Commit Graph

6036 Commits

Author SHA1 Message Date
Jason Ertel e3c8018824 Toggle strelka rules after the user is prompted it strelka should be installed to ensure strelka rules are updated later during the setup process 2020-12-15 16:44:52 -05:00
TOoSmOotH 7909834722 Clean up previous upgrade dirs in temp 2020-12-15 16:23:49 -05:00
Mike Reeves 06dd3432f8 Copy the correct files over that soup needs 2020-12-15 16:13:51 -05:00
Mike Reeves 6cab65a548 Update so-image-common 2020-12-15 16:06:21 -05:00
Jason Ertel e58ca93896 Add logging for strelka configuration during setup 2020-12-15 15:46:59 -05:00
William Wernert 15347d1209 [fix] More condition changes for Helix 2020-12-15 15:08:33 -05:00
William Wernert c7c3d004ca [fix] More helix -> helixsensor 2020-12-15 14:01:19 -05:00
William Wernert 1825776271 [fix] helix -> helixsensor 2020-12-15 13:58:36 -05:00
William Wernert 951556902c [fix] Accept salt key on Helix Sensor install 2020-12-15 13:41:00 -05:00
William Wernert 7ba10ee698 [fix] Add HELIXSENSOR to case for Ubuntu 2020-12-15 13:38:00 -05:00
William Wernert 343e9f8b2c [fix] Only try to stop/remove containers if at least one exists 2020-12-15 13:37:46 -05:00
William Wernert e89c06f71b [fix] Add backslash for newline 2020-12-15 13:37:21 -05:00
William Wernert f7d02763e8 [fix] Move FEATURESCHECK var assignment, fix indentation 2020-12-15 13:07:21 -05:00
William Wernert f70d828aa6 [fix] Create array correctly 2020-12-15 13:04:09 -05:00
Jason Ertel 3da7a26e88 Remove jinja whitespace trimming to avoid syntax error in bash 2020-12-15 12:37:05 -05:00
Mike Reeves 922534a5da Merge pull request #2352 from Security-Onion-Solutions/soup2320
SOUP Features
2020-12-15 12:07:19 -05:00
TOoSmOotH 80a61d3316 SOUP Features 2020-12-15 12:06:30 -05:00
Mike Reeves bf1f00d2fe Merge pull request #2348 from Security-Onion-Solutions/soup2320
SOUP Changes
2020-12-14 21:19:45 -05:00
TOoSmOotH cbd59ed86a SOUP Changes 2020-12-14 20:46:31 -05:00
Josh Brower efe44323cb Merge pull request #2346 from Security-Onion-Solutions/bugfix/fleet-patch
Swap localhost for 127.0.0.1
2020-12-14 15:49:58 -05:00
William Wernert aa281f849f [feat] Add message about dropping to command line when setting up ssh key 2020-12-14 15:31:25 -05:00
William Wernert f4c4a16f54 Merge pull request #2343 from Security-Onion-Solutions/experimental
Experimental
2020-12-14 14:27:52 -05:00
Jason Ertel aa479b9c8e Move node address/desc into the minion pillar 2020-12-14 12:42:16 -05:00
William Wernert 3e2a9cc884 Merge branch 'dev' into experimental 2020-12-14 12:32:53 -05:00
William Wernert a533e6fa35 [fix] Always set INSTALLUSERNAME var 2020-12-14 11:42:34 -05:00
Josh Patterson de3f86724a Merge pull request #2335 from Security-Onion-Solutions/issue/1586
remove old firewall ports pillar file
2020-12-14 11:15:34 -05:00
m0duspwnens 4e04f31b8e remove old firewall ports pillar file https://github.com/Security-Onion-Solutions/securityonion/issues/1586 2020-12-14 10:24:49 -05:00
Doug Burks 7a314b5935 Prevent Wazuh "last -n 20" logs from going to Alerts queue #2321 2020-12-12 11:35:29 -05:00
Doug Burks 61ae187d03 revert previous commit #2321 2020-12-12 10:12:23 -05:00
Josh Brower 73d23e6d17 Revert "Initial support - Playbook Overrides"
This reverts commit 8915e49288.
2020-12-12 10:07:30 -05:00
Josh Brower 8faf80a03b Revert "Playbook db updates"
This reverts commit 35be785f7a.
2020-12-12 10:07:23 -05:00
Mike Reeves b5ed973abd Merge pull request #2138 from OmerTirosh/OmerTirosh-fix-win.eventlog
Fix Error: SO elasticsearch ingest failed to convert 'winlog.event_data.SubjectUserName' to 'user.name'
2020-12-12 10:00:27 -05:00
Doug Burks 85aac4ad75 Prevent Wazuh "last -n 20" logs from going to Alerts queue #2321 2020-12-12 09:22:08 -05:00
Jason Ertel fd7fe72b2a Correct default address pool base value 2020-12-11 23:29:59 -05:00
Jason Ertel c5a3597564 Swap AWS interfaces 2020-12-11 21:57:56 -05:00
Josh Brower 66495e6bae Swap localhost for 127.0.0.1 2020-12-11 17:38:42 -05:00
Jason Ertel 42c8f1e325 Use eth0/eth1 instead of ens5/ens6 in AWS 2020-12-11 15:34:16 -05:00
Jason Ertel bb61c1f745 Cleanup bash imports/sources, function definitions, and variables 2020-12-11 15:33:31 -05:00
Josh Patterson e4eea6a616 Merge pull request #2320 from Security-Onion-Solutions/issue/2319
zeek file extraction can now be manipulated with zeek pillar
2020-12-11 14:38:10 -05:00
m0duspwnens 09b3a4a0dd merge pillar with the defaults https://github.com/Security-Onion-Solutions/securityonion/issues/2319 2020-12-11 14:35:06 -05:00
m0duspwnens b8e8510dd2 merge pillar with the defaults https://github.com/Security-Onion-Solutions/securityonion/issues/2319 2020-12-11 14:26:32 -05:00
Jason Ertel eb735c7289 Replace duplicate random generator with common function 2020-12-11 13:22:13 -05:00
Josh Patterson 2f2867804a Merge pull request #2318 from Security-Onion-Solutions/issue/1175
pillarize grafana and allow for grafana alerts to be created
2020-12-11 12:36:06 -05:00
m0duspwnens d877fac786 add null for max graph value https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-11 12:28:43 -05:00
m0duspwnens c88a1a943d update search and sensor node dashboard panaels from guage to graph https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-11 12:21:16 -05:00
m0duspwnens e3335a3106 update managersearch dashboard panaels from guage to graph https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-11 12:00:02 -05:00
m0duspwnens 0a77a28e06 guage to graph cor cpu on manager and eval https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-11 11:51:42 -05:00
m0duspwnens 6eb64227ae update manager dashboard panaels from guage to graph https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-11 11:44:21 -05:00
m0duspwnens 5a95181b2b update eval version 1 https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-11 11:36:19 -05:00
m0duspwnens 2fc151d923 update eval dashboard panaels from guage to graph https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-11 11:34:08 -05:00