Josh Patterson
|
53ff87b0ee
|
Merge pull request #1312 from Security-Onion-Solutions/issue/1281
add elasticsearch state to top for manager node
|
2020-09-10 12:47:05 -04:00 |
|
m0duspwnens
|
bc420d4a02
|
add
|
2020-09-10 11:57:15 -04:00 |
|
Josh Patterson
|
ca26548b2c
|
Merge pull request #1310 from Security-Onion-Solutions/issue/1281
Issue/1281
|
2020-09-10 10:08:25 -04:00 |
|
m0duspwnens
|
0ed9c65646
|
remove logic from fleet state to only run if in top
|
2020-09-10 10:07:05 -04:00 |
|
Doug Burks
|
8c280221da
|
Hunt: Fix Intel groupby #1131
|
2020-09-10 07:00:54 -04:00 |
|
Doug Burks
|
24c325e9a1
|
Fix Elasticsearch parsing for Zeek Intel Indicator #1309
|
2020-09-10 06:41:19 -04:00 |
|
Josh Brower
|
56587f0df5
|
Merge pull request #1308 from Security-Onion-Solutions/feature/wel-ingest
Add event.category to WEL
|
2020-09-10 06:16:56 -04:00 |
|
Josh Brower
|
c3b2d98ffb
|
Add event.category to WEL
|
2020-09-10 06:15:30 -04:00 |
|
Doug Burks
|
7161a662aa
|
improve Wazuh support in Hunt
|
2020-09-10 06:03:33 -04:00 |
|
Mike Reeves
|
5d4e8925a3
|
Add Firewall Logic
|
2020-09-09 21:16:40 -04:00 |
|
Mike Reeves
|
45b11b2321
|
Fix Rulecat
|
2020-09-09 18:38:07 -04:00 |
|
Doug Burks
|
d18c498574
|
Update so-features-enable
|
2020-09-09 17:32:42 -04:00 |
|
m0duspwnens
|
09cc8ae1fb
|
fail the state if it isnt in top
|
2020-09-09 16:48:50 -04:00 |
|
m0duspwnens
|
01c9f7b2ae
|
merge with dev and resolve conflicts
|
2020-09-09 16:23:36 -04:00 |
|
Mike Reeves
|
7ebf93fcb5
|
IDSTools Overhaul
|
2020-09-09 15:53:32 -04:00 |
|
Josh Patterson
|
1e32b32659
|
Merge pull request #1302 from Security-Onion-Solutions/fix/sostatus
Fix/sostatus
|
2020-09-09 15:07:12 -04:00 |
|
m0duspwnens
|
39f200f565
|
fix whitespace
|
2020-09-09 14:59:21 -04:00 |
|
Mike Reeves
|
a77532c1d8
|
Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into dev
|
2020-09-09 14:57:17 -04:00 |
|
Mike Reeves
|
04f4539385
|
Fix Airgap Repo Name
|
2020-09-09 14:57:10 -04:00 |
|
m0duspwnens
|
b0c526364f
|
handle strelka
|
2020-09-09 14:55:54 -04:00 |
|
m0duspwnens
|
921262b9a5
|
prevent duplicate containers for so-stauts
|
2020-09-09 14:07:38 -04:00 |
|
Jason Ertel
|
a5b87850df
|
Remove user sync between SOC and Cortex due to the unnecesary complexities involved with this style of integration
|
2020-09-09 14:07:36 -04:00 |
|
m0duspwnens
|
05d736d2df
|
handle strelka
|
2020-09-09 14:00:58 -04:00 |
|
m0duspwnens
|
918d9cf00f
|
handle strelka
|
2020-09-09 13:57:53 -04:00 |
|
m0duspwnens
|
3433b90029
|
fix so-status for strelka and wazuh
|
2020-09-09 13:53:10 -04:00 |
|
Doug Burks
|
82b582540e
|
Add period
|
2020-09-09 12:56:19 -04:00 |
|
Doug Burks
|
90ba1be978
|
Improve formatting of NIDS selection screen
|
2020-09-09 12:55:14 -04:00 |
