Commit Graph

37 Commits

Author SHA1 Message Date
Wes Lambert b6a785395d Add Strelka staging directory for state 2021-03-15 15:42:13 +00:00
Mike Reeves b4b449aa14 Pull in Suricata changes 2021-02-19 11:01:15 -05:00
Wes Lambert 0039877779 Check for port availability for Wazuh and Strelka 2021-01-21 13:29:09 +00:00
m0duspwnens b693373d8d change how we allow or disallow states to be run https://github.com/Security-Onion-Solutions/securityonion/issues/2679 2021-01-20 15:09:53 -05:00
Mike Reeves 2950779d91 Fix stralka rule update 2021-01-13 09:57:12 -05:00
Wes Lambert ac96ded2dc Support setting rule repos via pillar 2020-12-22 15:36:15 +00:00
weslambert 2fee2ca143 Change identifier name to be more descriptive 2020-12-18 15:40:54 -05:00
weslambert 7453626b06 Add identifier 2020-12-18 15:39:52 -05:00
weslambert 1a463bccaf Add cron.absent to remove old cron job if present 2020-12-18 11:25:14 -05:00
weslambert bf76c1b58c Create unprocessed dir and move Zeek extracted files there 2020-12-18 10:52:14 -05:00
m0duspwnens 1fca5e65df redo how containers get added to so-status https://github.com/Security-Onion-Solutions/securityonion/issues/1681 2020-11-10 15:31:47 -05:00
Mike Reeves 112a0b426e Merge branch 'dev' into experimental 2020-09-13 14:54:00 -04:00
Mike Reeves 48d1d0c168 Strelkas Rules Update 2020-09-11 18:24:56 -04:00
m0duspwnens 09cc8ae1fb fail the state if it isnt in top 2020-09-09 16:48:50 -04:00
m0duspwnens a229ae82ce only allow state to run if it is in top for the node 2020-09-02 16:15:52 -04:00
weslambert 000c2abb33 Update timing for so-yara-update 2020-08-26 11:02:33 -04:00
Mike Reeves 24ed92c9dc minio and change to global 2020-08-04 15:54:03 -04:00
Jason Ertel 8f66a27f07 Refactor image repository to a single variable 2020-07-13 18:26:43 -04:00
m0duspwnens 9c2dcd2318 fix reference to master grain 2020-07-09 17:06:44 -04:00
m0duspwnens 3cf31e2460 https://github.com/Security-Onion-Solutions/securityonion/issues/404 2020-07-09 11:27:06 -04:00
Wes Lambert 63c45be388 Update Strelka init for rules 2020-06-25 15:49:58 +00:00
Wes Lambert 52a0ace1b8 Use Strelka rules if enabled 2020-06-24 17:08:58 +00:00
weslambert f3809cb93d Wrap with quotes 2020-05-27 08:31:14 -04:00
Wes Lambert e09027e795 update Strelka cron 2020-05-26 13:00:03 +00:00
Mike Reeves 09e2413695 Remove version hardcode 2020-05-10 17:31:50 -04:00
m0duspwnens 766b56a944 update dockers to 1.2.2 2020-04-23 10:11:26 -04:00
Mike Reeves 4cc2951ac4 Fix the Strelka redis 2020-04-15 17:34:54 -04:00
Mike Reeves 5eed79e87e Fix the Strelka version 2020-04-15 15:38:48 -04:00
Mike Reeves fb09c85386 Change location of strelka dockers 2020-04-15 14:37:37 -04:00
Wes Lambert 17fd32f12d change restart policy for now 2020-04-03 01:07:45 +00:00
Wes Lambert d477d73baa change user 2020-04-03 01:02:46 +00:00
weslambert cc4b1bf936 Add Zeek extracted file sync 2020-04-01 14:19:36 -04:00
weslambert 5173da5a33 Remove restart policy 2020-04-01 13:19:31 -04:00
Wes Lambert 9bbcc185aa change Strelka log location 2020-04-01 12:57:51 +00:00
Wes Lambert 4939884d93 Update Strelka init 2020-03-02 22:15:55 +00:00
Wes Lambert c597dd2fb4 Strelka - Filebeat config 2019-12-18 03:22:30 +00:00
Wes Lambert 88f142664f Strelka - intial config 2019-12-18 03:13:14 +00:00