8286 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
m0duspwnens	4d991d3773	propogate users and users_roles	2021-05-26 14:52:10 -04:00
Mike Reeves	bfcde15a24	elastic pipeline test	2021-05-26 14:22:14 -04:00
doug	ee675546ac	add menu.actions.json and update soc.json	2021-05-26 14:09:00 -04:00
Jason Ertel	b43e6c5d6b	Salt will handle auto-sync	2021-05-26 13:51:24 -04:00
Jason Ertel	c531ef0773	Move user sync'd files to saltstack for grid propagation	2021-05-26 13:44:30 -04:00
Jason Ertel	a6a4c03029	Improve error scenarios for user sync; Ensure user sync runs before Elastic container starts	2021-05-26 12:08:10 -04:00
Mike Reeves	b525cfc787	Remove old modules	2021-05-26 11:07:53 -04:00
m0duspwnens	842aa97f7e	load filebeat modules when es container starts and if fb container is running	2021-05-26 11:00:18 -04:00
Mike Reeves	34d4eedf67	Remove old modules	2021-05-26 10:11:47 -04:00
Josh Brower	4a109d6af1	Merge pull request #4299 from Security-Onion-Solutions/feature/so-pcap-pull ... Feature/so-pcap-export	2021-05-26 09:59:45 -04:00
John Bernal	cb40a76247	Update so-whiptail ... Updated Zeek capitalization when prompting for the number of processes.	2021-05-26 09:55:14 -04:00
Josh Brower	ed249600d3	Merge remote-tracking branch 'remotes/origin/dev' into feature/so-pcap-pull	2021-05-26 09:52:58 -04:00
Josh Brower	0187c9d6df	Adds so-pcap-export	2021-05-26 09:51:37 -04:00
William Wernert	6da37966d9	Update wording for iso location prompt in soup	2021-05-26 09:32:25 -04:00
m0duspwnens	525d4325c7	define ZEEKLOGLOOKUP in the yaml	2021-05-25 17:18:58 -04:00
m0duspwnens	ecf7e25a51	fix merge conflict	2021-05-25 17:16:44 -04:00
Jason Ertel	ec2f8fe6c8	Synchronize SOC passwords with Elastic	2021-05-25 17:16:05 -04:00
m0duspwnens	dfaf40f583	add zeekloglookup to translate zeeklogs to filebeat filesets	2021-05-25 17:14:26 -04:00
Mike Reeves	543154f037	Remove old modules	2021-05-25 16:58:18 -04:00
Mike Reeves	cd3e355f84	Fix zeek depth	2021-05-25 16:54:20 -04:00
m0duspwnens	2eee6b45bc	Merge branch 'pipeline' of https://github.com/Security-Onion-Solutions/securityonion into pipeline	2021-05-25 16:52:08 -04:00
m0duspwnens	0de5c6f204	fix sodefault modules	2021-05-25 16:52:02 -04:00
Mike Reeves	9363fc153c	Fix pillar for module	2021-05-25 16:44:13 -04:00
m0duspwnens	2aacd5b9b6	so defaults filebeat modules	2021-05-25 16:40:50 -04:00
m0duspwnens	c3b2e1e8b2	dont show changes	2021-05-25 16:16:57 -04:00
m0duspwnens	e261c197f3	add elasticsearch.auth state to statnalone node	2021-05-25 13:46:18 -04:00
m0duspwnens	747dc77c92	comment out the hackery	2021-05-25 13:23:26 -04:00
m0duspwnens	35cc7b27e9	remove extra quote	2021-05-25 13:12:30 -04:00
William Wernert	67828a86c1	Merge pull request #4289 from Security-Onion-Solutions/foxtrot ... Soup error handling, reorder sensoroni state	2021-05-25 12:42:01 -04:00
m0duspwnens	58ec31d6c7	pass ELASTICAUTH to script	2021-05-25 12:02:41 -04:00
m0duspwnens	6da0b57ce1	fix file.file_exists	2021-05-25 11:55:22 -04:00
m0duspwnens	8d9d5a267a	generate elasticsearch.auth pillar if it doesnt exist	2021-05-25 11:52:58 -04:00
William Wernert	94af55a951	Fix typo	2021-05-25 11:25:37 -04:00
William Wernert	192cec1825	Change how version with dashes are handled by so-docker-prune	2021-05-25 11:25:12 -04:00
Mike Reeves	1e564c2140	Fix zeek jinja	2021-05-25 10:22:36 -04:00
William Wernert	7e008378ba	Replace string with variable, remove unnecessary text	2021-05-25 09:23:44 -04:00
William Wernert	dbc4ffd69a	Fix typo	2021-05-25 09:20:45 -04:00
m0duspwnens	5a1e8d9fe9	update kibana scripts for elastic auth	2021-05-25 08:50:55 -04:00
Mike Reeves	5e5d30a377	Fix 3rd party modules	2021-05-25 08:26:25 -04:00
William Wernert	3bc0def02a	Add failure message to salt-master check	2021-05-24 16:45:05 -04:00
m0duspwnens	bd301880ad	define the default	2021-05-24 16:32:30 -04:00
m0duspwnens	2deb703272	map users_roles and users conf into docker container	2021-05-24 16:30:55 -04:00
Jason Ertel	8c6489a49a	Initial pass at synchronizing users file	2021-05-24 15:48:05 -04:00
m0duspwnens	87609ba5d1	fix elasticcurl if auth is enabled	2021-05-24 15:44:01 -04:00
m0duspwnens	ba3a51387c	set default to False	2021-05-24 15:31:46 -04:00
William Wernert	ffd5bfc480	Force images from automated branches to a very high semver	2021-05-24 15:25:03 -04:00
m0duspwnens	a4226cc39a	use elastic map file	2021-05-24 15:14:05 -04:00
William Wernert	dcb89b704a	Move sensoroni state out of the * block of top.sls ... Resolves #3559	2021-05-24 13:45:12 -04:00
William Wernert	686c7c5a6c	Add exception handling for docker API error to so-docker-prune	2021-05-24 13:26:43 -04:00
Jason Ertel	409eea677d	Continue removal of argon hashing	2021-05-24 11:50:53 -04:00