Commit Graph

3928 Commits

Author SHA1 Message Date
Mike Reeves 6c7111cd0a turn off verification mode for ES 2021-03-03 13:42:04 -05:00
Mike Reeves 4de62c878c turn on elastic security 2021-03-03 12:51:29 -05:00
William Wernert 279a5b60b8 Soup indent fixes 2021-03-03 11:58:10 -05:00
Mike Reeves 4f34eca5b9 remove unused script 2021-03-03 10:32:23 -05:00
Mike Reeves 07b5cc3d1d Fix https for rw indicies script 2021-03-03 10:29:41 -05:00
Mike Reeves 4f867e5375 Fix all scripts for ssl elastic 2021-03-03 10:02:23 -05:00
William Wernert 2b94fa366e [wip] Add auth inputs for proxy settings, fix some broken logic 2021-03-03 09:51:38 -05:00
William Wernert de77d3ebc9 [wip] Initial work for setting up proxy on manager 2021-03-02 17:41:49 -05:00
William Wernert 4df53b3c70 Unify log_size_limit variable value in so-curator-closed-delete-delete 2021-03-02 17:38:17 -05:00
Mike Reeves e0d9212e55 Make https default for all things 2021-03-02 14:01:05 -05:00
Mike Reeves 80574d3c20 Make https default for all things 2021-03-02 13:59:43 -05:00
Mike Reeves bfd05a8cfc Change to https for elastic connections 2021-03-02 11:32:29 -05:00
Mike Reeves 3219f4cd12 Remove Features Option 2021-03-02 11:04:50 -05:00
William Wernert 0db9991307 Reword/remove some comments 2021-03-02 10:20:33 -05:00
William Wernert 35f5c7fb4b Merge branch 'dev' into feature/docker-prune-rework 2021-03-02 09:48:41 -05:00
m0duspwnens 3983e08fe5 exclude zeekcaptureloss when suricata metadata selected https://github.com/Security-Onion-Solutions/securityonion/issues/3206 2021-03-01 13:31:05 -05:00
William Wernert be7dcdb442 Merge branch 'master' into release-merge-fix
# Conflicts:
#	README.md
#	VERIFY_ISO.md
#	VERSION
#	salt/docker_clean/init.sls
#	salt/soc/files/soc/changes.json
2021-03-01 10:45:51 -05:00
Jason Ertel 1ae46b82ec Update changes for 2.3.30 2021-03-01 09:58:39 -05:00
William Wernert 1834e07aad Merge branch 'dev' into feature/docker-prune-rework 2021-03-01 09:37:47 -05:00
William Wernert 6113bcc261 [fix] Increase max integer value 2021-03-01 09:16:51 -05:00
Jason Ertel 7451aa990b Improve formatting of changes list 2021-02-27 08:14:44 -05:00
Jason Ertel 9631327c71 Add changes.json for 2.3.30 2021-02-26 18:11:13 -05:00
William Wernert 33696398eb Add new so-docker-prune script
* Script will pull list of so- images and prune any older than most recent + last version
2021-02-26 18:06:07 -05:00
m0duspwnens b4c1c56e72 Merge remote-tracking branch 'remotes/origin/dev' into salt-3002.5 2021-02-26 08:38:02 -05:00
Josh Brower 5678e66b39 Fix so-playbook-sigma-refresh 2021-02-26 08:33:24 -05:00
Josh Brower b8137214e4 Initial Support - Live Query to Hunt 2021-02-26 08:08:09 -05:00
m0duspwnens 9fa625189f upgrade to salt 3002.5 https://github.com/Security-Onion-Solutions/securityonion/issues/3147 2021-02-25 20:07:29 -05:00
Mike Reeves e06ca75677 Merge pull request #3144 from Security-Onion-Solutions/interfaces
Don't disable NICs
2021-02-25 17:28:47 -05:00
Mike Reeves a47a3d51c9 Merge pull request #3139 from Security-Onion-Solutions/feature/soup-log_size_limit
Show log_size_limit message at end of soup instead of during
2021-02-25 17:10:38 -05:00
Josh Patterson 8a0e0e88e0 Merge pull request #3142 from Security-Onion-Solutions/issue/3130
stop zeek state.db from getting owned by root
2021-02-25 15:01:20 -05:00
Mike Reeves 51e8839daf Inverse NIC offload 2021-02-25 11:46:00 -05:00
m0duspwnens fcd3f81400 fix quotes 2021-02-25 11:16:53 -05:00
m0duspwnens c8213fa3d4 change docker exec 2021-02-25 11:07:54 -05:00
m0duspwnens add66e750e forgot to add -c 2021-02-25 10:49:09 -05:00
William Wernert 6a097beaff Show log_size_limit message at end of soup instead of during 2021-02-25 10:47:29 -05:00
m0duspwnens d52abcbcbd ensure zeekctl is run as user zeek https://github.com/Security-Onion-Solutions/securityonion/issues/3130 2021-02-25 09:58:07 -05:00
Doug Burks c18c865764 Improve Hunt queries for ssh and tunnel #3128 2021-02-25 09:23:19 -05:00
Doug Burks ef1e296415 Improve Hunt queries for ssh and tunnel #3128 2021-02-25 08:52:34 -05:00
Jason Ertel 34dab9009c Ensure Zeek spool dir is owned by Zeek to allow Zeek to start correctly 2021-02-25 08:10:13 -05:00
Mike Reeves c39b516f38 Merge pull request #3121 from Security-Onion-Solutions/strelkainstall
Fix Strelka Rule updates, repo fix
2021-02-24 17:13:41 -05:00
Mike Reeves 701cfe7e9a Merge branch 'dev' into strelkainstall 2021-02-24 17:07:26 -05:00
William Wernert f042312aac Merge branch 'dev' into kilo
# Conflicts:
#	salt/common/tools/sbin/soup
2021-02-24 15:42:10 -05:00
Wes Lambert 6ea8eab9af Modify soup to add Strelka rule repo in pillar 2021-02-24 20:32:47 +00:00
William Wernert e500e24802 Only show log_size_limit warning on dist if heavynode pillars exist 2021-02-24 13:56:59 -05:00
Mike Reeves 38d60752b7 Merge pull request #3110 from Security-Onion-Solutions/dockerclean
Docker Cleanup
2021-02-24 13:44:06 -05:00
William Wernert ece79379a5 Add file name/path to log_size_limit message 2021-02-24 12:54:14 -05:00
William Wernert ac6f1df86f [fix] Only check log_size_limit on .2X -> .30
* Since we're showing a message in the middle of soup, wait for keypress if it's shown
2021-02-24 12:35:17 -05:00
William Wernert 4507a89d95 tar arg fix (-x -> -z) 2021-02-24 12:24:54 -05:00
William Wernert 2be7ccac33 Add function to notify user that log_size_limit may be incorrect 2021-02-24 12:24:32 -05:00
m0duspwnens eba5d271aa logfile is 1 word https://github.com/Security-Onion-Solutions/securityonion/issues/3115 2021-02-24 11:56:43 -05:00