Commit Graph
100 Commits
Author SHA1 Message Date
Jason ErtelandGitHub 5f59ae52d5 Merge pull request #9162 from Security-Onion-Solutions/config
Config
2022-11-17 11:50:35 -05:00
Jason ErtelandGitHub 55f22af758 Merge pull request #9017 from Security-Onion-Solutions/config
Retry so-user commands if another process is currently using so-user
2022-10-27 15:41:37 -04:00
Jason ErtelandGitHub d7b370e31b Merge pull request #9010 from Security-Onion-Solutions/config
regex should match entire input against allowed logLevel values
2022-10-27 13:17:51 -04:00
Jason ErtelandGitHub fd6bea92da Merge pull request #8913 from Security-Onion-Solutions/config
retry up to 25 minutes if APT is locked by an unattended upgrade. This is an increase from 8 minutes.
2022-10-13 07:01:00 -04:00
Jason ErtelandGitHub fe62744c05 Merge pull request #8825 from Security-Onion-Solutions/config
resolve inode issue with soc_users_roles when deleting a user; other minor improvements
2022-09-27 17:38:20 -04:00
Jason ErtelandGitHub 16d24d4bc9 Merge pull request #8822 from Security-Onion-Solutions/config
user management / sync
2022-09-27 11:14:32 -04:00
Jason ErtelandGitHub 21f8b3b61c Merge pull request #8768 from Security-Onion-Solutions/config
refactor sostatus telegraf input script
2022-09-19 10:35:22 -04:00
Jason ErtelandGitHub f2b09c84d4 Merge pull request #8767 from Security-Onion-Solutions/config
Config
2022-09-19 09:18:10 -04:00
Jason ErtelandGitHub b4add5ebb3 Merge pull request #8766 from Security-Onion-Solutions/config
complete rewrite of so-status
2022-09-19 07:40:51 -04:00
Jason ErtelandGitHub 0d32cc38d6 Merge pull request #8733 from Security-Onion-Solutions/config
Always use local docs
2022-09-13 14:40:10 -04:00
Jason ErtelandGitHub 810d89eb6c Merge pull request #8731 from Security-Onion-Solutions/config
Remove comments to avoid confusing config viewers within SOC
2022-09-13 12:16:38 -04:00
Jason ErtelandGitHub 8c5cba58aa Merge pull request #8730 from Security-Onion-Solutions/config
Config
2022-09-13 11:52:05 -04:00
Jason ErtelandGitHub cfb3893c2b Merge pull request #8694 from Security-Onion-Solutions/salt-relay
Salt relay
2022-09-08 10:31:28 -04:00
Jason ErtelandGitHub 15124b6ad7 Merge pull request #8271 from Security-Onion-Solutions/kilo
Add content-type header to PUT request, now required in Kratos 0.10.1
2022-07-11 13:47:28 -04:00
Jason ErtelandGitHub f28c6d590a Merge pull request #8263 from Security-Onion-Solutions/kilo
Remove Jinja from yaml files before parsing
2022-07-08 20:32:22 -04:00
Jason ErtelandGitHub ac68fa822b Merge pull request #8200 from Security-Onion-Solutions/contrib
Add gh action for contrib check
2022-06-27 11:25:10 -04:00
Jason ErtelandGitHub 2e123b7a4f Merge pull request #8175 from Security-Onion-Solutions/kilo
Avoid failing setup due to retrying while waiting for lock file
2022-06-23 08:16:39 -04:00
Jason ErtelandGitHub e405750d26 Merge pull request #8095 from Security-Onion-Solutions/kilo
Bump version to 2.3.140
2022-06-08 09:07:56 -04:00
Jason ErtelandGitHub a70da41f20 Merge pull request #8032 from Security-Onion-Solutions/kilo
