Mike Reeves
|
a4672dedee
|
Update README.md
|
2020-07-15 18:17:05 -04:00 |
|
Mike Reeves
|
473606371a
|
Fix Features Download
|
2020-07-15 17:49:13 -04:00 |
|
Mike Reeves
|
d71dc89b13
|
New SOUP
|
2020-07-15 17:46:33 -04:00 |
|
Jason Ertel
|
9781d8d0e7
|
Ensure permissions are consistently applied to all imported PCAP files
|
2020-07-15 13:53:28 -04:00 |
|
Jason Ertel
|
0a976861f3
|
Dynamically set sensor checkin interval; allow overrides if var is preset
|
2020-07-15 13:22:14 -04:00 |
|
Josh Brower
|
80e081e828
|
Merge pull request #1010 from Security-Onion-Solutions/bugfix/playbook-anonymous-perms
Playbook anonymous perms fix
|
2020-07-15 12:40:47 -04:00 |
|
Josh Brower
|
d11ef08961
|
Playbook anonymous perms fix
|
2020-07-15 12:37:04 -04:00 |
|
Jason Ertel
|
3c42f50e99
|
Ensure whiptail success/summary screen is final step before reboot
|
2020-07-15 11:12:48 -04:00 |
|
Josh Patterson
|
83428d4785
|
Merge pull request #1009 from Security-Onion-Solutions/quickfix/lstoes
load templates for es for eval
|
2020-07-15 08:32:50 -04:00 |
|
m0duspwnens
|
e4fff05dbc
|
load templates for es for eval
|
2020-07-15 08:30:43 -04:00 |
|
Jason Ertel
|
9dc1151347
|
Imported logs are sent to so-import index on eval installations
|
2020-07-14 22:59:42 -04:00 |
|
Jason Ertel
|
b53ce392ef
|
Improve grammer of summary screen in whiptail
|
2020-07-14 22:45:38 -04:00 |
|
Jason Ertel
|
c0960e58e8
|
Improve grammer of so-allow input prompt
|
2020-07-14 19:42:53 -04:00 |
|
Josh Patterson
|
549916306c
|
Merge pull request #1008 from Security-Onion-Solutions/quickfix/lstoes
Quickfix/lstoes
|
2020-07-14 17:37:19 -04:00 |
|
m0duspwnens
|
5cf71596b2
|
add curlys
|
2020-07-14 17:36:52 -04:00 |
|
Jason Ertel
|
acb800d1c9
|
Using static UID for Grafana overview dashboard to allow SOC to directly link to those dashboards
|
2020-07-14 17:36:30 -04:00 |
|
Jason Ertel
|
9bbbaa485c
|
Switch PM to AM since we want to span midnight to midnight
|
2020-07-14 17:36:30 -04:00 |
|
m0duspwnens
|
acaec6c125
|
remove recurse causing issues
|
2020-07-14 17:12:29 -04:00 |
|
Josh Brower
|
e7e1982862
|
Merge pull request #1007 from Security-Onion-Solutions/bugfix/ingest-parsing
Parsing & Hunt query updates
|
2020-07-14 17:00:04 -04:00 |
|
Josh Brower
|
8647944ae6
|
Parsing & Hunt query updates
|
2020-07-14 16:59:06 -04:00 |
|
Mike Reeves
|
55056f3193
|
Merge pull request #1006 from Security-Onion-Solutions/fix/perms
Change opt/so perms
|
2020-07-14 16:19:02 -04:00 |
|
m0duspwnens
|
57bf23d83c
|
move templates from logstash to elasticsearch
|
2020-07-14 16:07:46 -04:00 |
|
Doug Burks
|
a1e6a85a68
|
explicitly set Suricata timestamp timezone to UTC
|
2020-07-14 15:49:46 -04:00 |
|
weslambert
|
7a36803e2c
|
Merge pull request #1002 from Security-Onion-Solutions/fix/strelka_observer
Add observer name for Strelka events
|
2020-07-14 13:39:52 -04:00 |
|
Wes Lambert
|
f9df39977b
|
Add observer name for Strelka events
|
2020-07-14 17:38:43 +00:00 |
|
