CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-04-25 14:07:49 +02:00
Code Issues Packages Projects Releases Wiki Activity
10,492 Commits 40 Branches 125 Tags
84b2fc9c1703f73e8728980aa4d8f22a3f5390d8
Commit Graph

10492 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
weslambert 616bc40412 Merge pull request #8558 from Security-Onion-Solutions/fix/soup_local_mods_check_skip_prompt 
Allow local modification acceptance prompt to be skipped when passing 'skip-prompt' as a parameter value to check_local_mods() function
 2022-08-19 16:11:23 -04:00
weslambert f00d9074ff Allow local modification acceptance prompt to be skipped when passing 'skip-prompt' as a parameter value to check_local_mods() function 2022-08-19 16:07:14 -04:00
Mike Reeves 9a692288e2 Merge pull request #8557 from Security-Onion-Solutions/TOoSmOotH-patch-3 
Update rulecat.conf
 2022-08-19 13:14:32 -04:00
Mike Reeves fea2b481e3 Update rulecat.conf 2022-08-19 13:12:49 -04:00
weslambert c17f0081ef Merge pull request #8550 from Security-Onion-Solutions/fix/soup_elastalert_indices_check_delete_if_less_than_es_8 
SOUP: Ensure Elastalert indices are not deleted for major Elasticsearch version 8 or greater
 2022-08-18 09:45:00 -04:00
weslambert fbf0803906 Update verbiage around major Elasticsearch version and not requiring Elastalert index maintenance 2022-08-18 09:16:22 -04:00
weslambert 5deda45b66 Update elastalert_indices_check() function to only delete Elastalert indices if major Elasticsearch version is less than 8 
Update elastalert_indices_check() function to only delete Elastalert indices if major Elasticsearch version is less than 8. Also clean up the output to only emit one notification regarding index deletion, and additional verbiage around function operation.
 2022-08-18 09:11:38 -04:00
Josh Patterson 3b8d8163b3 Merge pull request #8544 from Security-Onion-Solutions/issue/8369 
remove pipeline time panel
 2022-08-17 09:56:01 -04:00
m0duspwnens 2dfd41bd3c remove pipeline time panel - https://github.com/Security-Onion-Solutions/securityonion/issues/8369 2022-08-17 09:17:27 -04:00
Mike Reeves 49eead1d55 Merge pull request #8543 from Security-Onion-Solutions/kilo 
Merge master into dev
 2022-08-17 09:03:49 -04:00
Jason Ertel 54cb3c3a5a Merge branch 'master' into kilo 2022-08-17 08:58:32 -04:00
Mike Reeves 9f2b920454 Merge pull request #8535 from Security-Onion-Solutions/hotfix/2.3.140 
Hotfix/2.3.140
2.3.140-20220812 		2022-08-15 15:06:37 -04:00
Mike Reeves 604af45661 Merge pull request #8534 from Security-Onion-Solutions/2.3.140hotfix3 
2.3.140 Hotfix
 2022-08-15 13:09:14 -04:00
Mike Reeves 3f435c5c1a 2.3.140 Hotfix 2022-08-15 13:03:25 -04:00
Mike Reeves 7769af4541 Merge pull request #8531 from Security-Onion-Solutions/dougburks-patch-1 2022-08-12 15:05:04 -04:00
Mike Reeves 9903be8120 Merge pull request #8532 from Security-Onion-Solutions/2.3.140-20220815 2022-08-12 15:04:00 -04:00
Doug Burks 991a601a3d FIX: so-curator-closed-delete-delete needs to reference new Elasticsearch directory #8529 2022-08-12 13:21:06 -04:00
Doug Burks 86519d43dc Update HOTFIX 2022-08-12 13:20:15 -04:00
Doug Burks 179f669acf FIX: so-curator-closed-delete-delete needs to reference new Elasticsearch directory #8529 2022-08-12 13:10:47 -04:00
Doug Burks a02f878dcc Merge pull request #8517 from Security-Onion-Solutions/fix/cases-tlp-2.0 
Fix/cases tlp 2.0
 2022-08-11 15:55:21 -04:00
Doug Burks 32c29b28eb revert to lower case #8469 2022-08-11 15:33:30 -04:00
Doug Burks 7bf2603414 revert to lower case #8469 2022-08-11 15:32:49 -04:00
Doug Burks 4003876465 FIX: Fix TLP options in Cases to align with TLP 2.0 #8469 2022-08-11 08:49:54 -04:00