Exclude pkg upgrade retry error logs from failing setup
2022-05-28 08:34:40 -04:00
Jason ErtelandGitHub 88f17f037e Merge pull request #7982 from Security-Onion-Solutions/kilo
Upgrade to Kratos 0.9.0-alpha.3
2022-05-19 13:28:58 -04:00
Jason ErtelandGitHub c95bafd521 Merge pull request #7969 from Security-Onion-Solutions/fix/helpers-analyzers
Only import yaml module when config is loaded
2022-05-18 07:15:32 -04:00
Jason ErtelandGitHub 685789de33 Merge pull request #7936 from Security-Onion-Solutions/kilo
Improved unit test coverage of new analyzers; Utilize localized summa…
2022-05-12 16:47:18 -04:00
Jason ErtelandGitHub 60b55acd6f Merge pull request #7926 from Security-Onion-Solutions/kilo
Add support for analyzers in airgapped environments
2022-05-10 17:12:18 -04:00
Jason ErtelandGitHub 91a7f25d3a Corrected brand name capitalization 2022-05-10 09:39:19 -04:00
Jason ErtelandGitHub e19635e44a Merge pull request #7920 from Security-Onion-Solutions/kilo
Disable MRU queries on dashboards
2022-05-09 15:08:55 -04:00
Jason ErtelandGitHub dc209a37cd Merge pull request #7916 from Security-Onion-Solutions/kilo
Disable actions on dashboards group-by tables
2022-05-09 11:52:22 -04:00
Jason ErtelandGitHub 0e64a9e5c3 Merge pull request #7912 from Security-Onion-Solutions/kilo
Add dashboard ref to soc.json
2022-05-06 15:18:05 -04:00
Jason ErtelandGitHub 60763c38db Merge pull request #7911 from Security-Onion-Solutions/kilo
Analyzers + Dashboards
2022-05-06 13:50:54 -04:00
Jason ErtelandGitHub 71a86b0a3c Merge pull request #7856 from Security-Onion-Solutions/bumpver
Bump version
2022-04-25 13:01:19 -04:00
Jason ErtelandGitHub 13c9af5a5a Clearing hotfix 2022-04-08 10:23:44 -04:00
Jason ErtelandGitHub cedb23f4bc Merge pull request #7689 from Security-Onion-Solutions/esup
Upgrade to ES 7.17.2
2022-04-01 13:57:04 -04:00
Jason ErtelandGitHub 408f9d6695 Update .gitleaks.toml 2022-03-15 09:53:27 -04:00
Jason ErtelandGitHub b810f14428 Update .gitleaks.toml 2022-03-15 09:53:11 -04:00
Jason ErtelandGitHub cec9cba40e Create .gitleaks.toml 2022-03-15 09:47:57 -04:00
Jason ErtelandGitHub 8ebeeb497f add configuration to override leak detector defaults 2022-03-15 09:43:09 -04:00
Jason ErtelandGitHub 16f673d956 Merge pull request #7541 from Security-Onion-Solutions/kilo
Add assignee field to case list
2022-03-14 08:49:46 -04:00
Jason ErtelandGitHub f64da9632f Merge pull request #7461 from Security-Onion-Solutions/kilo
Gracefully handle situations where another process is using the Kratos DB while so-user executes
2022-03-08 11:02:14 -05:00
Jason ErtelandGitHub 73b2a36e89 Merge pull request #7365 from Security-Onion-Solutions/kilo
Upgrade to ES 7.17.1
2022-02-28 18:26:31 -05:00
Jason ErtelandGitHub 04a99a0adc Merge pull request #7361 from Security-Onion-Solutions/kilo
Clear out hotfix file
2022-02-28 16:04:30 -05:00
Jason ErtelandGitHub 380f0ef93a Merge pull request #7256 from Security-Onion-Solutions/kilo
Update password len requirements; clarify password update help
2022-02-18 15:19:08 -05:00
