Commit Graph

3176 Commits

Author SHA1 Message Date
weslambert
59ece8fd29 Merge pull request #699 from Security-Onion-Solutions/fix/dce_rpc_parsing
update DCE/RPC parsing
2020-05-15 14:20:37 -04:00
Wes Lambert
5d5f5cf105 update DCE/RPC parsing 2020-05-15 18:19:05 +00:00
Mike Reeves
7e1016ff07 Update firewall rules to allow minions to connect 2020-05-15 13:59:07 -04:00
Mike Reeves
10896c1add Update Release Notes 2020-05-15 13:41:51 -04:00
m0duspwnens
2f566bf6d7 add so-standalone to agent/wazuh-register-agent 2020-05-15 13:25:31 -04:00
m0duspwnens
1a157eb6a5 add so-standalone to agent/ossec.conf 2020-05-15 13:23:58 -04:00
m0duspwnens
9c7481a0c7 add so-status map for standalone 2020-05-15 13:21:05 -04:00
Mike Reeves
d04f58a27e Update README.md 2020-05-15 13:10:52 -04:00
William Wernert
2f4ce40095 [fix] Change verbiage to indicate the master vs open is only for OS packages 2020-05-15 11:40:37 -04:00
William Wernert
692d1d72a3 [fix] Change verbiage to indicate the master vs open is only for OS packages 2020-05-15 11:39:59 -04:00
William Wernert
c9614f9baf [fix] Only add user to SOC on masters 2020-05-15 11:20:33 -04:00
m0duspwnens
74290eca2a change = to in - https://github.com/Security-Onion-Solutions/securityonion-saltstack.git 2020-05-15 11:20:06 -04:00
m0duspwnens
f3a2c1fb4d add missing ] - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/140 2020-05-15 11:08:10 -04:00
m0duspwnens
f4db261baf change elif - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/140 2020-05-15 10:57:25 -04:00
m0duspwnens
fdae84bb74 remove = in - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/140 2020-05-15 10:56:16 -04:00
William Wernert
cfec4eb5a2 Merge branch 'dev' of github.com:Security-Onion-Solutions/securityonion-saltstack into dev 2020-05-15 10:52:33 -04:00
William Wernert
b37b993eea [fix] Don't say we're downloading containers on iso install 2020-05-15 10:43:20 -04:00
William Wernert
eeb0579acb [fix] Don't change settings during whiptail menus on ISO 2020-05-15 10:42:52 -04:00
William Wernert
b9456dcc98 [fix] Set output dir for docker registry untar 2020-05-15 10:42:13 -04:00
Doug Burks
d6d27a2861 avoid duplicate entries in _cluster/settings for mastersearch
https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/696
2020-05-15 10:29:24 -04:00
m0duspwnens
509188092c adding so-standalone state logic, add zeek pillar to so-standalone - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/140 2020-05-15 10:02:25 -04:00
m0duspwnens
e8244cb2f2 add standalone to case statement in configure_minion so-functions - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/140 2020-05-14 17:14:35 -04:00
m0duspwnens
5f1582f39f remove extra space for standalone from pillar/top = https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/140 2020-05-14 16:57:50 -04:00
Doug Burks
e41c1b6755 fix typo 2020-05-14 16:57:34 -04:00
m0duspwnens
fb020f4fcd update so-functions to handle STANDALONE mode - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/140 2020-05-14 16:26:04 -04:00
m0duspwnens
692f04727f add standalone mode to pillar and state top - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/140 2020-05-14 16:06:19 -04:00
m0duspwnens
3064af753b allow STANDALONE mode to install salt-master - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/140 2020-05-14 15:23:53 -04:00
Josh Patterson
09368b05f7 Merge pull request #688 from Security-Onion-Solutions/issue/140
rename PROD to STANDALONE
2020-05-14 15:06:38 -04:00
m0duspwnens
5f4ec41497 rename PROD to STANDALONE 2020-05-14 15:05:37 -04:00
Josh Patterson
989dc418a8 Merge pull request #686 from Security-Onion-Solutions/quickfix/sostatus
rename so-aptcacherng for so-status
2020-05-14 14:12:24 -04:00
m0duspwnens
9667f8b853 rename so-aptcacherng for so-status 2020-05-14 14:11:06 -04:00
Doug Burks
34d9882987 fix Wazuh and Sysmon queries 2020-05-14 13:47:01 -04:00
Josh Patterson
8cd3d0c16c Merge pull request #684 from Security-Onion-Solutions/issue/682
run so-elasticsearch-pipelines only on changes
2020-05-14 13:41:07 -04:00
m0duspwnens
7f464af5fa run so-elasticsearch-pipelines only on changes - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/682 2020-05-14 13:39:19 -04:00
William Wernert
02cd70c2e0 Merge branch 'dev' of github.com:Security-Onion-Solutions/securityonion-saltstack into dev 2020-05-14 12:33:34 -04:00
William Wernert
80cd408821 [fix] Only install nc, not full nmap 2020-05-14 12:33:28 -04:00
Mike Reeves
dbef2e2832 Update soc.json 2020-05-14 11:56:18 -04:00
William Wernert
5078ea8692 Merge branch 'dev' of github.com:Security-Onion-Solutions/securityonion-saltstack into dev 2020-05-14 11:50:22 -04:00
William Wernert
2642968089 [fix] Correct wazuh + suricata pillar placement 2020-05-14 11:50:16 -04:00
Mike Reeves
6991900ceb Update Query for geo 2020-05-14 11:34:10 -04:00
Doug Burks
5c3e7acc6d change resp_mime_types to file.resp_mime_types 2020-05-14 11:21:32 -04:00
Doug Burks
6112322bce change file.path to smb.path 2020-05-14 11:20:11 -04:00
Josh Brower
daf2936635 Merge pull request #680 from Security-Onion-Solutions/bugfix/navigator-top
Navigator top.sls fix
2020-05-14 11:20:00 -04:00
Josh Brower
554612d25f Navigator top.sls fix 2020-05-14 11:19:07 -04:00
Mike Reeves
937f488a8f Update static pillar 2020-05-14 11:13:43 -04:00
Doug Burks
c7b4ab116f fix rfb typo 2020-05-14 10:57:44 -04:00
Josh Brower
9186a553ca Merge pull request #678 from Security-Onion-Solutions/bugfix/nids-and-osquerypackages
osquery packages fix
2020-05-13 20:40:41 -04:00
Josh Brower
3db67de27a osquery packages fix 2020-05-13 20:39:56 -04:00
Josh Brower
a37ce376a7 Merge pull request #676 from Security-Onion-Solutions/bugfix/elastalert-nidsalert
Playbook hivealert fixes
2020-05-13 19:28:19 -04:00
Josh Brower
8a68e6adb3 Playbook hivealert fixes 2020-05-13 19:27:14 -04:00