66 Commits

Author	SHA1	Message	Date
Mike Reeves	34d4eedf67	Remove old modules	2021-05-26 10:11:47 -04:00
Mike Reeves	cd3e355f84	Fix zeek depth	2021-05-25 16:54:20 -04:00
Mike Reeves	90b3462ead	No recurse for you	2021-05-06 13:29:15 -04:00
m0duspwnens	fcd3f81400	fix quotes	2021-02-25 11:16:53 -05:00
m0duspwnens	c8213fa3d4	change docker exec	2021-02-25 11:07:54 -05:00
m0duspwnens	add66e750e	forgot to add -c	2021-02-25 10:49:09 -05:00
m0duspwnens	d52abcbcbd	ensure zeekctl is run as user zeek https://github.com/Security-Onion-Solutions/securityonion/issues/3130	2021-02-25 09:58:07 -05:00
Jason Ertel	34dab9009c	Ensure Zeek spool dir is owned by Zeek to allow Zeek to start correctly	2021-02-25 08:10:13 -05:00
m0duspwnens	b693373d8d	change how we allow or disallow states to be run https://github.com/Security-Onion-Solutions/securityonion/issues/2679	2021-01-20 15:09:53 -05:00
m0duspwnens	96b72d46be	show steno,zeek,suricata as disabled in so-status on import node	2020-12-16 12:01:48 -05:00
m0duspwnens	09b3a4a0dd	merge pillar with the defaults https://github.com/Security-Onion-Solutions/securityonion/issues/2319	2020-12-11 14:35:06 -05:00
m0duspwnens	b8e8510dd2	merge pillar with the defaults https://github.com/Security-Onion-Solutions/securityonion/issues/2319	2020-12-11 14:26:32 -05:00
m0duspwnens	1fca5e65df	redo how containers get added to so-status https://github.com/Security-Onion-Solutions/securityonion/issues/1681	2020-11-10 15:31:47 -05:00
Wes Lambert	05549a2362	Add Zeek intel.dat	2020-11-02 21:36:44 +00:00
m0duspwnens	09cc8ae1fb	fail the state if it isnt in top	2020-09-09 16:48:50 -04:00
m0duspwnens	a229ae82ce	only allow state to run if it is in top for the node	2020-09-02 16:15:52 -04:00
m0duspwnens	ff84640aad	add pcap to import node, test not starting zeek docker by default	2020-08-14 13:59:23 -04:00
Mike Reeves	24ed92c9dc	minio and change to global	2020-08-04 15:54:03 -04:00
Mike Reeves	3de2afe618	Fix final bugs	2020-07-18 17:29:11 -04:00
Mike Reeves	1d24d7bc7f	Misc pillars	2020-07-17 17:38:10 -04:00
m0duspwnens	e3efaee864	change reference from bro to zeek	2020-07-17 14:41:44 -04:00
Jason Ertel	8f66a27f07	Refactor image repository to a single variable	2020-07-13 18:26:43 -04:00
m0duspwnens	13af4cacb0	merge with dev and resolve conflicts	2020-07-10 16:27:10 -04:00
Wes Lambert	6e99ca600f	Move zeek_clean to so-sensor-clean	2020-07-10 17:56:40 +00:00
m0duspwnens	5ca3ecf4bd	fix reference to master grain	2020-07-09 15:42:39 -04:00
m0duspwnens	3cf31e2460	https://github.com/Security-Onion-Solutions/securityonion/issues/404	2020-07-09 11:27:06 -04:00
m0duspwnens	fd939a06b9	whitespace cleanup	2020-07-01 13:40:40 -04:00
m0duspwnens	38db512eda	fix spacing	2020-07-01 13:29:19 -04:00
m0duspwnens	4e7e19af54	pillarize zeek node.cfg. change reference from bro to zeek.	2020-07-01 13:26:27 -04:00
Wes Lambert	90c278096c	Add custom Zeek script dir	2020-06-17 17:11:27 +00:00
Jason Ertel	970368c74e	Avoid logs leaking to stdout/stderr during cron jobs	2020-06-03 09:42:44 -04:00
m0duspwnens	8d2ca003fb	change how we populate local.zeek - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/585	2020-04-28 14:10:57 -04:00
m0duspwnens	c46a45f00f	LOAD to LOCAL in local.zeek and sort local.zeek and zeekctl.cfg output	2020-04-28 12:08:32 -04:00
m0duspwnens	ca42850a0c	add missing )	2020-04-28 11:31:19 -04:00
m0duspwnens	b6741daca6	pillarize local.zeek and move zeekctl from defaults.yml to zeek pillar - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/585	2020-04-28 09:44:37 -04:00
m0duspwnens	766b56a944	update dockers to 1.2.2	2020-04-23 10:11:26 -04:00
Mike Reeves	d9e27a5444	Update Versions	2020-04-15 15:37:59 -04:00
Wes Lambert	8d8bde36e8	migrate Zeek clean script from Bro	2020-04-10 12:46:28 +00:00
Josh Brower	31ae8a2c26	Zeek - enable Community ID policy	2020-03-26 16:33:47 -04:00
m0duspwnens	20a6a79551	add tojson to dict passed into zeekctl	2020-03-16 10:28:12 -04:00
m0duspwnens	2bda1f4beb	remove whitespace	2020-03-13 16:12:16 -04:00
m0duspwnens	1db9692c6b	allow all zeekctl configuration options to be defined - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/97	2020-03-13 16:10:42 -04:00
m0duspwnens	a21ffaecc8	add option to compress archived logs for zeekctl - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/97	2020-03-13 15:05:25 -04:00
m0duspwnens	da8811bc87	restart zeek docker if zeekctl.cfg changes	2020-03-13 14:44:56 -04:00
m0duspwnens	1b7e22d5bd	fix couple minor issue - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/97	2020-03-13 14:41:16 -04:00
m0duspwnens	f9cf04e14e	fix couple minor issue - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/97	2020-03-13 13:42:28 -04:00
m0duspwnens	bc6aab5b22	add zeekctl.cfg docker file bind	2020-03-13 13:23:27 -04:00
m0duspwnens	3aa48b1a23	first go at managing zeekctl.cfg - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/97	2020-03-13 13:20:48 -04:00
m0duspwnens	7ea0b2c284	add salt cron identifiers - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/134	2020-03-13 08:38:45 -04:00
Wes Lambert	aeb298a818	fix typo	2020-03-06 18:49:29 +00:00