CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-27 11:23:14 +01:00
Code Issues Packages Projects Releases Wiki Activity
8,599 Commits 19 Branches 120 Tags
36ae07b78edfbdfba3e4a2526b545a2b91d5f017
Commit Graph

5074 Commits

Author SHA1 Message Date
m0duspwnens
36ae07b78e change timeout from 60 to 120 2021-10-26 10:49:50 -04:00
m0duspwnens
682cbfd223 remove the mode 2021-10-26 09:23:24 -04:00
m0duspwnens
fa2edb2b59 make cortex_init and hive_init time out after 1 minutes vs 5 minutes 2021-10-26 08:39:30 -04:00
m0duspwnens
0c679b62b2 Merge remote-tracking branch 'remotes/origin/dev' into issue/5955 2021-10-25 16:29:41 -04:00
m0duspwnens
7e8d74e770 just use mode 2021-10-25 15:50:27 -04:00
m0duspwnens
9a78d13bee change perms on mysql 2021-10-25 15:37:23 -04:00
weslambert
3be0d05eea Update field removal based on HTTP input changes 2021-10-25 13:16:30 -04:00
weslambert
7fa43a276a Rename default headers and host for HTTP input 2021-10-25 13:15:20 -04:00
William Wernert
6e34905b42 Escape single quotes and allow for any character in node description 2021-10-25 10:48:09 -04:00
m0duspwnens
ee7e714f43 change to file_mode 2021-10-22 16:55:23 -04:00
m0duspwnens
d7e5377a44 more requires 2021-10-22 16:46:45 -04:00
m0duspwnens
283f7296bc fix require 2021-10-22 14:45:22 -04:00
m0duspwnens
9f6407fcb0 fix dupe ids 2021-10-22 14:26:04 -04:00
m0duspwnens
f61400680d fix dupe ids 2021-10-22 14:22:15 -04:00
m0duspwnens
fed8bfac67 more requires on docker containers 2021-10-22 14:10:59 -04:00
m0duspwnens
451b19dc4d change from file to x509 2021-10-22 09:53:20 -04:00
William Wernert
d5d970672d Merge pull request #5974 from Security-Onion-Solutions/foxtrot 
Add so-deny script + rewrite so-allow to match
 2021-10-21 16:37:05 -04:00
m0duspwnens
f93c6146f5 docker binds requires 2021-10-21 15:24:55 -04:00
weslambert
40dd33affe Merge pull request #5971 from Security-Onion-Solutions/feature/es_templates 
Add .keyword subfield for conflict fields
 2021-10-21 15:07:00 -04:00
William Wernert
f374dcbb58 Check for IP environment variable in so-allow and so-deny 2021-10-21 13:54:06 -04:00
weslambert
77ee1db44c Add .keyword subfield for conflict fields 2021-10-21 12:56:03 -04:00
William Wernert
15fe7512b7 Install lxml during setup and in common state 2021-10-21 10:49:41 -04:00
William Wernert
0beeeb94bf Actually add new so-allow script 2021-10-21 10:48:17 -04:00
m0duspwnens
928aed27c5 require files before starting soc or kratos 2021-10-20 17:04:02 -04:00
William Wernert
387d4d6ad5 Add so-deny script + rewrite so-allow to match so-deny 2021-10-20 16:44:57 -04:00
William Wernert
adf6cb4b3c Merge branch 'dev' into foxtrot 2021-10-20 16:44:50 -04:00
William Wernert
b5cb47e066 Fix sbin perms 2021-10-20 16:43:55 -04:00
Josh Patterson
8061508330 Merge pull request #5961 from Security-Onion-Solutions/issue/5960 
Issue/5960
 2021-10-20 16:08:50 -04:00
m0duspwnens
adffb11800 fix redis port 2021-10-20 15:39:21 -04:00
m0duspwnens
8619af59cc servers to list format 2021-10-20 15:02:33 -04:00
m0duspwnens
7ecfb55b70 fix pillar call 2021-10-20 14:50:50 -04:00
m0duspwnens
b496810b63 add redis and logstash input plugins to telegraf 2021-10-20 14:46:47 -04:00
Mike Reeves
e1ad02c28d Merge pull request #5949 from Security-Onion-Solutions/kilo 
Fix Docker-created corruption of SOC user roles file
 2021-10-19 18:37:37 -04:00
Jason Ertel
2f8bb5a2a6 Fix Docker-created corruption of SOC user roles file 2021-10-19 16:04:10 -04:00
Mike Reeves
7f1585dcc0 Merge pull request #5942 from Security-Onion-Solutions/tunesteno 
Fix Steno Math for PL
 2021-10-19 13:03:50 -04:00
Mike Reeves
64f25961b0 Fix Steno Math for PL 2021-10-19 11:15:58 -04:00
Mike Reeves
b9a3d3a6a9 Fix Steno Math for PL 2021-10-19 11:14:02 -04:00
Mike Reeves
00e5b54dda Merge pull request #5911 from Security-Onion-Solutions/tunesteno 
Add Steno Tuning Options
 2021-10-18 09:01:14 -04:00
Mike Reeves
4016b416ec Merge pull request #5923 from Security-Onion-Solutions/kilo 
Upgrade to ES 7.15.1
 2021-10-16 09:15:06 -04:00
weslambert
bb36fc1ed8 Add TI module defaults 2021-10-15 17:16:38 -04:00
weslambert
d0a6dafc8b Add TI module 2021-10-15 17:09:59 -04:00
Mike Reeves
a9f6c84d7c Add Steno Tuning Options 2021-10-15 14:17:54 -04:00
weslambert
59852841ff Add keyword subfield for event.module 2021-10-15 13:29:50 -04:00
Jason Ertel
8de8d58155 Upgrade to ES 7.15.1 2021-10-15 13:27:08 -04:00
Wes Lambert
032373187c Allow setting ES index patterns for SOC in pillar 2021-10-15 16:02:53 +00:00
William Wernert
db2b70f655 Merge pull request #5900 from Security-Onion-Solutions/foxtrot 
Replace rather than append to Kibana misc log
 2021-10-15 10:27:25 -04:00
Jason Ertel
1800ec4570 Upgrade to Elastalert 2 v2.2.2 2021-10-15 09:25:44 -04:00
Mike Reeves
8a5960c220 Merge pull request #5896 from Security-Onion-Solutions/kilo 2021-10-14 18:05:33 -04:00
Jason Ertel
9797a15218 Fix issue with 'so-user delete' resetting all user roles - note that this function is not technically supported or published since it's not intended for production use 2021-10-14 17:23:18 -04:00
William Wernert
c7b15a9b1f Replace rather than append to Kibana misc log 2021-10-14 15:13:55 -04:00