Jason ErtelandGitHub cb9712aa08 Merge pull request #7217 from Security-Onion-Solutions/kilo
MFA
2022-02-16 16:47:40 -05:00
Jason ErtelandGitHub 1bac031975 Merge pull request #7058 from Security-Onion-Solutions/kilo
Bump to 2.3.110
2022-02-01 15:04:48 -05:00
Jason ErtelandGitHub ac21bd1e29 Merge pull request #7009 from Security-Onion-Solutions/kilo
Add new abbreviated result limit param
2022-01-27 15:55:42 -05:00
Jason ErtelandGitHub c2636036ee Merge pull request #6995 from Security-Onion-Solutions/kilo
store related event data as a flattened object blob
2022-01-26 12:21:02 -05:00
Jason ErtelandGitHub 4ab7a6a079 Merge pull request #6967 from Security-Onion-Solutions/kilo
Copyright year and format update
2022-01-24 10:39:31 -05:00
Jason ErtelandGitHub e984b0b9c4 Merge pull request #6921 from Security-Onion-Solutions/kilo
remove unused fields object from related case schema
2022-01-19 14:42:05 -05:00
Jason ErtelandGitHub a63787daba Merge pull request #6864 from Security-Onion-Solutions/kilo
Add default queries for cases to show user's assigned cases
2022-01-13 17:15:02 -05:00
Jason ErtelandGitHub db04646735 Merge pull request #6794 from Security-Onion-Solutions/kilo
Update field mappings based on Wes' feedback
2022-01-07 16:03:05 -05:00
Jason ErtelandGitHub a4f01d4412 Merge pull request #6792 from Security-Onion-Solutions/kilo
Add case exclusion toggle to Hunt to avoid hunt results getting case …
2022-01-07 13:02:27 -05:00
Jason ErtelandGitHub 8cf7ea8b87 Merge pull request #6772 from Security-Onion-Solutions/kilo
Prevent PCAP action from showing up outside of hunt/alerts
2022-01-05 19:15:02 -05:00
Jason ErtelandGitHub 89415b12ce Merge pull request #6762 from Security-Onion-Solutions/kilo
Switch soc.json to use lowercase labels in default queries; Also enab…
2022-01-05 09:59:39 -05:00
Jason ErtelandGitHub 1d136b611a Merge pull request #6723 from Security-Onion-Solutions/kilo
Uniform presets
2021-12-29 16:49:41 -05:00
Jason ErtelandGitHub 74dbc4bf67 Merge pull request #6720 from Security-Onion-Solutions/kilo
Add case template to eval install types; also improve clarity of case queries
2021-12-29 11:41:06 -05:00
Jason ErtelandGitHub d4f3615cae Merge pull request #6717 from Security-Onion-Solutions/kilo
Support CCS in CM
2021-12-29 09:12:13 -05:00
Jason ErtelandGitHub 0072ae253b Merge pull request #6705 from Security-Onion-Solutions/kilo
Initial CM Impl; Improve so-user script
2021-12-28 08:36:59 -05:00
Jason ErtelandGitHub 2f88f08be2 Merge pull request #6649 from Security-Onion-Solutions/2.3.91-merge
2.3.91 merge
2021-12-21 09:39:14 -05:00
Jason ErtelandGitHub 8ec671422f Merge pull request #6593 from Security-Onion-Solutions/esup
Finish upgrade of ES to 7.16.1
2021-12-16 07:59:34 -05:00
Jason ErtelandGitHub ffa8ca57a7 Merge pull request #6579 from Security-Onion-Solutions/unhotfix
Remove some previous hotfix code
2021-12-15 12:34:00 -05:00
Jason ErtelandGitHub 83fab42b6e Merge pull request #6433 from Security-Onion-Solutions/kilo
Reign in the Wazuh port check to only complain if a non-Docker process is listening on 55000.
