Commit Graph

11102 Commits

Author SHA1 Message Date
Wes
a146f1134e Add Elastic Agent utility scripts 2023-01-11 13:54:42 +00:00
Mike Reeves
7cecc910d5 Merge pull request #9458 from Security-Onion-Solutions/2.4/firewall
2.4/firewall
2023-01-11 08:49:15 -05:00
Doug Burks
668fe10fc0 Merge pull request #9552 from Security-Onion-Solutions/fix/import-unnecessary-processes
Prevent unnecessary processes in Import Mode
2023-01-11 08:07:40 -05:00
m0duspwnens
76fff1b1e0 add logstash ports 2023-01-10 17:02:54 -05:00
Josh Patterson
5993d06896 Merge pull request #9548 from Security-Onion-Solutions/2.4minefunctionsconf
Update so-functions
2023-01-10 16:58:09 -05:00
Josh Patterson
64af393f40 Update so-functions
change MAININT to MNIC
2023-01-10 16:57:17 -05:00
Doug Burks
c15db73561 Avoid unnecessary Zeek processes in Import Mode 2023-01-10 16:48:47 -05:00
Doug Burks
554754421c Avoid unecessary Suricata processes in Import Mode 2023-01-10 16:48:06 -05:00
Doug Burks
322efa304a Avoid unnecessary processes in Import Mode 2023-01-10 16:47:18 -05:00
Mike Reeves
9995d06626 Merge branch '2.4/firewall' of https://github.com/Security-Onion-Solutions/securityonion into 2.4/firewall 2023-01-10 16:09:04 -05:00
Mike Reeves
ab3a7abcc7 run restore each time 2023-01-10 16:08:44 -05:00
Josh Patterson
f039ecb5ce Merge pull request #9547 from Security-Onion-Solutions/2.4/dev
2.4/dev
2023-01-10 13:42:44 -05:00
Mike Reeves
38962520ac Merge pull request #9546 from Security-Onion-Solutions/2.4minefunctionsconf
Update so-functions
2023-01-10 13:39:56 -05:00
Josh Patterson
0151830c85 Update so-functions 2023-01-10 13:37:56 -05:00
Mike Reeves
85978180c2 Merge pull request #9545 from Security-Onion-Solutions/revert-9544-2.4createrepoinstall
Revert "ensure yum-utils and createrepo are installed from so remote repo"
2023-01-10 13:13:31 -05:00
Mike Reeves
d3b8fbaafc Revert "ensure yum-utils and createrepo are installed from so remote repo" 2023-01-10 13:13:13 -05:00
Josh Patterson
745387a756 Merge pull request #9544 from Security-Onion-Solutions/2.4createrepoinstall
ensure yum-utils and createrepo are installed from so remote repo
2023-01-10 11:53:36 -05:00
m0duspwnens
39d808cb8f resolve conflict 2023-01-10 11:50:58 -05:00
Josh Patterson
ab8f41ecb5 Merge branch '2.4/firewall' into 2.4createrepoinstall 2023-01-10 11:38:31 -05:00
m0duspwnens
d2e623747d ensure yum-utils and createrepo are installed from so remote repo 2023-01-10 11:34:50 -05:00
Mike Reeves
3e9bddcd11 Changes to iptables.jinja 2023-01-09 15:36:23 -05:00
Mike Reeves
302bf28b6c Merge branch '2.4/firewall' of https://github.com/Security-Onion-Solutions/securityonion into 2.4/firewall 2023-01-09 15:00:05 -05:00
Mike Reeves
5058210bbb Changes to iptables.jinja 2023-01-09 14:59:55 -05:00
m0duspwnens
ac157432de include docker 2023-01-09 14:58:36 -05:00
m0duspwnens
ec5c565cec put elastalert on sosbridge 2023-01-09 14:49:33 -05:00
m0duspwnens
dbbcea0009 look for True 2023-01-09 11:53:32 -05:00
m0duspwnens
c313b19b50 Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/firewall 2023-01-09 11:18:08 -05:00
Mike Reeves
73ae48d28e Merge pull request #9539 from Security-Onion-Solutions/mkr24
Changes to accept minion
2023-01-09 11:17:45 -05:00
Mike Reeves
0e1e9ff343 Changes to accept minion 2023-01-09 11:15:29 -05:00
Doug Burks
c3a5a02010 Merge pull request #9529 from Security-Onion-Solutions/dougburks-patch-1
Add missing Zeek log to filebeat defaults.yaml
2023-01-06 14:34:02 -05:00
Doug Burks
c1dfb9f935 Add missing Zeek log to filebeat defaults.yaml 2023-01-06 14:27:40 -05:00
Doug Burks
54e554eb3b Merge pull request #9528 from Security-Onion-Solutions/dougburks-patch-1
Remove line numbers from vi
2023-01-06 14:25:19 -05:00
Doug Burks
10e82c5f1c Remove line numbers from vi 2023-01-06 14:23:54 -05:00
m0duspwnens
d4c6834cd0 merge with 2.4/dev 2023-01-06 14:01:58 -05:00
m0duspwnens
4aacc6d1db change role names in so-firewall-minion 2023-01-06 11:09:09 -05:00
m0duspwnens
cb1822a62d change ref to DOCKER.sosrange 2023-01-05 15:57:06 -05:00
m0duspwnens
f10238da42 fw changes 2023-01-04 16:06:14 -05:00
Mike Reeves
2e53476a06 Merge pull request #9516 from Security-Onion-Solutions/mkr24
Add PW auth for Redis
2023-01-04 14:50:27 -05:00
Mike Reeves
275aead5b9 Allow auth for redis check for tgraf 2023-01-04 14:30:28 -05:00
Mike Reeves
e52b54720a Allow auth for redis check for tgraf 2023-01-04 14:26:24 -05:00
Mike Reeves
5afad52b3f Allow auth for redis check for tgraf 2023-01-04 14:18:08 -05:00
Mike Reeves
9bc08661c5 Allow auth for redis check for tgraf 2023-01-04 14:15:53 -05:00
Mike Reeves
48a3f4e261 Allow auth for redis check for tgraf 2023-01-04 14:14:10 -05:00
Doug Burks
723362e685 Merge pull request #9514 from Security-Onion-Solutions/fix/jinja-whitespace-2.4
fix jinja whitespace 2.4
2023-01-04 13:56:24 -05:00
doug
7ba4bdd87b fix jinja whitespace 2023-01-04 13:50:25 -05:00
Mike Reeves
831300b540 Require password auth for redis access 2023-01-04 11:02:40 -05:00
Doug Burks
4c1fc4c679 Merge pull request #9511 from Security-Onion-Solutions/fix/sysmon-fields-2.4
Improve default sysmon fields and add new network_connection fields
2023-01-04 07:58:16 -05:00
Doug Burks
5754365c6d Improve default sysmon fields and add new network_connection fields 2023-01-04 07:42:24 -05:00
Mike Reeves
761fbd0edf Merge pull request #9504 from Security-Onion-Solutions/TOoSmOotH-patch-4
Update soc_global.yaml
2023-01-03 12:24:58 -05:00
Mike Reeves
08d7b24fb4 Update soc_global.yaml 2023-01-03 12:17:51 -05:00