CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 09:12:45 +01:00
Code Issues Packages Projects Releases Wiki Activity
11,036 Commits 24 Branches 119 Tags
66f9a064585e74b642ac6f448d77dd9ac9eb5239
Commit Graph

11036 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
weslambert
66f9a06458 Merge pull request #9566 from Security-Onion-Solutions/fix/elastic_fleet_integration_policy_load 
Fix Zeek import policies and remove unnecessary dash in RITAENABLED statement
 2023-01-11 16:17:40 -05:00
Wes
0e437f84e7 Add back echo statement to print the import policy being loaded 2023-01-11 21:13:30 +00:00
Wes
ea01e68846 Fix Zeek import policies and remove unnecessary dash in RITAENABLED statement 2023-01-11 21:01:31 +00:00
Josh Patterson
add71cbdee Merge pull request #9565 from Security-Onion-Solutions/2.4/firewall 
2.4/firewall
 2023-01-11 15:04:25 -05:00
Mike Reeves
60d476457a Merge pull request #9564 from Security-Onion-Solutions/TOoSmOotH-patch-5 
Update 0900_input_redis.conf.jinja
 2023-01-11 14:54:40 -05:00
m0duspwnens
80f65fcd62 remove 514/tcp from filebeat for now 2023-01-11 14:54:05 -05:00
Mike Reeves
66924b63a7 Update 9999_output_redis.conf.jinja 2023-01-11 14:53:16 -05:00
Mike Reeves
bdaed849ea Update 0900_input_redis.conf.jinja 2023-01-11 14:52:32 -05:00
m0duspwnens
0d45c1583e add so-filebeat docker container ports and add to standalone 2023-01-11 14:48:20 -05:00
m0duspwnens
81e07997f0 add so-elastic-fleet docker container ports and add to standalone 2023-01-11 14:28:35 -05:00
Mike Reeves
4923fb1c35 Merge pull request #9563 from Security-Onion-Solutions/mkr24 
Optimize reinstall process
 2023-01-11 12:44:52 -05:00
Mike Reeves
8fa8b89d9c Fix reinstall logic 2023-01-11 12:43:22 -05:00
Mike Reeves
bab010a109 Fix reinstall logic 2023-01-11 12:40:18 -05:00
Mike Reeves
c07821a612 Fix reinstall logic 2023-01-11 12:32:43 -05:00
weslambert
acad7acc4a Merge pull request #9562 from Security-Onion-Solutions/fix/elastic_agent_integration_policy_load_suricata_import 
Move Suricata import policy definition so that it does not get caught in the for loop for Zeek policies
 2023-01-11 12:27:37 -05:00
Mike Reeves
b36f1bc79e Fix reinstall logic 2023-01-11 12:26:50 -05:00
weslambert
4391c22335 Move Suricata import policy definition so that it does not get caught in the for loop for Zeek policies 2023-01-11 12:23:50 -05:00
weslambert
39d1f07fab Merge pull request #9561 from Security-Onion-Solutions/fix/filebeat_remove_module_setup 
Remove pipeline.load from top.sls so that Filebeat module loading is not attempted
 2023-01-11 12:21:39 -05:00
Mike Reeves
35e0a78cad Fix reinstall logic 2023-01-11 12:20:57 -05:00
weslambert
b3e0183e39 Remove pipeline.load from top.sls so that Filebeat module loading is not attempted 2023-01-11 12:19:06 -05:00
Mike Reeves
708ba13721 Fix reinstall logic 2023-01-11 12:18:02 -05:00
Mike Reeves
eee433e8c4 Fix reinstall logic 2023-01-11 12:17:13 -05:00
Mike Reeves
cd57ff9820 Fix reinstall logic 2023-01-11 12:16:18 -05:00
Mike Reeves
6d1e6fc358 Fix reinstall logic 2023-01-11 12:15:21 -05:00
