Commit Graph

1817 Commits

Author SHA1 Message Date
m0duspwnens
693000afa8 remove addtotab templates and move surirulelink - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/749 2020-05-27 12:30:12 -04:00
m0duspwnens
446e0f6f4c Merge remote-tracking branch 'remotes/origin/dev' into issue/749 2020-05-27 10:09:36 -04:00
m0duspwnens
7eb02d2af3 move suri rule symlink 2020-05-27 10:09:23 -04:00
weslambert
f3809cb93d Wrap with quotes 2020-05-27 08:31:14 -04:00
m0duspwnens
1eb6142f11 remove dir creation - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/749 2020-05-26 17:00:29 -04:00
Mike Reeves
4049df8cb4 Merge pull request #774 from Security-Onion-Solutions/feature/packages
Feature/packages
2020-05-26 15:40:30 -04:00
m0duspwnens
e27facc843 ensure /opt/so/saltstack/local/salt/suricata/rules is created 2020-05-26 14:47:16 -04:00
m0duspwnens
413f08f1b9 change mkdirs to makedirs in ssl state 2020-05-26 14:43:15 -04:00
Mike Reeves
21cd66d109 add ntpdate/ntp 2020-05-26 14:05:47 -04:00
Mike Reeves
41935996d4 add ntpdate/ntp 2020-05-26 13:48:36 -04:00
Josh Brower
894bfd47f4 Merge pull request #771 from Security-Onion-Solutions/feature/communityid-hive-pivot
Elasticsearch Ingest fixes
2020-05-26 13:08:40 -04:00
Josh Brower
8723f8785e osquery pipeline fix and fail state if errors 2020-05-26 13:05:56 -04:00
Doug Burks
7a657d1229 add Community ID to default fields in bottom data table in Hunt 2020-05-26 12:58:01 -04:00
Josh Brower
2cb7464086 Add TheHive communityid link 2020-05-26 12:01:58 -04:00
m0duspwnens
fafb469b5c change from default to local - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/749 2020-05-26 11:59:00 -04:00
Mike Reeves
87407c9ace rework common init.sls 2020-05-26 11:21:59 -04:00
Wes Lambert
0e51ab41cf Update ES watermark settings 2020-05-26 14:18:58 +00:00
Wes Lambert
97306d3acd rename indices 2020-05-26 14:05:33 +00:00
Wes Lambert
3eb62287ac update Curator config for index transition 2020-05-26 14:00:16 +00:00
Wes Lambert
330de46249 update SOCtopus config for hostname/ip 2020-05-26 13:19:15 +00:00
Wes Lambert
e09027e795 update Strelka cron 2020-05-26 13:00:03 +00:00
Mike Reeves
31b3563fb3 Fix package versions 2020-05-24 10:56:30 -04:00
Mike Reeves
1c207afb31 Define packages in the common state 2020-05-23 12:00:24 -04:00
Josh Brower
35f3498ffa Merge pull request #760 from Security-Onion-Solutions/feature/ingest-communityid
Ingest pipeline commid fix for conn logs
2020-05-22 17:11:38 -04:00
Josh Brower
56f5fbdf6b Ingest pipeline commid fix for conn logs 2020-05-22 17:11:08 -04:00
m0duspwnens
b24654002b rename salt custom directory to local 2020-05-21 14:53:25 -04:00
Josh Brower
767eda6d60 Merge pull request #754 from Security-Onion-Solutions/feature/ingest-communityid
Feature/ingest communityid
2020-05-21 14:36:08 -04:00
Josh Brower
bff86ea802 zeek.common ingest parser fix 2020-05-21 14:35:25 -04:00
Josh Brower
c74ace89ba Initial support - Ingest community_id 2020-05-21 14:34:00 -04:00
m0duspwnens
d0242c1da6 update references of /opt/so/saltstack to /opt/so/saltstack/default. use var default_salt_dir where appropriate - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/749 2020-05-21 10:54:47 -04:00
m0duspwnens
0a6f0efdc5 Sort so-status output alphabetically - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/747 2020-05-21 09:21:28 -04:00
m0duspwnens
9f5a38c26f add so-filebeat to so-status for eval - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/706 2020-05-21 09:19:24 -04:00
m0duspwnens
d4840d203c fix version lock for wazuh 2020-05-20 11:23:55 -04:00
m0duspwnens
92c2222879 ensure wazuh-agent service is enabled and running 2020-05-19 16:59:43 -04:00
Mike Reeves
0f2369b5cb Fix permissions due to umask issues in Ubuntu 18 2020-05-19 16:31:39 -04:00
Mike Reeves
c045e3f936 remove replicas 2020-05-19 13:57:31 -04:00
Mike Reeves
46762e5ad9 change cortex to 0 replicas 2020-05-19 13:56:59 -04:00
Josh Patterson
07560463de Merge pull request #737 from Security-Onion-Solutions/quickfix/wazuh
https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/695
2020-05-19 13:27:52 -04:00
Doug Burks
064768d07d Fix dce_rpc hunt query #736
https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/736
2020-05-19 11:27:01 -04:00
Josh Brower
10691036e0 Update hive_init 2020-05-19 10:27:46 -04:00
m0duspwnens
4f65d17690 https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/695 2020-05-19 10:14:40 -04:00
Doug Burks
29420da565 Only process zeek.dns.tld if dns.query.name contains a dot #734
https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/734
2020-05-19 10:08:30 -04:00
Mike Reeves
fc4afe6767 Fix Curl statement 2020-05-19 09:58:16 -04:00
Mike Reeves
1d677bb529 Update known issues list 2020-05-19 09:36:36 -04:00
Josh Patterson
8957af0a4d Merge pull request #733 from Security-Onion-Solutions/quickfix/sostatus
removing strelka-backend from strelka so-status map
2020-05-18 17:53:32 -04:00
m0duspwnens
411389b68e removing strelka-backend from strelka so-status map 2020-05-18 17:52:47 -04:00
Josh Patterson
341c70de9e Merge pull request #732 from Security-Onion-Solutions/quickfix/sostatus
add strelka container list for so-status
2020-05-18 17:46:55 -04:00
m0duspwnens
e6bc8f2d26 add strelka container list for so-status 2020-05-18 17:46:14 -04:00
Josh Patterson
d25fbfec84 Merge pull request #731 from Security-Onion-Solutions/quickfix/sostatus
add strelka container list for so-status
2020-05-18 17:39:09 -04:00
m0duspwnens
5638c386db add strelka container list for so-status 2020-05-18 17:36:32 -04:00