Commit Graph

5698 Commits

Author SHA1 Message Date
Jason Ertel
1e9e156a87 Improve issue template directions 2020-11-04 11:49:22 -05:00
Jason Ertel
a364f13d24 Add issue template 2020-11-04 11:42:39 -05:00
William Wernert
3d70698647 [fix] Remove old mysql db directory 2020-11-04 11:26:56 -05:00
Mike Reeves
e989fc7041 Update map.jinja 2020-11-04 10:58:52 -05:00
William Wernert
49af35b440 [fix][wip] Add reinstall_init function (part 3)
Create a function that, if the setup log exists, puts the system into a state where
the installer can run again without issue.

This is WIP, there are most likely still issues.
2020-11-04 10:38:48 -05:00
Mike Reeves
4592e2d4d7 add airgap option to upgradecommand 2020-11-04 10:08:01 -05:00
Mike Reeves
ec64314b70 Fix soup to clear yum cache for airgap 2020-11-04 10:00:44 -05:00
Mike Reeves
cf001875c2 Update soup 2020-11-03 20:14:15 -05:00
Mike Reeves
c7367eea38 Fix AGREPO Variable 2020-11-03 19:08:58 -05:00
William Wernert
db31cf3083 [refactor][fix] Remove old so-* containers, make fs changes after whiptail menus 2020-11-03 18:10:16 -05:00
Mike Reeves
8edb1529a9 Update soup 2020-11-03 17:36:53 -05:00
Mike Reeves
e8616e4d46 Update soup 2020-11-03 17:19:55 -05:00
William Wernert
3bf57382ce [fix] Change when /opt/so is removed 2020-11-03 17:05:34 -05:00
Jason Ertel
def993f4ed Improve salt version update comment 2020-11-03 16:50:22 -05:00
William Wernert
96ec483ae4 [fix][wip] Remove /opt/so directory during reinstall 2020-11-03 16:49:00 -05:00
William Wernert
6169758f4e [fix] 0 -> root so file owner is set correctly 2020-11-03 16:47:59 -05:00
William Wernert
1c91e2d50b [fix] Add minion_config variable so sed works 2020-11-03 15:48:08 -05:00
William Wernert
57e7e61f21 [fix] Don't add proxy to yum.conf on manager nodes 2020-11-03 15:45:19 -05:00
William Wernert
93ab4b5d4f [fix][wip] Add reinstall_init function (part 2)
Create a function that, if the setup log exists, puts the system into a state where
the installer can run again without issue.

This is WIP, there are most likely still issues.
2020-11-03 15:44:37 -05:00
William Wernert
00fc256c37 [fix][wip] Add reinstall_init function
Create a function that, if the setup log exists, puts the system into a state where
the installer can run again without issue.

This is WIP, there are most likely still issues.
2020-11-03 14:51:35 -05:00
Mike Reeves
887f412e48 Remove docker_clean from docker_update function 2020-11-03 13:54:00 -05:00
Jason Ertel
aa9aa59213 Correct cheatsheetUrl for airgap installs 2020-11-03 12:27:55 -05:00
m0duspwnens
a859aa4f48 upgrade from salt 3001.1 to salt 3002.1 - https://github.com/Security-Onion-Solutions/securityonion/issues/1807 2020-11-03 11:54:28 -05:00
Jason Ertel
82a7b7e02d Upgrade to Kratos 0.5.3-alpha1 2020-11-03 11:50:25 -05:00
Mike Reeves
85ea61bf98 Update VERSION 2020-11-03 11:40:03 -05:00
Mike Reeves
7f4b8e8183 Update README.md 2020-11-03 11:39:42 -05:00
Josh Patterson
1f8b139462 Merge pull request #1806 from Security-Onion-Solutions/issue/1782
Issue/1782
2020-11-03 11:23:22 -05:00
m0duspwnens
562a016579 remove more from sosetup.log 2020-11-03 10:23:56 -05:00
weslambert
e040009d0b Merge pull request #1804 from Security-Onion-Solutions/fix/wazuh_api_creds_remove
Remove Wazuh API creds after registering initial agent
2020-11-03 09:57:58 -05:00
Wes Lambert
7dca988c11 Remove Wazuh API creds after registering intial agent 2020-11-03 14:53:50 +00:00
Mike Reeves
f007ef0ef5 Update so-functions 2020-11-02 17:00:02 -05:00
weslambert
bfe98433f6 Merge pull request #1789 from Security-Onion-Solutions/fix/zeek_intel
Add Zeek intel.dat
2020-11-02 16:38:16 -05:00
Wes Lambert
05549a2362 Add Zeek intel.dat 2020-11-02 21:36:44 +00:00
m0duspwnens
7e090b0894 dont echo salt minion config file to prevent mysql.pass from showing in sosetup.log 2020-11-02 16:23:34 -05:00
weslambert
8a645edb34 Merge pull request #1788 from Security-Onion-Solutions/feature/nids_rules
Allow for muliple files for rules
2020-11-02 16:05:53 -05:00
Wes Lambert
24a54a326c Allow for muliple files for rules 2020-11-02 21:03:45 +00:00
Jason Ertel
184d163d65 Do not persist the Cortex PID file; This allows Cortex to recover from non-graceful container shutdowns, such as a power loss event on the host machine 2020-11-02 15:04:13 -05:00
weslambert
bb0cf9b8c7 Merge pull request #1784 from Security-Onion-Solutions/fix/strelka_exif_parsing
Fix/strelka exif parsing
2020-11-02 14:32:45 -05:00
Wes Lambert
3113d5fbdb Format scan.exiftool as text 2020-11-02 19:31:14 +00:00
Wes Lambert
6420ee0310 Update parsing for scan.exiftool 2020-11-02 19:28:12 +00:00
William Wernert
033f5dbb9c [fix] Use (mostly) absolute path when adding to PATH 2020-11-02 14:25:46 -05:00
William Wernert
1c4abcef15 [fix] Kill all jobs before checking if we can reach the salt master 2020-11-02 14:25:02 -05:00
Jason Ertel
2acb930a2e fix: Remove crontab for automation installs 2020-11-02 11:08:45 -05:00
weslambert
37c630d6ab Merge pull request #1776 from Security-Onion-Solutions/bugfix/af-packet-ring-size
Match max-pending-packets size
2020-11-02 08:39:21 -05:00
weslambert
71a260a000 Match max-pending-packets size 2020-11-02 08:38:45 -05:00
jtgreen-cse
6359e03ba6 fix for Windows events via osquery
This change was required to properly let Windows events flow through their specific pipelines. Otherwise, the `temp` field stays around and gets ingested in ES.
2020-10-29 15:03:13 -04:00
William Wernert
b489fee8b5 Merge pull request #1738 from Security-Onion-Solutions/bugfix/nginx-redirect
Bugfix/nginx redirect
2020-10-29 14:33:38 -04:00
William Wernert
91221c4332 [revert] Move proxy_pass back to ip 2020-10-29 10:23:12 -04:00
William Wernert
3abd1c9f16 [fix] Configure soctopus to use url_base 2020-10-28 16:08:19 -04:00
Mike Reeves
b14c1d0999 Merge pull request #1713 from Security-Onion-Solutions/logstashbind
Add a place where custom logstash certs can go
2020-10-28 15:27:26 -04:00