weslambert
|
7ed902c0ae
|
Merge pull request #1001 from Security-Onion-Solutions/fix/suricata_timestamp
Convert message timestamp to @timestamp
|
2020-07-14 13:34:58 -04:00 |
|
Josh Brower
|
47388fa98d
|
Merge pull request #998 from Security-Onion-Solutions/bugfix/fleet-soimage-fix
Fleet reactor fix
|
2020-07-14 13:06:52 -04:00 |
|
Josh Brower
|
ba8395fc11
|
Fleet reactor fix
|
2020-07-14 13:04:29 -04:00 |
|
William Wernert
|
3df5904269
|
Merge pull request #979 from Security-Onion-Solutions/feature/setup
Feature/setup
|
2020-07-14 11:17:03 -04:00 |
|
William Wernert
|
caf9e3f75a
|
[fix] Redirect hive_init output to log
|
2020-07-14 11:13:50 -04:00 |
|
William Wernert
|
ad3c4c4950
|
[fix] master -> manager
|
2020-07-14 11:09:12 -04:00 |
|
Mike Reeves
|
57cd2cdbeb
|
Change opt/so perms
|
2020-07-14 10:37:49 -04:00 |
|
William Wernert
|
4ab90a9a30
|
[fix] Move redirect var to function after $MAINIP has been set
|
2020-07-14 10:12:51 -04:00 |
|
Mike Reeves
|
f2d9abf1a5
|
Merge pull request #996 from Security-Onion-Solutions/fix/curator
Add all actions to cron
|
2020-07-14 10:05:27 -04:00 |
|
Mike Reeves
|
e404a41d8a
|
Add all actions to cron
|
2020-07-14 10:04:15 -04:00 |
|
Mike Reeves
|
15be31af6d
|
Merge pull request #995 from Security-Onion-Solutions/fix/curator
Fix spelling error in actions
|
2020-07-14 09:43:41 -04:00 |
|
Jason Ertel
|
67f2edce28
|
Resolve merge conflict that reverted import URL back to Kibana
|
2020-07-14 09:40:16 -04:00 |
|
Mike Reeves
|
d4e6189f6e
|
Fix spelling error in actions
|
2020-07-14 09:39:56 -04:00 |
|
Wes Lambert
|
d6afde90b0
|
Convert message timestamp to @timestamp
|
2020-07-14 13:37:00 +00:00 |
|
Josh Brower
|
0c9c66f6e1
|
Merge pull request #993 from Security-Onion-Solutions/bugfix/playbook-init
Bugfix/playbook init
|
2020-07-14 09:14:56 -04:00 |
|
Josh Brower
|
2c72940010
|
Playbook db init fix
|
2020-07-14 09:09:55 -04:00 |
|
Josh Brower
|
b884e09e7a
|
Playbook db init fix
|
2020-07-14 09:09:47 -04:00 |
|
William Wernert
|
178ac79da8
|
[refactor] Set $REDIRECTIT outside of subshell
|
2020-07-14 09:05:09 -04:00 |
|
Jason Ertel
|
09c460dbe9
|
Switch to final image repository prefix 'securityonion' for RC1
|
2020-07-14 00:45:20 -04:00 |
|
Jason Ertel
|
d75d64c8ed
|
Mount imported pcap dirs into sensoroni container for imported PCAP pivots
|
2020-07-13 21:03:47 -04:00 |
|
Jason Ertel
|
8f66a27f07
|
Refactor image repository to a single variable
|
2020-07-13 18:26:43 -04:00 |
|
Jason Ertel
|
f67f0679ae
|
Add new so-pcaptools image to docker list for network install
|
2020-07-13 16:02:22 -04:00 |
|
William Wernert
|
aa4d435020
|
[fix] Don't run so-allow before setup complete menu
|
2020-07-13 15:21:05 -04:00 |
|
William Wernert
|
81c8185cb5
|
[refactor] Delete check for network install since we check /nsm now
|
2020-07-13 14:53:47 -04:00 |
|
William Wernert
|
1cf0732991
|
Merge branch 'dev' into feature/setup
# Conflicts:
# setup/so-setup
|
2020-07-13 14:35:24 -04:00 |
|