Doug Burks 4c677961c4 FIX: Fix TLP options in Cases to align with TLP 2.0 #8469 2022-08-11 08:49:25 -04:00
weslambert e950d865d8 Merge pull request #8485 from Security-Onion-Solutions/foxtrot 
Improve local file modification check in SOUP
 2022-08-08 10:06:13 -04:00
weslambert fd7a118664 Invoke check_local_mods() function earlier so we don't have to wait for Docker image downloads or OS updates before checking and potentially exiting SOUP 2022-08-08 08:58:19 -04:00
weslambert d7906945df Add extra set of brackets for comparison of integers 2022-08-08 08:24:38 -04:00
weslambert cb384ae024 Ensure check_local_mods() runs at the beginning of SOUP, in addition to the end, and also that it prompts (forces) the user to accept/review local modifications. 2022-08-05 11:25:33 -04:00
weslambert 7caead2387 Merge pull request #8476 from Security-Onion-Solutions/dev 
Merge dev into foxtrot
 2022-08-05 11:11:51 -04:00
Josh Patterson 4827c9e0d4 Merge pull request #8475 from Security-Onion-Solutions/issue/8441 
add SYSTEMD_UNIT_FILE back to map file
 2022-08-05 10:55:44 -04:00
m0duspwnens 3b62fc63c9 add SYSTEMD_UNIT_FILE back to map file 2022-08-05 10:53:07 -04:00
Josh Patterson ad32c2b1a5 Merge pull request #8472 from Security-Onion-Solutions/issue/8441 
ensure ExecStartPre is removed from default salt-minion service file
 2022-08-04 16:36:16 -04:00
m0duspwnens f02f431dab ensure ExecStartPre is removed from default salt-minion service file 2022-08-04 16:34:06 -04:00
Josh Patterson 812964e4d8 Merge pull request #8460 from Security-Onion-Solutions/issue/8441 
ensure parent dirs are created
 2022-08-03 17:01:50 -04:00
m0duspwnens 99805cc326 ensure parent dirs are created 2022-08-03 16:54:22 -04:00
Josh Patterson 8d2b3f3dfe Merge pull request #8457 from Security-Onion-Solutions/issue/8441 
fix the requisite
 2022-08-03 15:17:44 -04:00
m0duspwnens 15f7fd8920 fix the requisite 2022-08-03 15:16:12 -04:00
Josh Patterson 50460bf91e Merge pull request #8456 from Security-Onion-Solutions/issue/8441 
manage salt-minion start delay with systemd drop-in file
 2022-08-03 13:44:09 -04:00
weslambert ee654f767a Merge pull request #8453 from Security-Onion-Solutions/fix/elasticsearch_geoip_local 
Configure Elasticsearch to use local GeoLite2 databases by default
 2022-08-03 09:40:23 -04:00
weslambert 8c694a7ca3 Disable ingest.geoip.downloader by default 2022-08-03 09:21:40 -04:00
weslambert 9ac640fa67 Remove airgap-specific logic for ingest.geoip.downloader 2022-08-03 09:21:03 -04:00
m0duspwnens db8d9fff2c manage salt-minion start delay with systemd drop-in file - https://github.com/Security-Onion-Solutions/securityonion/issues/8441 2022-08-02 16:22:26 -04:00
weslambert 811063268f Merge pull request #8447 from Security-Onion-Solutions/feature/kibana_version_8_3_3 
Update Kibana version to 8.3.3
 2022-08-02 15:27:22 -04:00
weslambert f2b10a5a86 Update Kibana version to 8.3.3 2022-08-02 11:32:01 -04:00
weslambert c69cac0e5f Update Kibana version to 8.3.3 2022-08-02 11:31:35 -04:00
weslambert fed4433088 Merge pull request #8446 from Security-Onion-Solutions/fix/airgap_elasticsearch_geoip 
Update Elasticsearch defaults file and config.map.jinja to allow for local GeoIP database use when airgap is enabled
 2022-08-02 11:20:35 -04:00
Wes Lambert 839cfcaefa Update Elasticsearch defaults file and config.map.jinja to allow for local GeoIP database use when airgap is enabled 2022-08-02 14:32:17 +00:00
weslambert 3123407ef0 Update Elastic version to 8.3.3 2022-08-01 10:41:39 -04:00
weslambert d24125c9e6 Update Elastic version to 8.3.3 2022-08-01 10:40:57 -04:00
weslambert 64dc278c95 Merge pull request #8432 from Security-Onion-Solutions/dev 
Merge dev into foxtrot
 2022-08-01 10:12:35 -04:00