Mike Reeves
0531d369aa Fix reinstall logic 2023-01-11 11:09:06 -05:00
Mike Reeves
55911ef649 Fix reinstall logic 2023-01-11 11:05:01 -05:00
weslambert
355953427c Merge pull request #9553 from Security-Onion-Solutions/feature/filebeat_to_elastic_agent_conversion 
Initial Conversion of Filebeat Inputs to Elastic Agent Inputs
 2023-01-11 09:22:40 -05:00
Wes
52b620b137 Add additional conditional logic for Filebeat and disable Filebeat 2023-01-11 14:10:11 +00:00
Wes
33e2affb1d Remove newlines from end of Syslog processor definitions 2023-01-11 14:08:28 +00:00
Wes
c3b83f1fc8 Update template settings to use data streams 2023-01-11 14:03:11 +00:00
Wes
5062dd2873 Suricata Elasticsearch ingest node pipeline changes - set 'alert' dataset 2023-01-11 14:02:09 +00:00
Wes
2e886d0c55 Remove data_index_name processor since we are using data streams 2023-01-11 13:58:38 +00:00
Wes
5d86edeed4 Modify Logstash Elastic Agent output to accomodate for events with and without 'metadata.pipeline' 2023-01-11 13:57:32 +00:00
Wes
caf0ea6b53 Add Elastic Agent policy view script 2023-01-11 13:56:21 +00:00
Wes
a146f1134e Add Elastic Agent utility scripts 2023-01-11 13:54:42 +00:00
Mike Reeves
7cecc910d5 Merge pull request #9458 from Security-Onion-Solutions/2.4/firewall 
2.4/firewall
 2023-01-11 08:49:15 -05:00
Doug Burks
668fe10fc0 Merge pull request #9552 from Security-Onion-Solutions/fix/import-unnecessary-processes 
Prevent unnecessary processes in Import Mode
 2023-01-11 08:07:40 -05:00
m0duspwnens
76fff1b1e0 add logstash ports 2023-01-10 17:02:54 -05:00
Josh Patterson
5993d06896 Merge pull request #9548 from Security-Onion-Solutions/2.4minefunctionsconf 
Update so-functions
 2023-01-10 16:58:09 -05:00
Josh Patterson
64af393f40 Update so-functions 
change MAININT to MNIC
 2023-01-10 16:57:17 -05:00
Doug Burks
c15db73561 Avoid unnecessary Zeek processes in Import Mode 2023-01-10 16:48:47 -05:00
Doug Burks
554754421c Avoid unecessary Suricata processes in Import Mode 2023-01-10 16:48:06 -05:00
Doug Burks
322efa304a Avoid unnecessary processes in Import Mode 2023-01-10 16:47:18 -05:00
Mike Reeves
9995d06626 Merge branch '2.4/firewall' of https://github.com/Security-Onion-Solutions/securityonion into 2.4/firewall 2023-01-10 16:09:04 -05:00
Mike Reeves
ab3a7abcc7 run restore each time 2023-01-10 16:08:44 -05:00
Josh Patterson
f039ecb5ce Merge pull request #9547 from Security-Onion-Solutions/2.4/dev 
2.4/dev
 2023-01-10 13:42:44 -05:00
Mike Reeves
38962520ac Merge pull request #9546 from Security-Onion-Solutions/2.4minefunctionsconf 
Update so-functions
 2023-01-10 13:39:56 -05:00
Josh Patterson
0151830c85 Update so-functions 2023-01-10 13:37:56 -05:00
Mike Reeves
85978180c2 Merge pull request #9545 from Security-Onion-Solutions/revert-9544-2.4createrepoinstall 
Revert "ensure yum-utils and createrepo are installed from so remote repo"
 2023-01-10 13:13:31 -05:00
Mike Reeves
d3b8fbaafc Revert "ensure yum-utils and createrepo are installed from so remote repo" 2023-01-10 13:13:13 -05:00