Jason Ertel
1e9e156a87
Improve issue template directions
2020-11-04 11:49:22 -05:00
Jason Ertel
a364f13d24
Add issue template
2020-11-04 11:42:39 -05:00
William Wernert
3d70698647
[fix] Remove old mysql db directory
2020-11-04 11:26:56 -05:00
Mike Reeves
e989fc7041
Update map.jinja
2020-11-04 10:58:52 -05:00
William Wernert
49af35b440
[fix][wip] Add reinstall_init function (part 3)
...
Create a function that, if the setup log exists, puts the system into a state where
the installer can run again without issue.
This is WIP, there are most likely still issues.
2020-11-04 10:38:48 -05:00
Mike Reeves
4592e2d4d7
add airgap option to upgradecommand
2020-11-04 10:08:01 -05:00
Mike Reeves
ec64314b70
Fix soup to clear yum cache for airgap
2020-11-04 10:00:44 -05:00
Mike Reeves
cf001875c2
Update soup
2020-11-03 20:14:15 -05:00
Mike Reeves
c7367eea38
Fix AGREPO Variable
2020-11-03 19:08:58 -05:00
William Wernert
db31cf3083
[refactor][fix] Remove old so-* containers, make fs changes after whiptail menus
2020-11-03 18:10:16 -05:00
Mike Reeves
8edb1529a9
Update soup
2020-11-03 17:36:53 -05:00
Mike Reeves
e8616e4d46
Update soup
2020-11-03 17:19:55 -05:00
William Wernert
3bf57382ce
[fix] Change when /opt/so is removed
2020-11-03 17:05:34 -05:00
Jason Ertel
def993f4ed
Improve salt version update comment
2020-11-03 16:50:22 -05:00
William Wernert
96ec483ae4
[fix][wip] Remove /opt/so directory during reinstall
2020-11-03 16:49:00 -05:00
William Wernert
6169758f4e
[fix] 0 -> root so file owner is set correctly
2020-11-03 16:47:59 -05:00
William Wernert
1c91e2d50b
[fix] Add minion_config variable so sed works
2020-11-03 15:48:08 -05:00
William Wernert
57e7e61f21
[fix] Don't add proxy to yum.conf on manager nodes
2020-11-03 15:45:19 -05:00
William Wernert
93ab4b5d4f
[fix][wip] Add reinstall_init function (part 2)
...
Create a function that, if the setup log exists, puts the system into a state where
the installer can run again without issue.
This is WIP, there are most likely still issues.
2020-11-03 15:44:37 -05:00
William Wernert
00fc256c37
[fix][wip] Add reinstall_init function
...
Create a function that, if the setup log exists, puts the system into a state where
the installer can run again without issue.
This is WIP, there are most likely still issues.
2020-11-03 14:51:35 -05:00
Mike Reeves
887f412e48
Remove docker_clean from docker_update function
2020-11-03 13:54:00 -05:00
Jason Ertel
aa9aa59213
Correct cheatsheetUrl for airgap installs
2020-11-03 12:27:55 -05:00
m0duspwnens
a859aa4f48
upgrade from salt 3001.1 to salt 3002.1 - https://github.com/Security-Onion-Solutions/securityonion/issues/1807
2020-11-03 11:54:28 -05:00
Jason Ertel
82a7b7e02d
Upgrade to Kratos 0.5.3-alpha1
2020-11-03 11:50:25 -05:00
Mike Reeves
85ea61bf98
Update VERSION
2020-11-03 11:40:03 -05:00
Mike Reeves
7f4b8e8183
Update README.md
2020-11-03 11:39:42 -05:00
Josh Patterson
1f8b139462
Merge pull request #1806 from Security-Onion-Solutions/issue/1782
...
Issue/1782
2020-11-03 11:23:22 -05:00
m0duspwnens
562a016579
remove more from sosetup.log
2020-11-03 10:23:56 -05:00
weslambert
e040009d0b
Merge pull request #1804 from Security-Onion-Solutions/fix/wazuh_api_creds_remove
...
Remove Wazuh API creds after registering initial agent
2020-11-03 09:57:58 -05:00
Wes Lambert
7dca988c11
Remove Wazuh API creds after registering intial agent
2020-11-03 14:53:50 +00:00
Mike Reeves
f007ef0ef5
Update so-functions
2020-11-02 17:00:02 -05:00
weslambert
bfe98433f6
Merge pull request #1789 from Security-Onion-Solutions/fix/zeek_intel
...
Add Zeek intel.dat
2020-11-02 16:38:16 -05:00
Wes Lambert
05549a2362
Add Zeek intel.dat
2020-11-02 21:36:44 +00:00
m0duspwnens
7e090b0894
dont echo salt minion config file to prevent mysql.pass from showing in sosetup.log
2020-11-02 16:23:34 -05:00
weslambert
8a645edb34
Merge pull request #1788 from Security-Onion-Solutions/feature/nids_rules
...
Allow for muliple files for rules
2020-11-02 16:05:53 -05:00
Wes Lambert
24a54a326c
Allow for muliple files for rules
2020-11-02 21:03:45 +00:00
Jason Ertel
184d163d65
Do not persist the Cortex PID file; This allows Cortex to recover from non-graceful container shutdowns, such as a power loss event on the host machine
2020-11-02 15:04:13 -05:00
weslambert
bb0cf9b8c7
Merge pull request #1784 from Security-Onion-Solutions/fix/strelka_exif_parsing
...
Fix/strelka exif parsing
2020-11-02 14:32:45 -05:00
Wes Lambert
3113d5fbdb
Format scan.exiftool as text
2020-11-02 19:31:14 +00:00
Wes Lambert
6420ee0310
Update parsing for scan.exiftool
2020-11-02 19:28:12 +00:00
William Wernert
033f5dbb9c
[fix] Use (mostly) absolute path when adding to PATH
2020-11-02 14:25:46 -05:00
William Wernert
1c4abcef15
[fix] Kill all jobs before checking if we can reach the salt master
2020-11-02 14:25:02 -05:00
Jason Ertel
2acb930a2e
fix: Remove crontab for automation installs
2020-11-02 11:08:45 -05:00
weslambert
37c630d6ab
Merge pull request #1776 from Security-Onion-Solutions/bugfix/af-packet-ring-size
...
Match max-pending-packets size
2020-11-02 08:39:21 -05:00
weslambert
71a260a000
Match max-pending-packets size
2020-11-02 08:38:45 -05:00
jtgreen-cse
6359e03ba6
fix for Windows events via osquery
...
This change was required to properly let Windows events flow through their specific pipelines. Otherwise, the `temp` field stays around and gets ingested in ES.
2020-10-29 15:03:13 -04:00
William Wernert
b489fee8b5
Merge pull request #1738 from Security-Onion-Solutions/bugfix/nginx-redirect
...
Bugfix/nginx redirect
2020-10-29 14:33:38 -04:00
William Wernert
91221c4332
[revert] Move proxy_pass back to ip
2020-10-29 10:23:12 -04:00
William Wernert
3abd1c9f16
[fix] Configure soctopus to use url_base
2020-10-28 16:08:19 -04:00
Mike Reeves
b14c1d0999
Merge pull request #1713 from Security-Onion-Solutions/logstashbind
...
Add a place where custom logstash certs can go
2020-10-28 15:27:26 -04:00