Commit Graph

3882 Commits

Author SHA1 Message Date
phil1090 5d2c6d330f Update README.md 2020-07-16 10:15:40 -04:00
Josh Patterson 582edd7aac Merge pull request #1016 from Security-Onion-Solutions/quickfix/lstoes
including elasticsearch in logstash state
2020-07-16 10:13:18 -04:00
m0duspwnens f10f47ad4e including elasticsearch in logstash state 2020-07-16 10:12:10 -04:00
weslambert f8bb094546 Merge pull request #1014 from Security-Onion-Solutions/fix/strelka_standalone
Fix module eval
2020-07-16 09:32:06 -04:00
Wes Lambert 8275f458a1 Fix module eval 2020-07-16 13:30:38 +00:00
William Wernert 5190e5d434 Update README.md 2020-07-16 09:20:20 -04:00
weslambert 7fecfdab32 Update README.md 2020-07-16 08:14:47 -04:00
weslambert f7d527bb90 Update README.md 2020-07-16 08:14:23 -04:00
Josh Brower 350d2fbeda Update README.md 2020-07-15 19:07:25 -04:00
Josh Brower 29c28fcb5e Update README.md 2020-07-15 19:06:36 -04:00
Josh Brower 48c9244a81 Update README.md 2020-07-15 19:05:49 -04:00
Mike Reeves a4672dedee Update README.md 2020-07-15 18:17:05 -04:00
Mike Reeves 473606371a Fix Features Download 2020-07-15 17:49:13 -04:00
Mike Reeves d71dc89b13 New SOUP 2020-07-15 17:46:33 -04:00
Jason Ertel 9781d8d0e7 Ensure permissions are consistently applied to all imported PCAP files 2020-07-15 13:53:28 -04:00
Jason Ertel 0a976861f3 Dynamically set sensor checkin interval; allow overrides if var is preset 2020-07-15 13:22:14 -04:00
Josh Brower 80e081e828 Merge pull request #1010 from Security-Onion-Solutions/bugfix/playbook-anonymous-perms
Playbook anonymous perms fix
2020-07-15 12:40:47 -04:00
Josh Brower d11ef08961 Playbook anonymous perms fix 2020-07-15 12:37:04 -04:00
Jason Ertel 3c42f50e99 Ensure whiptail success/summary screen is final step before reboot 2020-07-15 11:12:48 -04:00
Josh Patterson 83428d4785 Merge pull request #1009 from Security-Onion-Solutions/quickfix/lstoes
load templates for es for eval
2020-07-15 08:32:50 -04:00
m0duspwnens e4fff05dbc load templates for es for eval 2020-07-15 08:30:43 -04:00
Jason Ertel 9dc1151347 Imported logs are sent to so-import index on eval installations 2020-07-14 22:59:42 -04:00
Jason Ertel b53ce392ef Improve grammer of summary screen in whiptail 2020-07-14 22:45:38 -04:00
Jason Ertel c0960e58e8 Improve grammer of so-allow input prompt 2020-07-14 19:42:53 -04:00
Josh Patterson 549916306c Merge pull request #1008 from Security-Onion-Solutions/quickfix/lstoes
Quickfix/lstoes
2020-07-14 17:37:19 -04:00
m0duspwnens 5cf71596b2 add curlys 2020-07-14 17:36:52 -04:00
Jason Ertel acb800d1c9 Using static UID for Grafana overview dashboard to allow SOC to directly link to those dashboards 2020-07-14 17:36:30 -04:00
Jason Ertel 9bbbaa485c Switch PM to AM since we want to span midnight to midnight 2020-07-14 17:36:30 -04:00
m0duspwnens acaec6c125 remove recurse causing issues 2020-07-14 17:12:29 -04:00
Josh Brower e7e1982862 Merge pull request #1007 from Security-Onion-Solutions/bugfix/ingest-parsing
Parsing & Hunt query updates
2020-07-14 17:00:04 -04:00
Josh Brower 8647944ae6 Parsing & Hunt query updates 2020-07-14 16:59:06 -04:00
Mike Reeves 55056f3193 Merge pull request #1006 from Security-Onion-Solutions/fix/perms
Change opt/so perms
2020-07-14 16:19:02 -04:00
m0duspwnens 57bf23d83c move templates from logstash to elasticsearch 2020-07-14 16:07:46 -04:00
Doug Burks a1e6a85a68 explicitly set Suricata timestamp timezone to UTC 2020-07-14 15:49:46 -04:00
weslambert 7a36803e2c Merge pull request #1002 from Security-Onion-Solutions/fix/strelka_observer
Add observer name for Strelka events
2020-07-14 13:39:52 -04:00
Wes Lambert f9df39977b Add observer name for Strelka events 2020-07-14 17:38:43 +00:00
weslambert 7ed902c0ae Merge pull request #1001 from Security-Onion-Solutions/fix/suricata_timestamp
Convert message timestamp to @timestamp
2020-07-14 13:34:58 -04:00
Josh Brower 47388fa98d Merge pull request #998 from Security-Onion-Solutions/bugfix/fleet-soimage-fix
Fleet reactor fix
2020-07-14 13:06:52 -04:00
Josh Brower ba8395fc11 Fleet reactor fix 2020-07-14 13:04:29 -04:00
William Wernert 3df5904269 Merge pull request #979 from Security-Onion-Solutions/feature/setup
Feature/setup
2020-07-14 11:17:03 -04:00
William Wernert caf9e3f75a [fix] Redirect hive_init output to log 2020-07-14 11:13:50 -04:00
William Wernert ad3c4c4950 [fix] master -> manager 2020-07-14 11:09:12 -04:00
Mike Reeves 57cd2cdbeb Change opt/so perms 2020-07-14 10:37:49 -04:00
William Wernert 4ab90a9a30 [fix] Move redirect var to function after $MAINIP has been set 2020-07-14 10:12:51 -04:00
Mike Reeves f2d9abf1a5 Merge pull request #996 from Security-Onion-Solutions/fix/curator
Add all actions to cron
2020-07-14 10:05:27 -04:00
Mike Reeves e404a41d8a Add all actions to cron 2020-07-14 10:04:15 -04:00
Mike Reeves 15be31af6d Merge pull request #995 from Security-Onion-Solutions/fix/curator
Fix spelling error in actions
2020-07-14 09:43:41 -04:00
Jason Ertel 67f2edce28 Resolve merge conflict that reverted import URL back to Kibana 2020-07-14 09:40:16 -04:00
Mike Reeves d4e6189f6e Fix spelling error in actions 2020-07-14 09:39:56 -04:00
Wes Lambert d6afde90b0 Convert message timestamp to @timestamp 2020-07-14 13:37:00 +00:00