CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 09:12:45 +01:00
Code Issues Packages Projects Releases Wiki Activity
9,403 Commits 24 Branches 119 Tags
4dd0ce9f2cf812f280eb7dcafdf5ce9d0a583b59
Commit Graph

9403 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
m0duspwnens
4dd0ce9f2c ensure /etc/yum.repos.d/securityonion.repo is absent if not a manager and managerupdates is enabled 2022-01-31 09:01:18 -05:00
Josh Patterson
0c5b4c6070 Merge pull request #7033 from Security-Onion-Solutions/receiver_grafana 
Receiver grafana
 2022-01-31 08:41:56 -05:00
Josh Patterson
a8983dd895 Merge pull request #7028 from Security-Onion-Solutions/soup_salt_repo 
Soup salt repo
 2022-01-31 08:21:17 -05:00
m0duspwnens
e189f10a1b Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into soup_salt_repo 2022-01-29 11:04:07 -05:00
m0duspwnens
a90660c07b ensure salt-latest.repo is absent, salt.minion state include repo.client 2022-01-29 11:04:03 -05:00
Mike Reeves
bb87c85e07 Merge pull request #7027 from Security-Onion-Solutions/fix/soup-kibana 
Move Kibana dashboard update from post_to_2.3.90() to post_to_2.3.100()
 2022-01-29 10:07:36 -05:00
Doug Burks
bc0a362b39 Move Kibana dashboard update from post_to_2.3.90() to post_to_2.3.100() 2022-01-29 08:02:56 -05:00
m0duspwnens
3aee8656d4 fix %} - add redis to receiver telegraf 2022-01-28 17:45:12 -05:00
m0duspwnens
980a1a0c3d add redis to receiver telegraf 2022-01-28 17:44:04 -05:00
m0duspwnens
bf26ae8e41 add receiver to allowed dashboards 2022-01-28 17:32:53 -05:00
m0duspwnens
da3e1e402a add receiver dashboard grafana 2022-01-28 17:27:58 -05:00
m0duspwnens
1cd1ad9214 add inputs for so-receiver to telegraf conf 2022-01-28 17:18:31 -05:00
Josh Patterson
ddba4a5fe5 Merge pull request #7024 from Security-Onion-Solutions/soup_receiver 
Soup receiver
 2022-01-28 17:01:04 -05:00
m0duspwnens
c8b1e6f501 remove -X from UPGRADECOMMAND so salt-minion starts after upgrade 2022-01-28 15:49:53 -05:00
m0duspwnens
c45efebc7f Merge remote-tracking branch 'remotes/origin/dev' into soup_receiver 2022-01-28 15:27:27 -05:00
m0duspwnens
014696f62f fix receiver append to assigned_hostgroups.local.map.yaml 2022-01-28 15:26:37 -05:00
m0duspwnens
6b18551dd1 skip applying repo.client if airgap and saltupgrade prior to yum clean all 2022-01-28 14:39:10 -05:00
weslambert
4ecf4ab253 Merge pull request #7020 from Security-Onion-Solutions/feature/dash_updates 
EG and HL Dashboard Updates
 2022-01-28 13:19:02 -05:00
m0duspwnens
75b8d6a0c5 ensure /etc/yum.repos.d/securityonioncache.repo is absent if global:managerupdate = 0 2022-01-28 13:09:48 -05:00
weslambert
5142e6ccc7 Update so-kibana-config-load 2022-01-28 13:01:33 -05:00
Wes Lambert
3b76c2421c Update to allow for passing HL saved objects 2022-01-28 17:59:34 +00:00
m0duspwnens
e82c6a2393 default for managerupdate should be int not a string 2022-01-28 12:50:58 -05:00
m0duspwnens
905ca35e93 use sed instead of echo 2022-01-28 11:19:54 -05:00
m0duspwnens
3977146a16 add receiver to firewall files during soup 2022-01-28 10:36:30 -05:00
Josh Patterson
5a37b14809 Merge pull request #7017 from Security-Onion-Solutions/issue/7016 
dont apply wazuh state on sensors if it is disabled globally
