m0duspwnens
|
693000afa8
|
remove addtotab templates and move surirulelink - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/749
|
2020-05-27 12:30:12 -04:00 |
|
m0duspwnens
|
446e0f6f4c
|
Merge remote-tracking branch 'remotes/origin/dev' into issue/749
|
2020-05-27 10:09:36 -04:00 |
|
m0duspwnens
|
7eb02d2af3
|
move suri rule symlink
|
2020-05-27 10:09:23 -04:00 |
|
weslambert
|
f3809cb93d
|
Wrap with quotes
|
2020-05-27 08:31:14 -04:00 |
|
m0duspwnens
|
1eb6142f11
|
remove dir creation - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/749
|
2020-05-26 17:00:29 -04:00 |
|
Mike Reeves
|
4049df8cb4
|
Merge pull request #774 from Security-Onion-Solutions/feature/packages
Feature/packages
|
2020-05-26 15:40:30 -04:00 |
|
m0duspwnens
|
e27facc843
|
ensure /opt/so/saltstack/local/salt/suricata/rules is created
|
2020-05-26 14:47:16 -04:00 |
|
m0duspwnens
|
413f08f1b9
|
change mkdirs to makedirs in ssl state
|
2020-05-26 14:43:15 -04:00 |
|
Mike Reeves
|
21cd66d109
|
add ntpdate/ntp
|
2020-05-26 14:05:47 -04:00 |
|
Mike Reeves
|
41935996d4
|
add ntpdate/ntp
|
2020-05-26 13:48:36 -04:00 |
|
Josh Brower
|
894bfd47f4
|
Merge pull request #771 from Security-Onion-Solutions/feature/communityid-hive-pivot
Elasticsearch Ingest fixes
|
2020-05-26 13:08:40 -04:00 |
|
Josh Brower
|
8723f8785e
|
osquery pipeline fix and fail state if errors
|
2020-05-26 13:05:56 -04:00 |
|
Doug Burks
|
7a657d1229
|
add Community ID to default fields in bottom data table in Hunt
|
2020-05-26 12:58:01 -04:00 |
|
Josh Brower
|
2cb7464086
|
Add TheHive communityid link
|
2020-05-26 12:01:58 -04:00 |
|
m0duspwnens
|
fafb469b5c
|
change from default to local - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/749
|
2020-05-26 11:59:00 -04:00 |
|
Mike Reeves
|
87407c9ace
|
rework common init.sls
|
2020-05-26 11:21:59 -04:00 |
|
Wes Lambert
|
0e51ab41cf
|
Update ES watermark settings
|
2020-05-26 14:18:58 +00:00 |
|
Wes Lambert
|
97306d3acd
|
rename indices
|
2020-05-26 14:05:33 +00:00 |
|
Wes Lambert
|
3eb62287ac
|
update Curator config for index transition
|
2020-05-26 14:00:16 +00:00 |
|
Wes Lambert
|
330de46249
|
update SOCtopus config for hostname/ip
|
2020-05-26 13:19:15 +00:00 |
|
Wes Lambert
|
e09027e795
|
update Strelka cron
|
2020-05-26 13:00:03 +00:00 |
|
Mike Reeves
|
31b3563fb3
|
Fix package versions
|
2020-05-24 10:56:30 -04:00 |
|
Mike Reeves
|
1c207afb31
|
Define packages in the common state
|
2020-05-23 12:00:24 -04:00 |
|
Josh Brower
|
35f3498ffa
|
Merge pull request #760 from Security-Onion-Solutions/feature/ingest-communityid
Ingest pipeline commid fix for conn logs
|
2020-05-22 17:11:38 -04:00 |
|
Josh Brower
|
56f5fbdf6b
|
Ingest pipeline commid fix for conn logs
|
2020-05-22 17:11:08 -04:00 |
|
m0duspwnens
|
b24654002b
|
rename salt custom directory to local
|
2020-05-21 14:53:25 -04:00 |
|
Josh Brower
|
767eda6d60
|
Merge pull request #754 from Security-Onion-Solutions/feature/ingest-communityid
Feature/ingest communityid
|
