Commit Graph

4471 Commits

Author SHA1 Message Date
Josh Brower ad0f54fc40 Merge pull request #1209 from Security-Onion-Solutions/bugfix/osquery-parsing
Osquery Parsing fix
2020-08-18 15:54:47 -04:00
Josh Brower d4f7a07f85 Osquery Parsing fix 2020-08-18 15:54:11 -04:00
weslambert ca84ae43ef Merge pull request #1208 from Security-Onion-Solutions/fix/remove_pillar_from_setup
Don't echo pillar to setup log
2020-08-18 15:44:20 -04:00
weslambert a4e986ea37 Don't echo pillar to setup log 2020-08-18 15:43:43 -04:00
Josh Patterson be8483c580 Merge pull request #1207 from Security-Onion-Solutions/issue/1188
remove monint from nodestab grafana dashboard since search nodes dont…
2020-08-18 15:37:56 -04:00
m0duspwnens 65d9afd8d5 remove monint from nodestab grafana dashboard since search nodes dont have monint 2020-08-18 15:37:17 -04:00
Mike Reeves 59aa55f9bc Add playsecrets 2020-08-18 15:29:41 -04:00
Jason Ertel 47ad3f65ef Only fail setup when the root mailbox is not empty for ISO installations, since network installations can't be sure if the error came from setup or something unrelated 2020-08-18 15:26:30 -04:00
Josh Patterson 1bf4b86d07 Merge pull request #1206 from Security-Onion-Solutions/issue/1188
remove monint from manager since it doesnt have a monint
2020-08-18 15:10:40 -04:00
m0duspwnens 5a3d95d9a1 remove monint from manager since it doesnt have a monint 2020-08-18 15:09:21 -04:00
Mike Reeves 44fcd999fd Address #1205 2020-08-18 15:08:24 -04:00
weslambert 82bfa567d0 Merge pull request #1204 from Security-Onion-Solutions/fix/enable_strelka_default
Enable YARA rules by default
2020-08-18 14:54:46 -04:00
weslambert eaad0487b5 Enable YARA rules by default 2020-08-18 14:54:11 -04:00
Josh Patterson 54c43634a3 Merge pull request #1203 from Security-Onion-Solutions/issue/1188
add strelka to heavynode if strelka is enabled
2020-08-18 14:29:07 -04:00
m0duspwnens c8dfc2495c add strelka to heavynode if strelka is enabled - https://github.com/Security-Onion-Solutions/securityonion/issues/1188 2020-08-18 14:21:23 -04:00
Jason Ertel 45d957566d Only show 'Waiting for TheHive to start up' status if setup is actually installing thehive 2020-08-18 11:36:29 -04:00
Josh Patterson b214b20e58 Merge pull request #1201 from Security-Onion-Solutions/issue/1063
fix monint for several node types for grafana
2020-08-18 10:53:30 -04:00
m0duspwnens 9f8f59f4df fix monint for several node types for grafana 2020-08-18 10:48:52 -04:00
Mike Reeves ba192d6c32 Update addtotab.sh 2020-08-17 17:23:25 -04:00
Josh Brower 9c1c4b1a98 Merge pull request #1198 from Security-Onion-Solutions/feature/playbook-tweaks
Playbook schema update - RC2
2020-08-17 14:10:26 -04:00
Josh Brower a8aa97edd2 Playbook schema update - RC2 2020-08-17 14:09:17 -04:00
Josh Patterson 1d02fbdd0b Merge pull request #1197 from Security-Onion-Solutions/feature/soup
add sls extension
2020-08-17 12:27:34 -04:00
m0duspwnens eb1272c127 add sls extension 2020-08-17 12:26:44 -04:00
Josh Patterson 5581cf6721 Merge pull request #1196 from Security-Onion-Solutions/feature/soup
Feature/soup
2020-08-17 10:57:32 -04:00
