 Jason Ertel
|
ed9aa5b73f
|
Ensure filecheck is up by checking every minute
|
2022-11-17 10:48:53 -05:00 |
|
|
Jason Ertel
|
7f7e5474ed
|
Add more logging for filecheck monitoring, and ensure scripts are accessible to salt-relay
|
2022-11-17 10:43:05 -05:00 |
|
|
Jason Ertel
|
0ffef75d7b
|
Move background jobs to cron
|
2022-11-17 09:50:41 -05:00 |
|
|
Jason Ertel
|
c572848ece
|
temporarily remove filecheck for debug purposes
|
2022-11-17 08:06:24 -05:00 |
|
|
Jason Ertel
|
7cd5d625d1
|
temporarily remove salt-pipe for debug purposes
|
2022-11-16 20:45:50 -05:00 |
|
|
Jason Ertel
|
4497037442
|
Use bg:True to send cmd to background
|
2022-11-16 20:03:54 -05:00 |
|
|
Jason Ertel
|
35fab05bdd
|
Retry so-user commands if another process is currently using so-user
|
2022-10-27 15:25:08 -04:00 |
|
|
Jason Ertel
|
6347532dd8
|
regex should match entire input against allowed logLevel values
|
2022-10-26 18:48:20 -04:00 |
|
|
Jason Ertel
|
1c23d91a3b
|
retry up to 25 minutes if APT is locked by an unattended upgrade. This is an increase from 8 minutes.
|
2022-10-13 06:57:17 -04:00 |
|
|
Jason Ertel
|
0fdec03fa9
|
use yaml anchor to avoid duplicated annotations
|
2022-09-30 15:15:35 -04:00 |
|
|
Jason Ertel
|
30a23a4cd0
|
Add SOC annotations
|
2022-09-30 15:00:08 -04:00 |
|
|
Jason Ertel
|
5708f3595e
|
Avoid overwriting the file inode since it's mapped into a running container
|
2022-09-27 17:27:28 -04:00 |
|
|
Jason Ertel
|
e519548557
|
add logLevel default and annotation for quick access to enabling debug logs
|
2022-09-27 16:55:28 -04:00 |
|
|
Jason Ertel
|
981371c72f
|
log salt-relay responses for troubleshooting assistance
|
2022-09-27 16:48:47 -04:00 |
|
|
Jason Ertel
|
53b4f01921
|
replace quotes on minion arg
|
2022-09-27 10:54:08 -04:00 |
|
|
Jason Ertel
|
851e44e5fa
|
ensure salt-relay is restarted when SOC is manually restarted
|
2022-09-27 10:31:14 -04:00 |
|
|
Jason Ertel
|
7f7f2c15d0
|
add support for querying active salt jobs (future use)
|
2022-09-27 10:29:21 -04:00 |
|
|
Jason Ertel
|
556ddc2ee4
|
sync in background
|
2022-09-27 09:24:34 -04:00 |
|
|
Jason Ertel
|
8e175b2d3f
|
add manual sync
|
2022-09-27 07:05:04 -04:00 |
|
|
Jason Ertel
|
0ad1a1a262
|
so-user and salt-relay updates for user management
|
2022-09-26 14:57:33 -04:00 |
|
|
Jason Ertel
|
ae6fbab45d
|
refactor sostatus telegraf input script
|
2022-09-19 10:27:20 -04:00 |
|
|
Jason Ertel
|
7d965b5cda
|
Ensure so-status does not get jinjafied
|
2022-09-19 09:17:06 -04:00 |
|
|
Jason Ertel
|
9542a5ada2
|
complete rewrite of so-status
|
2022-09-16 17:46:52 -04:00 |
|
|
Jason Ertel
|
deb19d24b8
|
Always use local docs
|
2022-09-13 14:24:35 -04:00 |
|
|
Jason Ertel
|
d1eb7ef849
|
Always use local docs
|
2022-09-13 14:23:50 -04:00 |
|
|
Jason Ertel
|
d12ff79af0
|
Remove comments to avoid confusing config viewers within SOC
|
2022-09-13 12:08:19 -04:00 |
|
|
Jason Ertel
|
d2fc712400
|
Initial SOC annotations
|
2022-09-13 11:49:19 -04:00 |
|
|
Jason Ertel
|
21c7f940d7
|
Update copyrights
|
2022-09-13 11:48:25 -04:00 |
|
|
Jason Ertel
|
b7bbe7d69f
|
Add copyright notice
|
2022-09-08 10:27:56 -04:00 |
|
|
Jason Ertel
|
193c3fc4cd
|
Add salt relay
|
2022-09-08 10:26:39 -04:00 |
|
|
Jason Ertel
|
df6ba5cbe9
|
initial salt relay script for comms with soc
|
2022-09-07 16:19:16 -04:00 |
|
|
Jason Ertel
|
077053afbd
|
Add content-type header to PUT request, now required in Kratos 0.10.1
|
2022-07-11 13:43:41 -04:00 |
|
|
