Commit Graph

3008 Commits

Author SHA1 Message Date
Josh Brower 8a8970d9ee Update Fleet IP placeholder 2020-05-17 12:51:20 -04:00
Mike Reeves bc5e86bd4b Merge pull request #717 from Security-Onion-Solutions/issue/140
Issue/140
2020-05-17 11:24:59 -04:00
Mike Reeves 329a030585 Merge remote-tracking branch 'remotes/origin/dev' into issue/140 2020-05-17 09:38:30 -04:00
weslambert f7de391518 Merge pull request #713 from Security-Onion-Solutions/fix/kibana_config_load
change KRATOS to MASTER
2020-05-16 13:07:24 -04:00
Wes Lambert 23eb73a943 change KRATOS to MASTER 2020-05-16 16:31:06 +00:00
weslambert 907702441f Merge pull request #712 from Security-Onion-Solutions/fix/kibana_config_load_order
Fix load order for PLACEHOLDER
2020-05-16 11:49:58 -04:00
Wes Lambert 047f4e31ad Fix load order for PLACEHOLDER 2020-05-16 15:48:55 +00:00
weslambert 6e9784f68c Merge pull request #711 from Security-Onion-Solutions/fix/kibana_config_placeholder
fix placeholder
2020-05-16 11:46:46 -04:00
Wes Lambert 3363a5a20a fix placeholder 2020-05-16 15:45:52 +00:00
weslambert 9d4397806b Merge pull request #710 from Security-Onion-Solutions/fix/kibana_config_export
Fix/kibana config export
2020-05-16 11:35:43 -04:00
Wes Lambert 9b8cf3845a update Kibana config export 2020-05-16 15:34:33 +00:00
Wes Lambert 89527c533a update Kibana config export 2020-05-16 15:33:20 +00:00
weslambert 5d7c020223 Merge pull request #709 from Security-Onion-Solutions/fix/kibana_config
update Kibana config
2020-05-16 11:09:45 -04:00
Wes Lambert bd5cc35fc0 update Kibana config 2020-05-16 15:07:33 +00:00
weslambert 95141574d4 Merge pull request #707 from Security-Onion-Solutions/fix/dhcp_parsing
Fix/dhcp parsing
2020-05-16 11:04:13 -04:00
Wes Lambert 4b91ade2e8 fix message_types one more time :) 2020-05-16 15:03:27 +00:00
Wes Lambert 9845ee189c fix message_types for real 2020-05-16 15:02:41 +00:00
Wes Lambert f0662eed48 remark Beat tag for now 2020-05-16 14:59:41 +00:00
Wes Lambert 6a2ddd4ef6 move to DNS 2020-05-16 14:58:51 +00:00
Wes Lambert 66c89abbc6 Fix DHCP message types 2020-05-16 14:58:06 +00:00
William Wernert 5619768212 [fix] Use hostname or ip in Kibana based on setup
Fixes #603
2020-05-15 20:40:35 -04:00
m0duspwnens 6c7f487a3e Merge remote-tracking branch 'remotes/origin/dev' into issue/140 2020-05-15 19:43:18 -04:00
m0duspwnens 0086f0b71b add redis state to standalone - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/140 2020-05-15 19:43:06 -04:00
m0duspwnens bb2587aaa0 add standalone to curator conf and scripts as well as other appopriate node types - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/140 2020-05-15 15:42:04 -04:00
Doug Burks cc7a244d0b Create zeek.dns.tld
https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/599
2020-05-15 15:32:25 -04:00
Doug Burks 60d2a0818b Add to zeek.dns and have it send to zeek.dns.tld
https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/599
2020-05-15 15:31:17 -04:00
m0duspwnens 2bd3a4ddd1 allow curator state to install on so-searchnode, so-eval, so-node, so-mastersearch, so-heavynode, so-standalone - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/140 2020-05-15 15:30:00 -04:00
m0duspwnens 4e63477b98 Merge remote-tracking branch 'remotes/origin/dev' into issue/140 2020-05-15 15:21:03 -04:00
m0duspwnens e7baca16ef allow grafana and influxdb states to run on standalone mode - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/140 2020-05-15 15:20:36 -04:00
m0duspwnens 330ea0571f fix container list for so-status for standalone mode - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/140 2020-05-15 15:09:40 -04:00
Josh Brower e02bf2ebb5 Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion-saltstack into dev 2020-05-15 15:05:47 -04:00
Josh Brower 9d4536dcbe osquery ingest parsing update 2020-05-15 15:05:21 -04:00
Doug Burks fc883745e5 add fields to conn log
https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/599
2020-05-15 15:02:02 -04:00
Doug Burks 58d59c6844 use null safe operator for source.port and destination.port
https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/594
2020-05-15 14:58:21 -04:00
Josh Brower 4737c0da3f Merge pull request #702 from Security-Onion-Solutions/bugfix/fleet-deployment
Fleet Setup - Restart nginx
2020-05-15 14:48:18 -04:00
Josh Brower 6b4822d98d Fleet Setup - Restart nginx 2020-05-15 14:47:19 -04:00
m0duspwnens c89bc0b51a create nginx conf for standalone - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/140 2020-05-15 14:42:38 -04:00
weslambert baf1de4b34 Merge pull request #700 from Security-Onion-Solutions/fix/common_type_removal
remove type field
2020-05-15 14:37:44 -04:00
William Wernert 87afedae82 [fix] Menu spelling fixes 2020-05-15 14:33:37 -04:00
Wes Lambert 03805bd6e2 remove type field 2020-05-15 18:29:49 +00:00
weslambert 59ece8fd29 Merge pull request #699 from Security-Onion-Solutions/fix/dce_rpc_parsing
update DCE/RPC parsing
2020-05-15 14:20:37 -04:00
Wes Lambert 5d5f5cf105 update DCE/RPC parsing 2020-05-15 18:19:05 +00:00
Mike Reeves 7e1016ff07 Update firewall rules to allow minions to connect 2020-05-15 13:59:07 -04:00
Mike Reeves 10896c1add Update Release Notes 2020-05-15 13:41:51 -04:00
m0duspwnens 2f566bf6d7 add so-standalone to agent/wazuh-register-agent 2020-05-15 13:25:31 -04:00
m0duspwnens 1a157eb6a5 add so-standalone to agent/ossec.conf 2020-05-15 13:23:58 -04:00
m0duspwnens 9c7481a0c7 add so-status map for standalone 2020-05-15 13:21:05 -04:00
Mike Reeves d04f58a27e Update README.md 2020-05-15 13:10:52 -04:00
William Wernert 2f4ce40095 [fix] Change verbiage to indicate the master vs open is only for OS packages 2020-05-15 11:40:37 -04:00
William Wernert 692d1d72a3 [fix] Change verbiage to indicate the master vs open is only for OS packages 2020-05-15 11:39:59 -04:00