m0duspwnens a82c4c24fb move url_base from manager to global in when running soup 2020-08-17 10:55:07 -04:00
Mike Reeves dcb110b31f Add rc1 conditional logic 2020-08-17 09:57:00 -04:00
Jason Ertel d8833abf73 Use load instead of import on the registry image itself 2020-08-15 09:42:56 -04:00
Josh Patterson 2c9c328a40 Merge pull request #1193 from Security-Onion-Solutions/issue/1039
Issue/1039
2020-08-14 18:45:12 -04:00
m0duspwnens e6da423dc3 change reference from manager:url_base to global:url_base - https://github.com/Security-Onion-Solutions/securityonion/issues/1039 2020-08-14 17:55:30 -04:00
m0duspwnens 4946bb54d8 Merge remote-tracking branch 'remotes/origin/dev' into issue/1039 2020-08-14 17:25:13 -04:00
Josh Patterson 5663edfaee Merge pull request #1192 from Security-Onion-Solutions/quickfix/importnoderonicheckin
set checking interval for sensoroni on import node
2020-08-14 17:11:35 -04:00
m0duspwnens 387c26f052 set checking interval for sensoroni on import node 2020-08-14 17:10:36 -04:00
Josh Patterson e4b80ff183 Merge pull request #1190 from Security-Onion-Solutions/quickfix/setuplogging
send service status to /dev/null to prevent FP on install failure
2020-08-14 16:47:55 -04:00
m0duspwnens 43f6f5c27a send service status to /dev/null to prevent FP on install failure 2020-08-14 16:45:28 -04:00
Josh Patterson 51cbccad09 Merge pull request #1189 from Security-Onion-Solutions/quickfix/modulerun
use new module.run style
2020-08-14 16:39:17 -04:00
m0duspwnens 5220b5ae0c use new module.run style 2020-08-14 16:37:45 -04:00
Josh Patterson 6b6f39edde Merge pull request #1187 from Security-Onion-Solutions/quickfix/heavyfw
heavynode firewall rules
2020-08-14 16:01:56 -04:00
m0duspwnens 47faee48a6 heavynode firewall rules 2020-08-14 15:58:59 -04:00
Mike Reeves eb6b2f6ca0 Merge pull request #1186 from Security-Onion-Solutions/feature/airgap
Airgap round 1
2020-08-14 15:41:36 -04:00
Mike Reeves bac58abf3e Airgap round 1 2020-08-14 15:32:33 -04:00
m0duspwnens d963222f31 provide proper url for so-import-pcap based on redirect strategy chosen during setup - https://github.com/Security-Onion-Solutions/securityonion/issues/1039 2020-08-14 15:28:47 -04:00
Jason Ertel 11ebc6b8b2 Do not cancel setup if user choose not to run so-allow during setup 2020-08-14 15:28:42 -04:00
Josh Patterson 0ba0c16c38 Merge pull request #1185 from Security-Onion-Solutions/issue/1049
Issue/1049
2020-08-14 14:55:14 -04:00
m0duspwnens 35027e32b3 dont constantly run steno or suricata containers for import node 2020-08-14 14:43:37 -04:00
weslambert 945bc5c6de Merge pull request #1184 from Security-Onion-Solutions/fix/automate_ssh
Don't copy SSH key if automated install
2020-08-14 14:42:44 -04:00
weslambert c9d6293f8f Don't copy SSH key if automated install 2020-08-14 14:41:35 -04:00
Jason Ertel 7fa5e17935 Correct if logic for determining when to show web interface URL 2020-08-14 14:40:12 -04:00
m0duspwnens f9a6b8d231 remove zeek and suricata from so-status for import node 2020-08-14 14:39:02 -04:00
m0duspwnens 3836f00309 allow sensori port for import node 2020-08-14 14:32:34 -04:00
Jason Ertel 04340728ff Improve title spacing among standard log lines 2020-08-14 14:28:52 -04:00