Commit Graph

10693 Commits

Author SHA1 Message Date
Jason Ertel
7f7e5474ed Add more logging for filecheck monitoring, and ensure scripts are accessible to salt-relay 2022-11-17 10:43:05 -05:00
Jason Ertel
0ffef75d7b Move background jobs to cron 2022-11-17 09:50:41 -05:00
Jason Ertel
c572848ece temporarily remove filecheck for debug purposes 2022-11-17 08:06:24 -05:00
Jason Ertel
7cd5d625d1 temporarily remove salt-pipe for debug purposes 2022-11-16 20:45:50 -05:00
Jason Ertel
4497037442 Use bg:True to send cmd to background 2022-11-16 20:03:54 -05:00
weslambert
c14c8c1306 Merge pull request #9154 from Security-Onion-Solutions/fix/ics_scada_ingest_pipeline_updates_2_4
Update ingest node pipelines for ICS/SCADA protocols
2022-11-16 16:17:19 -05:00
Wes
638a3568b0 Update ingest node pipelines for ICS/SCADA protocols 2022-11-16 21:11:21 +00:00
Josh Brower
98af16055c Merge pull request #9151 from Security-Onion-Solutions/2.4/elasticfleet-ag
Initial support for Elastic Fleet Package Registry
2022-11-16 08:45:29 -05:00
Josh Brower
8db49feb32 Use our docker image 2022-11-16 08:24:25 -05:00
Josh Brower
48d191b656 Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/elasticfleet-ag 2022-11-15 12:13:05 -05:00
Doug Burks
a2da8e5e08 Merge pull request #9129 from Security-Onion-Solutions/dougburks-patch-1
fix descriptions in files related to analyzers
2022-11-12 19:26:34 +00:00
Doug Burks
632464335f fix descriptions in files related to analyzers 2022-11-12 13:14:02 -05:00
Doug Burks
f77db78219 fix descriptions in files related to analyzers 2022-11-12 13:13:30 -05:00
Doug Burks
2f4ce91678 fix descriptions in files related to analyzers 2022-11-12 13:12:58 -05:00
Doug Burks
154dff98de fix descriptions in files related to analyzers 2022-11-12 13:12:23 -05:00
Doug Burks
a15ca3cc49 fix descriptions in files related to analyzers 2022-11-12 13:11:38 -05:00
Doug Burks
a6ad7fa3ac Merge pull request #9125 from Security-Onion-Solutions/dougburks-patch-2
FIX: Avoid deprecation warning in Zeek file extraction script #9123
2022-11-11 21:33:43 +00:00
Doug Burks
40f5bb25ef FIX: Avoid deprecation warning in Zeek file extraction script #9123 2022-11-11 16:28:23 -05:00
Josh Patterson
7420c31411 Merge pull request #9096 from Security-Onion-Solutions/salt3005.1_2.4
roll back to salt 3004.2
2022-11-08 15:47:00 -05:00
m0duspwnens
00cb0f5abb roll back to salt 3004.2 2022-11-08 15:45:18 -05:00
Mike Reeves
bf31b593ed Merge pull request #9055 from Security-Onion-Solutions/strelkastuff
Strelkastuff
2022-11-08 13:45:42 -05:00
Josh Patterson
4870b4b91f Merge pull request #9095 from Security-Onion-Solutions/salt3005.1_2.4
upgrade to salt 3005.1
2022-11-08 13:45:24 -05:00
m0duspwnens
1a678064dc upgrade to salt 3005.1 2022-11-08 13:42:24 -05:00
Josh Brower
c389944e5c Initial support for Elastic Package Registry 2022-11-08 09:56:53 -05:00
Mike Reeves
de19a4dc53 Add Strelka Filecheck 2022-11-02 10:04:33 -04:00
Mike Reeves
d97de9fd0d Add Strelka Filecheck 2022-11-02 10:02:21 -04:00
Mike Reeves
bf5df1ac51 Add Strelka Filecheck 2022-11-02 09:57:07 -04:00
Mike Reeves
225c33e5c9 Add Strelka Filecheck 2022-11-02 09:46:23 -04:00
Mike Reeves
4187363451 Add Strelka Filecheck 2022-11-02 09:44:08 -04:00
Doug Burks
f3fc52dd2c Merge pull request #9041 from Security-Onion-Solutions/dougburks-patch-1
https://github.com/Security-Onion-Solutions/securityonion/pull/8952
2022-11-01 13:40:51 +00:00
Doug Burks
2030f08b54 https://github.com/Security-Onion-Solutions/securityonion/pull/8952 2022-11-01 09:35:53 -04:00
Jason Ertel
55f22af758 Merge pull request #9017 from Security-Onion-Solutions/config
Retry so-user commands if another process is currently using so-user
2022-10-27 15:41:37 -04:00
Jason Ertel
35fab05bdd Retry so-user commands if another process is currently using so-user 2022-10-27 15:25:08 -04:00
Jason Ertel
d7b370e31b Merge pull request #9010 from Security-Onion-Solutions/config
regex should match entire input against allowed logLevel values
2022-10-27 13:17:51 -04:00
Josh Patterson
c6ebe5c8dd Merge pull request #9016 from Security-Onion-Solutions/patch2.4
Patch2.4
2022-10-27 13:07:54 -04:00
m0duspwnens
8af0334c3c Merge remote-tracking branch 'remotes/origin/2.4/dev' into patch2.4 2022-10-27 11:08:32 -04:00
m0duspwnens
6525e0f201 setup no longer add patch pillar to minion 2022-10-27 10:56:29 -04:00
m0duspwnens
a95c2a690a add defaults and map for patch state 2022-10-27 10:54:29 -04:00
Jason Ertel
6347532dd8 regex should match entire input against allowed logLevel values 2022-10-26 18:48:20 -04:00
weslambert
8b0ea7104f Merge pull request #9003 from Security-Onion-Solutions/fix/remove_ja3er_references
Remove JA3er references
2022-10-26 10:37:45 -04:00
weslambert
0ede5a7313 Remove JA3er references 2022-10-26 10:24:25 -04:00
weslambert
409b8c276e Merge pull request #8999 from Security-Onion-Solutions/fix/sensoroni_analyzers_pyyaml_wheel_name
Fix PyYAML .whl file name and remove JA3er analyzer
2022-10-25 15:32:20 -04:00
Wes
803d2d4d75 Add PyYAML .whl files back since they were 'deleted' in the previous commit 2022-10-25 19:15:54 +00:00
Wes
0267ece4bf Fix PyYAML .whl file name and remove JA3er analyzer 2022-10-25 19:11:52 +00:00
Josh Patterson
d148febc99 Merge pull request #8967 from Security-Onion-Solutions/curator2.4
add line space
2022-10-21 11:56:01 -04:00
m0duspwnens
8c5197c2ea add line space 2022-10-21 11:49:01 -04:00
Josh Patterson
8197017b6c Merge pull request #8966 from Security-Onion-Solutions/curator2.4
Curator2.4
2022-10-21 11:26:51 -04:00
m0duspwnens
8b5c79fb39 add so-kratos and so-ossec to curator defaults 2022-10-21 11:21:03 -04:00
m0duspwnens
71eaa715b6 update jinja 2022-10-21 11:09:52 -04:00
m0duspwnens
c880be8d45 use curator defaults.yaml merged with pillar for actions 2022-10-21 10:38:32 -04:00