111 Commits

Author	SHA1	Message	Date
m0duspwnens	a3b97b40ba	enabled/disable soctopus in ui	2023-05-11 13:57:08 -04:00
m0duspwnens	03e7636a18	include nginx.config in soctopus	2023-05-11 13:19:16 -04:00
Mike Reeves	cbd1c05929	Sbin Changes	2023-05-04 10:36:03 -04:00
Mike Reeves	e60e21d9ff	Move files out of common	2023-05-02 09:40:02 -04:00
Mike Reeves	64904406b6	Adjust annotations	2023-03-21 08:41:48 -04:00
Mike Reeves	bc7261acfe	Adjust patch annotations	2023-03-20 20:16:43 -04:00
Mike Reeves	1289500e03	unfix playbook fix	2023-02-24 09:55:49 -05:00
m0duspwnens	a37f0fd0c0	rename sosbridge to sobridge	2023-02-03 10:07:07 -05:00
m0duspwnens	6033e9a0de	use port_bindings from docker defaults in docker states	2023-01-13 10:15:10 -05:00
m0duspwnens	24876eecd9	change refs from sosnet to sosbridge	2022-12-22 14:02:40 -05:00
Mike Reeves	591616fe5b	Add statics to all containers	2022-11-15 11:05:17 -05:00
m0duspwnens	eed3746ebc	fix some globals	2022-10-12 13:39:37 -04:00
m0duspwnens	b526532ab6	use global vars in states	2022-10-11 11:57:15 -04:00
Mike Reeves	2bd9dd80e2	Move In Day	2022-09-07 09:06:25 -04:00
Josh Brower	43cb78a6a8	Upgrade Navigator	2022-05-27 14:21:11 -04:00
Mike Reeves	9c80ff4f65	Remove hive from more files	2022-03-15 09:37:58 -04:00
m0duspwnens	9b2459d8ba	quote ES_PASS in SOCtopus.conf and remove % from random pw	2022-01-20 10:52:48 -05:00
m0duspwnens	7ebba1f325	use show_changes: False to prevent es pw from being shown when running the state	2022-01-19 12:11:38 -05:00
m0duspwnens	d7e5377a44	more requires	2021-10-22 16:46:45 -04:00
Josh Brower	aa420b914b	Initial version so-playbook-import	2021-08-20 16:27:09 -04:00
Jason Ertel	101b835cf6	Remove unused mode	2021-06-18 14:34:42 -04:00
Jason Ertel	b294cee278	Remove passwords from soctopus templates since these are the basis for elastalert rules, which will use the user/pass at the elastalert global config level	2021-06-17 15:53:07 -04:00
Jason Ertel	afe7ddb480	Remove passwords from soctopus templates since these are the basis for elastalert rules, which will use the user/pass at the elastalert global config level	2021-06-17 15:51:53 -04:00
Jason Ertel	2d34208269	Elastic auth: Fun with Salt	2021-06-16 17:52:22 -04:00
Jason Ertel	09fbb045a1	If ES auth disabled ensure user/pass are blank	2021-06-16 09:59:57 -04:00
Jason Ertel	dd8eb29a18	Continue merge of ECS into Elastic Auth	2021-06-15 09:11:58 -04:00
Jason Ertel	3891ca2929	Use correct mode param to file.recurse	2021-06-14 15:46:25 -04:00
Jason Ertel	62187807f0	Specify elastic creds for playbook alert templates	2021-06-14 14:08:14 -04:00
Jason Ertel	901242f7e9	remove extra parenthesis	2021-06-02 16:23:45 -04:00
Jason Ertel	20e896cacf	Update all configs to pass user/pass to ES	2021-06-02 12:17:15 -04:00
Wes Lambert	f61bf73f97	Remove ESUSER/ESPASS for now to prevent issues with attempting Elastic Auth when connecting to ES.	2021-04-15 11:59:34 +00:00
Mike Reeves	bfd05a8cfc	Change to https for elastic connections	2021-03-02 11:32:29 -05:00
m0duspwnens	b693373d8d	change how we allow or disallow states to be run https://github.com/Security-Onion-Solutions/securityonion/issues/2679	2021-01-20 15:09:53 -05:00
Jason Ertel	13f0ddabfc	Use manager internal IP for intra-service comms	2020-12-30 12:02:42 -05:00
m0duspwnens	1fca5e65df	redo how containers get added to so-status https://github.com/Security-Onion-Solutions/securityonion/issues/1681	2020-11-10 15:31:47 -05:00
William Wernert	3abd1c9f16	[fix] Configure soctopus to use url_base	2020-10-28 16:08:19 -04:00
Josh Brower	8a78485906	Config Playbook SOC Alerts	2020-10-04 21:35:42 -04:00
William Wernert	39e14b3910	Merge branch 'dev' into feature/generate-playbook-api-key	2020-10-02 08:39:09 -04:00
Wes Lambert	eced18c3cc	Add SOC url for api integration	2020-10-01 20:29:28 +00:00
William Wernert	11ae904100	Quiet script output + fix pillar value	2020-09-30 19:46:18 -04:00
William Wernert	8e80b41ca9	Remove Automation user from sql, gen user + store api key	2020-09-30 16:32:43 -04:00
Jason Ertel	1454201505	Disable thehivealerter	2020-09-30 15:26:29 -04:00
Jason Ertel	3af6e9e1fe	Remove mount point for SOCtopus generated playbook rules to avoid them activating and sending alerts to TheHive	2020-09-30 15:14:45 -04:00
Wes Lambert	c62acf5e4e	Add initial implmentation of SOCtopus pillar	2020-09-30 14:24:15 +00:00
Mike Reeves	112a0b426e	Merge branch 'dev' into experimental	2020-09-13 14:54:00 -04:00
Mike Reeves	48d1d0c168	Strelkas Rules Update	2020-09-11 18:24:56 -04:00
m0duspwnens	09cc8ae1fb	fail the state if it isnt in top	2020-09-09 16:48:50 -04:00
m0duspwnens	01c9f7b2ae	merge with dev and resolve conflicts	2020-09-09 16:23:36 -04:00
Josh Brower	39cc7151a5	Update SOCtopus.conf	2020-09-04 14:14:53 -04:00
m0duspwnens	a229ae82ce	only allow state to run if it is in top for the node	2020-09-02 16:15:52 -04:00