|
m0duspwnens
|
e84507c386
|
Merge remote-tracking branch 'remotes/origin/dev' into fix/sostatus
|
2020-09-09 12:51:01 -04:00 |
|
m0duspwnens
|
9ee9a199b1
|
predefine each component as 0 to fix issues with it being unset
|
2020-09-09 12:50:22 -04:00 |
|
Jason Ertel
|
fc4ad1d556
|
Add Google search quick action to Hunt; Change VirusTotal quick action to be applicable to all field values
|
2020-09-09 12:22:38 -04:00 |
|
Jason Ertel
|
9babc445ce
|
Add Google search quick action to Hunt; Change VirusTotal quick action to be applicable to all field values
|
2020-09-09 12:07:23 -04:00 |
|
Mike Reeves
|
90feb503ce
|
Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into dev
|
2020-09-09 10:54:53 -04:00 |
|
Mike Reeves
|
426257443a
|
Final airgap tweaks
|
2020-09-09 10:54:47 -04:00 |
|
Doug Burks
|
eaf3281ab7
|
Remove Suricata version numbers from Setup screens #1300
https://github.com/Security-Onion-Solutions/securityonion/issues/1300
|
2020-09-09 10:43:41 -04:00 |
|
Josh Patterson
|
c2398f966b
|
Merge pull request #1295 from Security-Onion-Solutions/fix/salt-ca-ssl
Fix/salt ca ssl
|
2020-09-09 10:36:54 -04:00 |
|
m0duspwnens
|
7facff2b7d
|
change from cmd.run to cp.get_file_str
|
2020-09-09 10:34:53 -04:00 |
|
Jason Ertel
|
ad05e75ce7
|
Add new quick actions to SOC config template
|
2020-09-09 00:46:23 -04:00 |
|
Mike Reeves
|
7d524a0723
|
Add Firewall Rule for yum and airgap
|
2020-09-08 18:51:14 -04:00 |
|
Josh Patterson
|
d7016b4557
|
Merge pull request #1298 from Security-Onion-Solutions/issue/1291
Issue/1291
|
2020-09-08 17:40:33 -04:00 |
|
m0duspwnens
|
da34222931
|
makedirs
|
2020-09-08 17:36:27 -04:00 |
|
m0duspwnens
|
eeb6c3128b
|
add salt.master state to manager nodes
|
2020-09-08 17:27:13 -04:00 |
|
m0duspwnens
|
da3d0948b4
|
creating engine to watch the health of the salt mine
|
2020-09-08 16:49:38 -04:00 |
|
Jason Ertel
|
710a2be422
|
Add new so-user-enable script and change so-user-disable to call 'so-user disable' instead of deleting the SOC user
|
2020-09-08 16:24:18 -04:00 |
|
Mike Reeves
|
7c41c31359
|
Fix airgap statement
|
2020-09-08 14:48:37 -04:00 |
|
Mike Reeves
|
7371f9236e
|
Update top.sls
|
2020-09-08 14:18:56 -04:00 |
|
Mike Reeves
|
1aea3f4f85
|
Merge pull request #1297 from Security-Onion-Solutions/experimental
Add Airgap code
|
2020-09-08 09:26:41 -04:00 |
|
Doug Burks
|
f8ebed43d7
|
fix spacing
|
2020-09-07 04:45:26 -04:00 |
|
Doug Burks
|
f5916e26a2
|
read ca.crt from filesystem when possible
|
2020-09-07 04:42:11 -04:00 |
|
weslambert
|
b6b52671e2
|
Merge pull request #1294 from Security-Onion-Solutions/fix/wazuh_agent_name
Fix typo
|
2020-09-05 08:17:09 -04:00 |
|
Wes Lambert
|
f9884606df
|
Fix typo
|
2020-09-05 12:15:55 +00:00 |
|