Jason Ertel
|
4f8bb6049b
|
Future proof the jinja check to ensure the script does not silently overwrite jinja templates
|
2022-07-08 17:30:00 -04:00 |
|
|
Jason Ertel
|
a8e6b26406
|
Remove Jinja from yaml files before parsing
|
2022-07-08 17:07:24 -04:00 |
|
|
Jason Ertel
|
9d43b7ec89
|
Rollback string manipulation in favor of fixed unit tests
|
2022-07-05 16:21:27 -04:00 |
|
|
Jason Ertel
|
f6266b19cc
|
Fix unit test issues
|
2022-07-05 16:20:24 -04:00 |
|
|
Jason Ertel
|
675ace21f5
|
Add gh action for contrib check
|
2022-06-27 11:11:15 -04:00 |
|
|
Jason Ertel
|
ba6f716e4a
|
Avoid failing setup due to retrying while waiting for lock file
|
2022-06-23 06:09:04 -04:00 |
|
|
Jason Ertel
|
e36c33485d
|
Bump version to 2.3.140
|
2022-06-08 09:04:57 -04:00 |
|
|
Jason Ertel
|
210bc556db
|
Add logscan and suricata variants for cloud tests to move from PM into the cloud and help alleviate disk contention
|
2022-05-28 10:29:04 -04:00 |
|
|
Jason Ertel
|
e87e672b9e
|
Add logscan and suricata variants for cloud tests to move from PM into the cloud and help alleviate disk contention
|
2022-05-28 10:28:20 -04:00 |
|
|
Jason Ertel
|
8bb02763dc
|
Exclude pkg upgrade retry error logs from failing setup
|
2022-05-28 08:28:10 -04:00 |
|
|
Jason Ertel
|
c20859f8c3
|
Upgrade to Kratos 0.9.0-alpha.3
|
2022-05-18 17:05:21 -04:00 |
|
|
Jason Ertel
|
b45b6b198b
|
Improved unit test coverage of new analyzers; Utilize localized summaries; Require 100% code coverage on analyzers
|
2022-05-12 16:32:47 -04:00 |
|
|
Jason Ertel
|
35e47c8c3e
|
Add support for analyzers in airgapped environments
|
2022-05-10 16:51:00 -04:00 |
|
|
Jason Ertel
|
31c04aabdd
|
Disable MRU queries on dashboards
|
2022-05-09 15:06:43 -04:00 |
|
|
Jason Ertel
|
3f35dc54d2
|
Disable actions on dashboards group-by tables
|
2022-05-09 11:44:39 -04:00 |
|
|
Jason Ertel
|
0786191fc9
|
Add dashboard ref to soc.json
|
2022-05-06 15:16:27 -04:00 |
|
|
Jason Ertel
|
bee4cf4c52
|
Fix typo in analyzer desc
|
2022-05-06 09:20:03 -04:00 |
|
|
Jason Ertel
|
105c95909c
|
Dashboard queries
|
2022-05-04 19:32:06 -04:00 |
|
|
Jason Ertel
|
890bcd58f9
|
Merge branch 'dev' into kilo
|
2022-05-04 19:25:08 -04:00 |
|
|
Jason Ertel
|
e2145720bd
|
Bump version
|
2022-04-25 12:10:29 -04:00 |
|
|
Jason Ertel
|
d8fdf2b701
|
Merge branch 'dev' into kilo
|
2022-04-22 15:11:24 -04:00 |
|
|
Jason Ertel
|
459d388614
|
Only override nameservers if the first nameserver given is non empty
|
2022-04-22 15:08:56 -04:00 |
|
|
Jason Ertel
|
aeb70dad8f
|
Doc updates
|
2022-04-19 14:31:21 -04:00 |
|
|
Jason Ertel
|
4129cef9fb
|
Add new spamhaus analyzer
|
2022-04-19 12:12:52 -04:00 |
|
|
Jason Ertel
|
0cb73d8f6a
|
Merge branch 'dev' into kilo
|
2022-04-18 11:04:32 -04:00 |
|
|
Jason Ertel
|
159122b52c
|
Merge branch 'dev' into kilo
|
2022-04-18 10:11:37 -04:00 |
|
|
Jason Ertel
|
2d025e944c
|
Add yaml since helpers module uses it
|
2022-04-09 17:48:21 -04:00 |
|
|
Jason Ertel
|
202ca34c6f
|
Remove obsolete source/site pkg dirs
|
2022-04-09 14:36:21 -04:00 |
|
|
Jason Ertel
|
f9568626f2
|
Merge branch 'dev' into kilo
|
2022-04-09 09:02:55 -04:00 |
|
|
Jason Ertel
|
224e30c0ee
|
Change localized table layout
|
2022-04-08 17:31:15 -04:00 |
|
|
Jason Ertel
|
ebcfbaa06d
|
Analyzer improvements
|
2022-04-08 16:57:40 -04:00 |
|
|
Jason Ertel
|
44e318e046
|
Provide CLI feedback for missing input
|
2022-04-07 10:16:44 -04:00 |
|
|
Jason Ertel
|
d8defdd7b0
|
Improve unit test stability
