from zeek pillar to bpf pillar	2023-03-20 15:28:33 -04:00
Mike Reeves	bf5df1ac51	Add Strelka Filecheck	2022-11-02 09:57:07 -04:00
m0duspwnens	b526532ab6	use global vars in states	2022-10-11 11:57:15 -04:00
m0duspwnens	75aa121b2d	fix some things	2022-09-20 13:19:15 -04:00
m0duspwnens	d1ee3a7d04	zeek 2.4	2022-09-20 11:11:29 -04:00
m0duspwnens	79785fc053	zeek jinja	2022-09-19 15:26:32 -04:00
Mike Reeves	a4dc63f3a4	Change how zeek and suri are populated in the minion file	2022-09-14 09:53:57 -04:00
Mike Reeves	2bd9dd80e2	Move In Day	2022-09-07 09:06:25 -04:00
Mike Reeves	95eab61615	Rename to the .jinja standard	2022-02-18 11:06:33 -05:00
Mike Reeves	3e194c9b4b	Walk the homenet for zeek	2022-02-17 11:33:22 -05:00
Mike Reeves	89eb2d0a8b	Add netowrks.cfg to Zeek	2022-02-16 14:24:58 -05:00
Jason Ertel	eefcc929c2	Update copyright pattern to match other repos	2022-01-24 10:09:23 -05:00
Jason Ertel	7c22f46a55	Update copyright year for 2022	2022-01-24 09:35:29 -05:00
William Wernert	a5cba5ecf8	Merge branch 'dev' into foxtrot	2021-10-29 10:01:46 -04:00
m0duspwnens	18ce9c7819	disable zeekpacketlosscron and telegraf checks if zeek is diabled via pillar	2021-10-28 07:46:02 -04:00
William Wernert	eee612e73d	Make folder/file states explicit ... Rather than using /nsm/zeek (max_depth: 1) create explicit states for /nsm/zeek/spool and /nsm/zeek/spool/state.db that set correct ownership	2021-10-27 11:43:09 -04:00
m0duspwnens	d7e5377a44	more requires	2021-10-22 16:46:45 -04:00
Josh Brower	4d307c53e8	Add support for disabling Zeek and Suricata	2021-09-17 13:01:50 -04:00
Mike Reeves	34d4eedf67	Remove old modules	2021-05-26 10:11:47 -04:00
Mike Reeves	cd3e355f84	Fix zeek depth	2021-05-25 16:54:20 -04:00
Mike Reeves	90b3462ead	No recurse for you	2021-05-06 13:29:15 -04:00
Jason Ertel	34dab9009c	Ensure Zeek spool dir is owned by Zeek to allow Zeek to start correctly	2021-02-25 08:10:13 -05:00
m0duspwnens	b693373d8d	change how we allow or disallow states to be run https://github.com/Security-Onion-Solutions/securityonion/issues/2679	2021-01-20 15:09:53 -05:00
m0duspwnens	96b72d46be	show steno,zeek,suricata as disabled in so-status on import node	2020-12-16 12:01:48 -05:00
m0duspwnens	1fca5e65df	redo how containers get added to so-status https://github.com/Security-Onion-Solutions/securityonion/issues/1681	2020-11-10 15:31:47 -05:00
m0duspwnens	09cc8ae1fb	fail the state if it isnt in top	2020-09-09 16:48:50 -04:00
m0duspwnens	a229ae82ce	only allow state to run if it is in top for the node	2020-09-02 16:15:52 -04:00
m0duspwnens	ff84640aad	add pcap to import node, test not starting zeek docker by default	2020-08-14 13:59:23 -04:00
Mike Reeves	24ed92c9dc	minio and change to global	2020-08-04 15:54:03 -04:00
Mike Reeves	3de2afe618	Fix final bugs	2020-07-18 17:29:11 -04:00
Mike Reeves	1d24d7bc7f	Misc pillars	2020-07-17 17:38:10 -04:00
Jason Ertel	8f66a27f07	Refactor image repository to a single variable	2020-07-13 18:26:43 -04:00
m0duspwnens	13af4cacb0	merge with dev and resolve conflicts	2020-07-10 16:27:10 -04:00
Wes Lambert	6e99ca600f	Move zeek_clean to so-sensor-clean	2020-07-10 17:56:40 +00:00
m0duspwnens	5ca3ecf4bd	fix reference to master grain	2020-07-09 15:42:39 -04:00
m0duspwnens	3cf31e2460	https://github.com/Security-Onion-Solutions/securityonion/issues/404	2020-07-09 11:27:06 -04:00
m0duspwnens	ca42850a0c	add missing )	2020-04-28 11:31:19 -04:00
m0duspwnens	b6741daca6	pillarize local.zeek and move zeekctl from defaults.yml to zeek pillar - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/585	2020-04-28 09:44:37 -04:00
m0duspwnens	766b56a944	update dockers to 1.2.2	2020-04-23 10:11:26 -04:00
Mike Reeves	d9e27a5444	Update Versions	2020-04-15 15:37:59 -04:00
Wes Lambert	8d8bde36e8	migrate Zeek clean script from Bro	2020-04-10 12:46:28 +00:00
m0duspwnens	20a6a79551	add tojson to dict passed into zeekctl	2020-03-16 10:28:12 -04:00
m0duspwnens	da8811bc87	restart zeek docker if zeekctl.cfg changes	2020-03-13 14:44:56 -04:00
m0duspwnens	1b7e22d5bd	fix couple minor issue - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/97	2020-03-13 14:41:16 -04:00
m0duspwnens	f9cf04e14e	fix couple minor issue - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/97	2020-03-13 13:42:28 -04:00