Commit Graph

108 Commits

Author SHA1 Message Date
Josh Brower
a9df5d75b0 Beta3 Kibana dashboard updates 2020-06-16 10:16:31 -04:00
Josh Patterson
1f305352a0 Merge pull request #844 from Security-Onion-Solutions/quickfix/addfwrules
Quickfix/addfwrules
2020-06-12 15:04:04 -04:00
Jason Ertel
b3d2ce0e18 support applying the firewall state directly from so-firewall 2020-06-12 13:52:24 -04:00
m0duspwnens
1f0509cfd6 update so-allow for wazuh and syslog 2020-06-12 11:35:18 -04:00
Mike Reeves
032c8ca4e9 Fix Conflicts 2020-06-11 13:14:11 -04:00
Mike Reeves
a37faff850 New so-allow 2020-06-11 13:03:21 -04:00
Jason Ertel
23be399a68 Ensure host doesn't exist in both include and exclude lists; add support for port management; add support for removing host from exclude list 2020-06-10 15:19:36 -04:00
Jason Ertel
c072905717 Initial firewall management script 2020-06-10 01:18:39 -04:00
Josh Brower
3f3990ac83 Merge remote-tracking branch 'remotes/origin/dev' into feature/fleet-setup 2020-06-08 08:30:37 -04:00
Josh Brower
eaacb7b71e Fleet cleanup 2020-06-03 05:54:35 -04:00
Mike Reeves
307cbe4b77 Couple of QOL scripts 2020-06-01 20:48:25 -04:00
m0duspwnens
6db8470de7 Merge remote-tracking branch 'remotes/origin/dev' into issue/749 2020-05-29 13:09:49 -04:00
Wes Lambert
7f75050682 Add basic Zeek stats script 2020-05-28 17:54:15 +00:00
Josh Brower
aeb71bb8f0 Simplified setup script 2020-05-28 13:21:25 -04:00
weslambert
b835c2e27e Update for exact match (ex. thehive, thehive-es, thehive-cortex) 2020-05-28 13:17:31 -04:00
Josh Brower
e53e891bd6 Fleet reactor - Typo fix 2020-05-28 11:36:38 -04:00
Josh Brower
11c641fd1b Initial support - integrated Fleet setup 2020-05-27 15:34:14 -04:00
m0duspwnens
40f04ef6d0 merge with dev and fix conflicts 2020-05-27 13:54:08 -04:00
Wes Lambert
b80eb5f73b Add Hive/ES/Cortex scripts 2020-05-27 17:43:17 +00:00
m0duspwnens
446e0f6f4c Merge remote-tracking branch 'remotes/origin/dev' into issue/749 2020-05-27 10:09:36 -04:00
m0duspwnens
fafb469b5c change from default to local - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/749 2020-05-26 11:59:00 -04:00
Wes Lambert
97306d3acd rename indices 2020-05-26 14:05:33 +00:00
m0duspwnens
d0242c1da6 update references of /opt/so/saltstack to /opt/so/saltstack/default. use var default_salt_dir where appropriate - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/749 2020-05-21 10:54:47 -04:00
m0duspwnens
0a6f0efdc5 Sort so-status output alphabetically - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/747 2020-05-21 09:21:28 -04:00
Wes Lambert
228bbbea5f update config export 2020-05-18 13:16:42 +00:00
Wes Lambert
9b8cf3845a update Kibana config export 2020-05-16 15:34:33 +00:00
Wes Lambert
89527c533a update Kibana config export 2020-05-16 15:33:20 +00:00
m0duspwnens
e2244bd839 use maps for so-status - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/619 2020-05-01 13:21:11 -04:00
m0duspwnens
7e34595f99 rename docker container so-core to so-nginx - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/587 2020-04-21 15:16:08 -04:00
Wes Lambert
051167a692 add Kibana config export command 2020-04-08 16:26:13 +00:00
William Wernert
ae4db04603 [fix] so-status docker api version fix
* Change Docker api version from 2 to 1.40
2020-04-03 13:28:53 -04:00
Jason Ertel
be8398387e Support individual email or password validation 2020-04-02 15:38:30 -04:00
Jason Ertel
1cac115009 Add support for validating email address via so-user tool 2020-04-02 15:18:51 -04:00
Jason Ertel
a25c16508f Renamed auth pillar to secrets pillar; removed remnants from old auth saltstack 2020-04-02 11:24:13 -04:00
Jason Ertel
f7e9e99eae Added new soc-related saltstack files. 2020-03-30 22:15:49 -04:00
Jason Ertel
cbd710bcf2 Replaced auth system with new identity management system. 2020-03-30 19:27:56 -04:00
William Wernert
7709bfd28e [fix] Use v2 of Docker http api
Docker no longer exposes the default api path, so we need to use /v2 in our api call
2020-03-26 18:47:37 -04:00
Josh Brower
9bcba41882 Feature/Fleet-Standalone 2020-03-24 20:57:24 -04:00
Mike Reeves
b48612dd3b Update Stuff Round 2 2020-03-19 13:46:19 -04:00
Mike Reeves
73be1d0927 Update Stuff Round 1 2020-03-17 17:06:37 -04:00
Wes Lambert
81da44b85d fix Logstash Eval SLS 2020-03-15 00:32:29 +00:00
Wes Lambert
26c4d453d3 Add ES templates script 2020-03-15 00:30:59 +00:00
Wes Lambert
0bf125e88e add Node scripts 2020-03-06 13:47:21 +00:00
William Wernert
e656e5af45 [fix] so-functions and so-restart 2020-02-12 09:26:34 -05:00
Wes Lambert
0344ea7878 update Wazuh path 2020-02-12 03:34:12 +00:00
Wes Lambert
0994f598c7 update Wazuh paths 2020-02-11 13:45:28 +00:00
William Wernert
301ff77501 [fix] Jinja2 templating comparisons 2020-02-09 22:30:39 -05:00
William Wernert
2804247f88 [fix] Syntax errors in so-status 2020-02-09 22:30:36 -05:00
Josh Brower
12d3ae92e7 Logstash restart script 2020-02-06 15:35:15 -05:00
William Wernert
7c00e7c286 [feature] Final changes for so-status re: predefined container list 2020-02-06 15:25:50 -05:00