 2022-01-28 09:33:34 -05:00
m0duspwnens
15c29bda74 dont apply wazuh state on sensors if it is disabled globally - https://github.com/Security-Onion-Solutions/securityonion/issues/7016 2022-01-28 09:31:02 -05:00
Josh Patterson
d0186c8c1b Merge pull request #7011 from Security-Onion-Solutions/fix/reinstall 
https://github.com/Security-Onion-Solutions/securityonion/issues/7010
 2022-01-27 16:40:37 -05:00
Jason Ertel
ac21bd1e29 Merge pull request #7009 from Security-Onion-Solutions/kilo 
Add new abbreviated result limit param
 2022-01-27 15:55:42 -05:00
Jason Ertel
14c587fca2 Add new abbreviated result limit param 2022-01-27 15:51:02 -05:00
m0duspwnens
6cc8e4355e exclude salt ERROR seen during reinstall 2022-01-27 15:31:42 -05:00
m0duspwnens
e63f35a223 change to test 2022-01-27 15:19:33 -05:00
weslambert
69689b470b Merge pull request #7005 from Security-Onion-Solutions/fix/revert_cases_field_limit 
Revert field limit from testing
 2022-01-27 11:33:31 -05:00
weslambert
fc0a5bce86 Revert field limit from testing 2022-01-27 11:18:35 -05:00
weslambert
39257df396 Merge pull request #7004 from Security-Onion-Solutions/fix/revert_dtc 
Revert changes to common template
 2022-01-27 11:15:50 -05:00
weslambert
60a0204975 Revert changes to common template 2022-01-27 11:02:47 -05:00
William Wernert
c6b11f4e05 Merge pull request #7001 from Security-Onion-Solutions/fix/so-rule-string-split 
Fix error message printing in so-rule
 2022-01-26 16:08:00 -05:00
William Wernert
4532de368a Fix error message printing in so-rule 2022-01-26 16:04:45 -05:00
m0duspwnens
9e2278a199 Merge remote-tracking branch 'remotes/origin/dev' into fix/reinstall 2022-01-26 15:48:46 -05:00
weslambert
e303fb12cf Merge pull request #7000 from Security-Onion-Solutions/fix/zeek_dns_answers_pipeline 
Fix Zeek field name so it doesn't conflict with mapping of other dns.…
 2022-01-26 15:04:12 -05:00
weslambert
8f0a327cb5 Fix Zeek field name so it doesn't conflict with mapping of other dns.answers fields 2022-01-26 15:02:59 -05:00
weslambert
bdc5e89822 Merge pull request #6999 from Security-Onion-Solutions/fix/case_mapping_changes_temp 
Mapping changes for case index
 2022-01-26 14:59:45 -05:00
weslambert
1b3e7f9d79 Temp changes while adjusting mapping 2022-01-26 14:57:16 -05:00
Josh Patterson
4f30d43611 Merge pull request #6998 from Security-Onion-Solutions/es_binds 
mount repo dir in container same as defined on host
 2022-01-26 13:59:17 -05:00
m0duspwnens
c80adc0430 mount repo dir in container same as defined on host 2022-01-26 13:42:56 -05:00
weslambert
e77648c475 Merge pull request #6994 from Security-Onion-Solutions/feature/dtc 
Additional DTC changes
 2022-01-26 12:22:48 -05:00
Jason Ertel
c2636036ee Merge pull request #6995 from Security-Onion-Solutions/kilo 
store related event data as a flattened object blob
 2022-01-26 12:21:02 -05:00
Wes Lambert
e10749a495 Additional changes to template to accomodate default fields and keyword subfield 2022-01-26 17:16:29 +00:00
Jason Ertel
ed9b74dc33 store related event data as a flattened object blob 2022-01-26 12:16:05 -05:00
m0duspwnens
2aa19b78da dont remove ca-certificates.crt 2022-01-26 11:27:35 -05:00
m0duspwnens
1337af9d69 more dupes 2022-01-26 11:07:06 -05:00