2021-12-02 09:39:14 -05:00
Jason ErtelandGitHub 1272de3058 Merge pull request #6378 from Security-Onion-Solutions/TOoSmOotH-patch-2
bump version to 2.3.100
2021-11-29 09:57:29 -05:00
Jason ErtelandGitHub 31ffd6c4ec Merge pull request #6339 from Security-Onion-Solutions/kilo
Merge 2.3.90 WAZUH hotfix into dev
2021-11-23 19:33:18 -05:00
Jason ErtelandGitHub 273842eb43 Merge pull request #6328 from Security-Onion-Solutions/kilo
WAZUH hotfix
2021-11-23 12:06:34 -05:00
Jason ErtelandGitHub 9737a4088c Merge pull request #6327 from Security-Onion-Solutions/TOoSmOotH-patch-1
Update HOTFIX
2021-11-23 09:25:43 -05:00
Jason ErtelandGitHub 9c0e8cedba Merge pull request #6279 from Security-Onion-Solutions/syncesusers_so-kratos
restart kratos if failure
2021-11-18 10:49:12 -05:00
Jason ErtelandGitHub 96f1f0174b Merge pull request #6275 from Security-Onion-Solutions/syncesusers_so-kratos
break kratos state out from soc state
2021-11-18 09:13:10 -05:00
Jason ErtelandGitHub 83bd314a63 Merge pull request #6186 from Security-Onion-Solutions/kilo
Upgrade to ES 7.15.2
2021-11-10 14:06:08 -05:00
Jason ErtelandGitHub c469d12a49 Merge pull request #6002 from Security-Onion-Solutions/kilo
Update whiptail links to use latest docs
2021-10-25 15:08:31 -04:00
Jason ErtelandGitHub e9a44c6e1b Merge pull request #5662 from Security-Onion-Solutions/TOoSmOotH-patch-1
Update README.md
2021-09-27 09:28:46 -04:00
Jason ErtelandGitHub 9eb6f5942e Merge pull request #5623 from Security-Onion-Solutions/kilo
Prevent email addresses from having uppercase characters
2021-09-22 09:10:38 -04:00
Jason ErtelandGitHub 3924b8f5db Merge pull request #5586 from Security-Onion-Solutions/kilo
Ensure identity ID parm is quoted now that it doesn't have embedded quotes in the value
2021-09-20 13:56:30 -04:00
Jason ErtelandGitHub a3f62c81c3 Merge pull request #5577 from Security-Onion-Solutions/kilo
Continuation of auth enhancements
2021-09-20 06:30:36 -04:00
Jason ErtelandGitHub 4e2d5018a2 Merge pull request #5455 from Security-Onion-Solutions/kilo
Consolidate whiptail screens
2021-09-09 14:57:28 -04:00
Jason ErtelandGitHub 19a02baa7c Merge pull request #5425 from Security-Onion-Solutions/kilo
Auth enhancements
2021-09-07 13:10:36 -04:00
Jason ErtelandGitHub 6dfc943e8c Merge pull request #5382 from Security-Onion-Solutions/kilo
Correct invalid password message
2021-09-02 07:15:09 -04:00
Jason ErtelandGitHub e39de8c7bc Merge pull request #5089 from Ron89/feature/thehive-userupdate
add user password update command
2021-08-15 09:36:35 -04:00
Jason ErtelandGitHub 84fdc1e690 Merge pull request #5057 from Security-Onion-Solutions/bravo
Several Suricata things
2021-08-04 12:26:11 -04:00
Jason ErtelandGitHub 724f7d4f3d Merge pull request #5036 from Security-Onion-Solutions/kilo
Condense cloud automations
2021-08-02 18:04:05 -04:00
Jason ErtelandGitHub c524b54af1 Merge pull request #4988 from Security-Onion-Solutions/mkr2361
2.3.61-MSEARCH
2021-07-29 11:10:41 -04:00
Jason ErtelandGitHub 28c5c02ef1 Merge pull request #4958 from Security-Onion-Solutions/issue/4024
https://github.com/Security-Onion-Solutions/securityonion/issues/4024
2021-07-27 16:21:13 -04:00
Jason ErtelandGitHub 356b623148 Merge pull request #4937 from Security-Onion-Solutions/kilo
Add Azure automations