2020-05-21 14:36:08 -04:00 |
|
Josh Brower
|
bff86ea802
|
zeek.common ingest parser fix
|
2020-05-21 14:35:25 -04:00 |
|
Josh Brower
|
c74ace89ba
|
Initial support - Ingest community_id
|
2020-05-21 14:34:00 -04:00 |
|
m0duspwnens
|
d0242c1da6
|
update references of /opt/so/saltstack to /opt/so/saltstack/default. use var default_salt_dir where appropriate - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/749
|
2020-05-21 10:54:47 -04:00 |
|
m0duspwnens
|
0a6f0efdc5
|
Sort so-status output alphabetically - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/747
|
2020-05-21 09:21:28 -04:00 |
|
m0duspwnens
|
9f5a38c26f
|
add so-filebeat to so-status for eval - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/706
|
2020-05-21 09:19:24 -04:00 |
|
m0duspwnens
|
d4840d203c
|
fix version lock for wazuh
|
2020-05-20 11:23:55 -04:00 |
|
m0duspwnens
|
92c2222879
|
ensure wazuh-agent service is enabled and running
|
2020-05-19 16:59:43 -04:00 |
|
Mike Reeves
|
0f2369b5cb
|
Fix permissions due to umask issues in Ubuntu 18
|
2020-05-19 16:31:39 -04:00 |
|
Mike Reeves
|
c045e3f936
|
remove replicas
|
2020-05-19 13:57:31 -04:00 |
|
Mike Reeves
|
46762e5ad9
|
change cortex to 0 replicas
|
2020-05-19 13:56:59 -04:00 |
|
Josh Patterson
|
07560463de
|
Merge pull request #737 from Security-Onion-Solutions/quickfix/wazuh
https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/695
|
2020-05-19 13:27:52 -04:00 |
|
Doug Burks
|
064768d07d
|
Fix dce_rpc hunt query #736
https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/736
|
2020-05-19 11:27:01 -04:00 |
|
Josh Brower
|
10691036e0
|
Update hive_init
|
2020-05-19 10:27:46 -04:00 |
|
m0duspwnens
|
4f65d17690
|
https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/695
|
2020-05-19 10:14:40 -04:00 |
|
Doug Burks
|
29420da565
|
Only process zeek.dns.tld if dns.query.name contains a dot #734
https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/734
|
2020-05-19 10:08:30 -04:00 |
|
Mike Reeves
|
fc4afe6767
|
Fix Curl statement
|
2020-05-19 09:58:16 -04:00 |
|
Mike Reeves
|
1d677bb529
|
Update known issues list
|
2020-05-19 09:36:36 -04:00 |
|
Josh Patterson
|
8957af0a4d
|
Merge pull request #733 from Security-Onion-Solutions/quickfix/sostatus
removing strelka-backend from strelka so-status map
|
2020-05-18 17:53:32 -04:00 |
|
m0duspwnens
|
411389b68e
|
removing strelka-backend from strelka so-status map
|
2020-05-18 17:52:47 -04:00 |
|
Josh Patterson
|
341c70de9e
|
Merge pull request #732 from Security-Onion-Solutions/quickfix/sostatus
add strelka container list for so-status
|
2020-05-18 17:46:55 -04:00 |
|
m0duspwnens
|
e6bc8f2d26
|
add strelka container list for so-status
|
2020-05-18 17:46:14 -04:00 |
|
Josh Patterson
|
d25fbfec84
|
Merge pull request #731 from Security-Onion-Solutions/quickfix/sostatus
add strelka container list for so-status
|
2020-05-18 17:39:09 -04:00 |
|
m0duspwnens
|
5638c386db
|
add strelka container list for so-status
|
2020-05-18 17:36:32 -04:00 |
|