Commit Graph

2563 Commits

Author SHA1 Message Date
Josh Brower
3ec1b1db71 Merge pull request #1154 from Security-Onion-Solutions/feature/playbook-fixes
More Playbook Fixes - Issue #1064
2020-08-07 13:36:38 -04:00
Josh Brower
a8b980b6a7 More Playbook Fixes - Issue #1064 2020-08-07 13:35:43 -04:00
m0duspwnens
fce22c1cc4 Merge remote-tracking branch 'remotes/origin/dev' into issue/1049 2020-08-07 10:27:11 -04:00
Mike Reeves
80550b0d76 Merge pull request #1151 from Security-Onion-Solutions/feature/minio
Feature/minio
2020-08-06 15:45:27 -04:00
Josh Brower
c3da302353 Merge pull request #1150 from Security-Onion-Solutions/feature/playbook-fixes
Simplify elastalert rules
2020-08-06 15:45:06 -04:00
Josh Brower
ddd099233a Playbook Fixes - Issue #1064 2020-08-06 15:43:45 -04:00
Mike Reeves
bbdaee28ed Add upload queue thread 2020-08-06 15:41:10 -04:00
Jason Ertel
31fd0b6407 Update the Hunt event fields lookups to reflect the latest ingest configs 2020-08-06 14:59:39 -04:00
Josh Brower
4f9ef89098 Simplify elastalert rules 2020-08-06 14:30:44 -04:00
Josh Brower
15efe77e06 Ingest Parsing Update for Sysmon/WEL 2020-08-06 13:11:47 -04:00
Mike Reeves
4936da9b5d Merge pull request #1146 from Security-Onion-Solutions/feature/minio
Feature/minio
2020-08-05 23:01:58 -04:00
Mike Reeves
4e40615e51 Add tuneable to the global pillar 2020-08-05 22:47:12 -04:00
Mike Reeves
d9b1127308 Switch to gzip encoding 2020-08-05 22:36:23 -04:00
m0duspwnens
d7801acea5 add mode 1 2020-08-05 17:09:41 -04:00
Mike Reeves
633c100ace final logstash tweaks 2020-08-05 16:40:21 -04:00
Jason Ertel
30ff6d2b93 Update event fields to reflect new ECS terms - WIP 2020-08-05 16:28:36 -04:00
m0duspwnens
66ca7b266c first commit of importpcap node mode code, kek 2020-08-05 14:44:23 -04:00
Mike Reeves
cd766753eb Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into feature/minio 2020-08-05 14:34:22 -04:00
Mike Reeves
95cae2f17a SSL path for logstash 2020-08-05 14:14:35 -04:00
Mike Reeves
e30746c5ca Final minio fix 2020-08-05 14:12:06 -04:00
Mike Reeves
734f2979d2 add ca.crt to lgostash docker bind 2020-08-04 23:20:51 -04:00
Mike Reeves
1855eeaa13 fix cert name 2020-08-04 23:09:08 -04:00
Mike Reeves
970ee195a1 use hostname so TLS will work 2020-08-04 23:08:33 -04:00
Mike Reeves
58872c9b48 enable ssl logstash 2020-08-04 22:40:59 -04:00
Mike Reeves
a765790d6c fix minio container name 2020-08-04 22:37:04 -04:00
Mike Reeves
a733dceb18 enable ssl minio 2020-08-04 22:33:40 -04:00
Mike Reeves
5d4a0c53b5 add ssl cert for minio 2020-08-04 21:29:07 -04:00
Mike Reeves
61ff944087 add tmp to survive restarts 2020-08-04 18:18:06 -04:00
Mike Reeves
a2e5dca065 Fix output pillar for minio 2020-08-04 18:02:54 -04:00
Mike Reeves
38d0f519ce Fix output pillar for minio 2020-08-04 18:00:05 -04:00
Mike Reeves
9c5a969c2e Fix minio init 2020-08-04 17:18:09 -04:00
Mike Reeves
fd039b3008 Fix top file for minio 2020-08-04 17:11:20 -04:00
Mike Reeves
c56ead08e9 add so minio docker 2020-08-04 16:28:50 -04:00
Mike Reeves
407160b729 Update changes.json 2020-08-04 16:23:03 -04:00
Mike Reeves
24ed92c9dc minio and change to global 2020-08-04 15:54:03 -04:00
Mike Reeves
549bf7ba19 Activate minio 2020-08-04 10:17:43 -04:00
Jason Ertel
d1641aa0d8 chown /var/ossec dir to match the needful user/group ownership for ossec-agentd 2020-08-03 15:49:21 -04:00
Josh Patterson
51934d6e5f Merge pull request #1137 from Security-Onion-Solutions/issue/1091
iunstall saltstack 3001 during setup
2020-08-03 11:39:44 -04:00
m0duspwnens
fb887f7d9e iunstall saltstack 3001 during setup 2020-08-03 10:47:24 -04:00
Josh Brower
4d66d37ac5 Merge branch 'dev' into feature/launcher-update 2020-07-31 16:07:33 -04:00
Josh Brower
d971d07720 Osquery & WLB Parsing Update for WEL & Sysmon 2020-07-31 16:06:15 -04:00
m0duspwnens
b3b67ff2a5 Merge remote-tracking branch 'remotes/origin/dev' into issue/1091 2020-07-31 13:50:11 -04:00
m0duspwnens
d16d2b6551 full path to salt bootstrap 2020-07-31 13:42:06 -04:00
m0duspwnens
e3581bb76e change to salt-common 2020-07-31 13:36:21 -04:00
m0duspwnens
13c9fa3089 test minion upgrade at end 2020-07-31 13:32:12 -04:00
m0duspwnens
1e1d6a395d cant get grains.filter_by to work for some reason 2020-07-31 13:25:37 -04:00
m0duspwnens
d7ad2fbfd7 move include 2020-07-31 13:17:56 -04:00
m0duspwnens
dd865f6a68 change map 2020-07-31 13:10:37 -04:00
m0duspwnens
173f945fc0 remove comma 2020-07-31 13:01:37 -04:00
m0duspwnens
d6f89cb09a fix ubuntu salt-common package name 2020-07-31 12:37:19 -04:00