Commit Graph

3354 Commits

Author SHA1 Message Date
Josh Brower 910c809aa2 Merge pull request #833 from Security-Onion-Solutions/bugfix/misc
thehive setup fix
2020-06-09 12:19:02 -04:00
Josh Brower e5a23c22fd thehive setup fix 2020-06-09 12:16:39 -04:00
Josh Brower 189d0f5f36 Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion-saltstack into dev 2020-06-08 13:28:46 -04:00
Josh Brower 913c1a89bf Fleet setup fixes 2020-06-08 13:28:27 -04:00
William Wernert 941ad5acf6 Merge branch 'dev' of github.com:Security-Onion-Solutions/securityonion-saltstack into dev 2020-06-08 12:12:29 -04:00
William Wernert e2c3fe3342 [fix] Add X-Forwarded-Proto to nginx configs 2020-06-08 12:12:25 -04:00
Josh Brower 35bc5f9133 Merge pull request #831 from Security-Onion-Solutions/feature/fleet-setup
Feature/fleet setup
2020-06-08 08:49:35 -04:00
Josh Brower 51f97f5ae5 Fleet setup - final fixes 2020-06-08 08:47:06 -04:00
Josh Brower 3f3990ac83 Merge remote-tracking branch 'remotes/origin/dev' into feature/fleet-setup 2020-06-08 08:30:37 -04:00
Josh Brower 950d4077f6 Update so-setup 2020-06-08 08:12:14 -04:00
Josh Brower ab6e36e00a Fleet syntax error fix 2020-06-06 13:15:44 -04:00
Josh Brower 33f21c05f7 Fleet standaline custom fqdn fixes 2020-06-06 10:03:25 -04:00
Josh Brower 88219c4827 Merge pull request #827 from Security-Onion-Solutions/feature/wlb5
Initial support - external beats
2020-06-05 10:47:56 -04:00
Josh Brower 4e4eeedb41 Initial support - external beats 2020-06-04 22:41:35 -04:00
Jason Ertel 7edf9a67c3 Ensure standalone mode supports the settings flow 2020-06-04 10:46:27 -04:00
Josh Brower 0890171527 Fixes 2020-06-04 07:51:05 -04:00
Mike Reeves 5a9030883a Rename Bro to Zeek in some whiptail menus 2020-06-03 16:44:52 -04:00
Mike Reeves f3fabcd93c Enable git 2020-06-03 16:21:45 -04:00
Josh Brower a09991d770 Fleet standalone - custom hostnames 2020-06-03 15:56:59 -04:00
Josh Brower 3d92145bb9 Fleet standalone - custom hostnames 2020-06-03 15:52:18 -04:00
Jason Ertel 970368c74e Avoid logs leaking to stdout/stderr during cron jobs 2020-06-03 09:42:44 -04:00
Jason Ertel 9f0e48e337 Send stderr to /dev/null as well, since it's already been decided this output is unsuited for the logfile based on the comment 2020-06-03 08:55:06 -04:00
Josh Brower eaacb7b71e Fleet cleanup 2020-06-03 05:54:35 -04:00
Jason Ertel e6fcf75181 Re-ordered wazuh setup to avoid agent-service failures due to missing client.keys file; Prepare for user profile settings screen support in reverse proxy 2020-06-02 17:31:51 -04:00
weslambert 014274930a Merge pull request #815 from Security-Onion-Solutions/fix/syslog_cleanup
Clean up some stuff
2020-06-02 15:32:32 -04:00
weslambert c91bc0e681 Clean up some stuff 2020-06-02 15:31:48 -04:00
weslambert 98e0f0d7d8 Merge pull request #814 from Security-Onion-Solutions/feature/syslog
Feature/syslog
2020-06-02 13:39:23 -04:00
Wes Lambert 8cac30728b update Logstash config 2020-06-02 17:36:36 +00:00
Wes Lambert 91673a5d70 Update FB config 2020-06-02 17:33:42 +00:00
Josh Brower 782c669835 Fleet standalone fixes - req 2020-06-02 12:42:14 -04:00
Josh Brower 77df87880c Fleet standalone fixes - fleet sa req 2020-06-02 10:20:29 -04:00
Josh Brower b5cc653179 Fleet standalone fixes - mainip 2020-06-02 09:39:42 -04:00
Jason Ertel 42683ddb67 always restart acng and registry containers when docker restarts 2020-06-02 09:12:25 -04:00
Jason Ertel 07c0075fc0 Upgrade containerd.io and docker-ce to match ISO rpms 2020-06-02 08:43:06 -04:00
Josh Brower b695b7f245 Fleet standalone fixes - firewall 2020-06-02 08:05:48 -04:00
Jason Ertel 9d5f4049b5 Avoid filtering NIC when it's an empty string 2020-06-02 05:52:03 -04:00
Mike Reeves 69f940fe8c Merge pull request #811 from Security-Onion-Solutions/feature/updatetool
Couple of QOL scripts
2020-06-01 20:49:42 -04:00
Mike Reeves 307cbe4b77 Couple of QOL scripts 2020-06-01 20:48:25 -04:00
Josh Brower 4b14ecf1d9 Fleet standalone fixes 2020-06-01 16:36:32 -04:00
Josh Patterson cc6a323f45 Merge pull request #810 from Security-Onion-Solutions/issue/749
Issue/749
2020-06-01 12:20:28 -04:00
m0duspwnens f5c8091fd6 remove unneeded INITIALSETUP var from addtotab 2020-06-01 12:17:52 -04:00
m0duspwnens 1737b46abb Merge remote-tracking branch 'remotes/origin/dev' into issue/749 2020-06-01 12:15:00 -04:00
Doug Burks 80d1814f10 remove event.module:zeek to make queries more generic 2020-06-01 12:00:33 -04:00
Mike Reeves b091fe07c9 Merge pull request #809 from Security-Onion-Solutions/feature/metasuri
Suricata 5 Meta Data
2020-06-01 11:05:38 -04:00
Mike Reeves 03f34404b1 Suricata 5 Meta Data 2020-06-01 11:03:43 -04:00
weslambert 551c663046 Merge pull request #808 from Security-Onion-Solutions/fix/tunnel_parents
Rename tunnel_parents
2020-06-01 09:52:55 -04:00
Wes Lambert 51f5d64ef6 Rename tunnel_parents 2020-06-01 13:51:32 +00:00
weslambert fa8b88b090 Merge pull request #806 from Security-Onion-Solutions/feature/vxlan_tunnel_id
fix naming of uid field for tunnel
2020-06-01 08:54:12 -04:00
Wes Lambert d7ce3d4719 fix naming of uid field for tunnel 2020-06-01 12:52:57 +00:00
Doug Burks f559621f00 add x509 issuer and subject groupby queries 2020-06-01 07:48:50 -04:00