2021-07-26 16:13:57 -04:00
Jason ErtelandGitHub fcde5c3c18 Merge pull request #4865 from Security-Onion-Solutions/kilo
Merge curator hotfix into dev
2021-07-20 11:47:49 -04:00
Jason ErtelandGitHub bab18275bc Merge pull request #4836 from Security-Onion-Solutions/fix/airgap-release-notes
FIX: Airgap link to Release Notes #4685
2021-07-17 11:05:33 -04:00
Jason ErtelandGitHub 7f9d0b59b8 Merge pull request #4808 from Security-Onion-Solutions/kilo
Merge hotfix from master into dev; add `so-firewall apply` feature to dev
2021-07-14 15:49:12 -04:00
Jason ErtelandGitHub 1dd81b6d49 Merge pull request #4790 from Security-Onion-Solutions/agsoupupdate
Remove old airgap scripts
2021-07-13 15:45:45 -04:00
Jason ErtelandGitHub e23f7cd3e7 Merge pull request #4766 from Security-Onion-Solutions/kilo
Bump version to 2.3.70
2021-07-10 13:01:54 -04:00
Jason ErtelandGitHub 8c15fa1627 Merge pull request #4758 from Security-Onion-Solutions/kilo
Upgrade to ES 7.13.3; Use nginx reverse proxy for access to Playbook and Soctopus
2021-07-09 12:40:33 -04:00
Jason ErtelandGitHub a43bdd9aad Merge pull request #4723 from Security-Onion-Solutions/dev
HEAVYNODE_REDIS hotfix
2021-07-08 11:42:22 -04:00
Jason ErtelandGitHub c4293c6119 Merge pull request #4724 from Security-Onion-Solutions/kilo
Merge master into dev via kilo
2021-07-07 07:21:21 -04:00
Jason ErtelandGitHub 857ec70abb Merge pull request #4639 from Security-Onion-Solutions/issue/4609
grafana dashboards with trends
2021-06-29 22:23:31 -04:00
Jason ErtelandGitHub b64749c9d7 Merge pull request #4630 from Security-Onion-Solutions/dougburks-patch-1
Move salt lines after shebang
2021-06-29 13:33:00 -04:00
Jason ErtelandGitHub 95c7a7e9de Merge pull request #4629 from Security-Onion-Solutions/influxdb_cqs
Influxdb cqs
2021-06-29 10:01:07 -04:00
Jason ErtelandGitHub 8867840215 Merge pull request #4628 from Security-Onion-Solutions/influxdb_cqs
Influxdb cqs
2021-06-28 17:10:27 -04:00
Jason ErtelandGitHub 6d2761b155 Merge pull request #4625 from Security-Onion-Solutions/foxtrot
Add Elasticsearch and Kibana to list of services that use webuser creds
2021-06-25 15:58:56 -04:00
Jason ErtelandGitHub 403d10cc75 Merge pull request #4611 from Security-Onion-Solutions/airsoup
Move up script verification
2021-06-24 10:05:05 -04:00
Jason ErtelandGitHub 8f9d1b99e2 Merge pull request #4610 from Security-Onion-Solutions/airsoup
Fix airgap check
2021-06-24 09:51:47 -04:00
Jason ErtelandGitHub 5189f38766 Merge pull request #4601 from Security-Onion-Solutions/kilo
Elastic auth related adjustments; Soup error handling corrections, ES pipeline load improvements
2021-06-23 14:46:05 -04:00
Jason ErtelandGitHub d16febcae1 Merge pull request #4591 from Security-Onion-Solutions/kilo
Require either true | false in parameter to so-elastic-auth and ensur…
2021-06-22 15:31:48 -04:00
Jason ErtelandGitHub bc80ef9a80 Merge pull request #4590 from Security-Onion-Solutions/kilo
only attempt to upgrade salt on minions if the minion count it > 1
2021-06-22 11:36:37 -04:00
Jason ErtelandGitHub 914e635b4a Merge pull request #4589 from Security-Onion-Solutions/TOoSmOotH-patch-1
Fix Retry Spam
2021-06-22 10:15:39 -04:00
Jason ErtelandGitHub 2ca8da0710 Merge pull request #4585 from Security-Onion-Solutions/kilo
Kilo
2021-06-22 08:38:39 -04:00