|
2022-04-05 07:36:25 -04:00 |
|
|
Jason Ertel
|
d2fa80e48a
|
Update status codes to match SOC
|
2022-04-05 07:20:23 -04:00 |
|
|
Jason Ertel
|
04eef0d31f
|
Merge branch 'dev' into kilo
|
2022-04-04 15:59:09 -04:00 |
|
|
Jason Ertel
|
7df6833568
|
Add unit tests for Urlhaus; remove placeholder whois analyzer
|
2022-04-04 15:58:53 -04:00 |
|
|
Jason Ertel
|
6e7b2ccedc
|
Upgrade to ES 7.17.2
|
2022-04-01 13:50:57 -04:00 |
|
|
Jason Ertel
|
2dc370c8b6
|
Add source packages to salt state
|
2022-03-31 18:56:38 -04:00 |
|
|
Jason Ertel
|
57dc848792
|
Support analyzer deps
|
2022-03-31 16:48:13 -04:00 |
|
|
Jason Ertel
|
9947ba6e43
|
Support CentOS paths
|
2022-03-31 16:47:56 -04:00 |
|
|
Jason Ertel
|
48fbc2290f
|
Add dep support for analyzers
|
2022-03-31 13:59:35 -04:00 |
|
|
Jason Ertel
|
1aba4da2bb
|
Correct analyzer path
|
2022-03-30 21:01:07 -04:00 |
|
|
Jason Ertel
|
45f511caab
|
Remove extra comma
|
2022-03-30 13:21:35 -04:00 |
|
|
Jason Ertel
|
e667bb1e59
|
merge
|
2022-03-30 10:57:40 -04:00 |
|
|
Jason Ertel
|
b2a96fab7e
|
merge
|
2022-03-29 14:07:20 -04:00 |
|
|
Jason Ertel
|
d2bf6d5618
|
Add build script to help pre-validate analyzers before pushing
|
2022-03-29 14:04:23 -04:00 |
|
|
Jason Ertel
|
484ef4bc31
|
Ensure generated python files are not pushed to version control
|
2022-03-29 13:51:12 -04:00 |
|
|
Jason Ertel
|
cb491630ae
|
Analyzer CI
|
2022-03-29 13:40:56 -04:00 |
|
|
Jason Ertel
|
0a8d24a225
|
Add automated CI for analyzers
|
2022-03-29 13:10:04 -04:00 |
|
|
Jason Ertel
|
c23b87965f
|
Merge branch 'dev' into kilo
|
2022-03-28 15:53:33 -04:00 |
|
|
Jason Ertel
|
deb9b0e5ef
|
Add analyze feature
|
2022-03-28 15:53:24 -04:00 |
|
|
Jason Ertel
|
5a28725def
|
Add assignee to case list
|
2022-03-14 08:45:28 -04:00 |
|
|
Jason Ertel
|
61a3155dfa
|
merge from master
|
2022-03-09 12:22:24 -05:00 |
|
|
Jason Ertel
|
0cec5879bb
|
Gracefully handle situations when another process is using the Kratos DB
|
2022-03-08 10:55:26 -05:00 |
|
|
Jason Ertel
|
d8ca4976be
|
Merge branch 'dev' into kilo
|
2022-03-08 10:41:40 -05:00 |
|
|
Jason Ertel
|
914d81ca07
|
Revert "Gracefully handle situations when another process is using the Kratos DB"
This reverts commit f2865d8b7f.
|
2022-03-08 10:40:20 -05:00 |
|
|
Jason Ertel
|
f2865d8b7f
|
Gracefully handle situations when another process is using the Kratos DB
|
2022-03-08 10:38:05 -05:00 |
|
|
Jason Ertel
|
e59f0d69d9
|
Merge branch 'master' into jertelhf
|
2022-03-02 10:18:14 -05:00 |
|
|
Jason Ertel
|
f147bb33ed
|
Upgrade to ES 7.17.1
|
2022-02-28 18:18:09 -05:00 |
|
|
Jason Ertel
|
166ac0d194
|
Clear out hotfix file
|
2022-02-28 16:01:42 -05:00 |
|
|
Jason Ertel
|
93e9548eaf
|
Require a minimum of 8 characters for passwords, to match Kratos min requirements
|
2022-02-18 15:14:48 -05:00 |
|
|
Jason Ertel
|
fdc63b5816
|
Clarify so-user update usage/help
|
2022-02-18 09:41:09 -05:00 |
|
|
Jason Ertel
|
2c4ba75c0c
|
Merge branch 'dev' into kilo
|
2022-02-15 17:05:24 -05:00 |
|
|
Jason Ertel
|
377fe1987d
|
Merge branch 'dev' into kilo
|
2022-02-15 07:49:26 -05:00 |
|
|
Jason Ertel
|
d97423e9f8
|
Enable MFA support
|
2022-02-15 07:49:12 -05:00 |
|
|
Jason Ertel
|
c5d6f09320
|
Bump to 2.3.110
|
2022-02-01 15:03:41 -05:00 |
|
|
Jason Ertel
|
14c587fca2
|
Add new abbreviated result limit param
|
2022-01-27 15:51:02 -05:00 |
|
|
Jason Ertel
|
ed9b74dc33
|
store related event data as a flattened object blob
|
2022-01-26 12:16:05 -05:00 |
|