Commit Graph

3740 Commits

Author SHA1 Message Date
Doug Burks
85aaa71006 FIX: Improve DHCP leases query in Hunt #3395 2021-03-11 08:01:27 -05:00
Mike Reeves
18203513ab Update cert location for eval.import 2021-03-10 09:14:14 -05:00
Mike Reeves
2e01330e1b Update 9101_output_osquery_livequery.conf.jinja 2021-03-09 13:15:04 -05:00
Mike Reeves
734d25b1ac Merge pull request #3361 from Security-Onion-Solutions/nomorefeatures
Make saved objects less hacky
2021-03-09 10:05:23 -05:00
Mike Reeves
49258a13a3 Make saved objects less hacky 2021-03-09 10:03:29 -05:00
Josh Brower
00da549430 Merge pull request #3358 from Security-Onion-Solutions/delta
FEATURE: Initial support for viewing Osquery Live Query results in Hunt
2021-03-09 09:18:57 -05:00
Jason Ertel
b1777ff10f Merge pull request #3357 from Security-Onion-Solutions/nomorefeatures
SSL with Elastic Security
2021-03-08 21:22:30 -05:00
Mike Reeves
1ecb079066 Fix Kibana Script for loading dashboards 2021-03-08 17:36:07 -05:00
Josh Brower
fe8788c09a Merge remote-tracking branch 'remotes/origin/dev' into delta 2021-03-08 12:56:47 -05:00
Jason Ertel
84c152e233 fix: Sensors can temporarily show offline while processing large PCAP jobs. Resolves #3279. 2021-03-08 12:05:44 -05:00
Mike Reeves
bf4ac2a312 Fix some merge conflicts 2021-03-08 11:43:24 -05:00
Josh Brower
19b3c7bb07 Merge pull request #3339 from Security-Onion-Solutions/feature/live_query-hunt
Feature/live query hunt
2021-03-08 08:31:25 -05:00
Jason Ertel
61a7efeeab fix: syntax error in reserved ports configuration; ensure ports are reserved prior to setup 2021-03-05 10:54:01 -05:00
Josh Brower
548f67ca6f Initial support for Live Queries in Hunt 2021-03-04 18:21:13 -05:00
Mike Reeves
c2b347e4bb Security Enable for only nodes and heavy 2021-03-04 10:52:01 -05:00
Mike Reeves
a0a8d12526 Enable SSL and Features 2021-03-04 10:08:28 -05:00
Mike Reeves
49371a1d6a fix elastic output for ssl 2021-03-03 14:30:45 -05:00
Mike Reeves
bf4249d28b fix elastalert verification 2021-03-03 14:16:10 -05:00
Mike Reeves
e0538417f1 fix http.wait 2021-03-03 14:06:35 -05:00
doug
d39b3280c8 FIX: Custom Kibana settings are not being applied properly on upgrades #3254 2021-03-03 14:04:32 -05:00
Mike Reeves
6c7111cd0a turn off verification mode for ES 2021-03-03 13:42:04 -05:00
Mike Reeves
4de62c878c turn on elastic security 2021-03-03 12:51:29 -05:00
Mike Reeves
4f34eca5b9 remove unused script 2021-03-03 10:32:23 -05:00
Mike Reeves
07b5cc3d1d Fix https for rw indicies script 2021-03-03 10:29:41 -05:00
Mike Reeves
4f867e5375 Fix all scripts for ssl elastic 2021-03-03 10:02:23 -05:00
Mike Reeves
e0d9212e55 Make https default for all things 2021-03-02 14:01:05 -05:00
Mike Reeves
80574d3c20 Make https default for all things 2021-03-02 13:59:43 -05:00
Mike Reeves
bfd05a8cfc Change to https for elastic connections 2021-03-02 11:32:29 -05:00
Mike Reeves
3219f4cd12 Remove Features Option 2021-03-02 11:04:50 -05:00
m0duspwnens
3983e08fe5 exclude zeekcaptureloss when suricata metadata selected https://github.com/Security-Onion-Solutions/securityonion/issues/3206 2021-03-01 13:31:05 -05:00
William Wernert
be7dcdb442 Merge branch 'master' into release-merge-fix
# Conflicts:
#	README.md
#	VERIFY_ISO.md
#	VERSION
#	salt/docker_clean/init.sls
#	salt/soc/files/soc/changes.json
2021-03-01 10:45:51 -05:00
Jason Ertel
1ae46b82ec Update changes for 2.3.30 2021-03-01 09:58:39 -05:00
William Wernert
6113bcc261 [fix] Increase max integer value 2021-03-01 09:16:51 -05:00
Jason Ertel
7451aa990b Improve formatting of changes list 2021-02-27 08:14:44 -05:00
Jason Ertel
9631327c71 Add changes.json for 2.3.30 2021-02-26 18:11:13 -05:00
m0duspwnens
b4c1c56e72 Merge remote-tracking branch 'remotes/origin/dev' into salt-3002.5 2021-02-26 08:38:02 -05:00
Josh Brower
5678e66b39 Fix so-playbook-sigma-refresh 2021-02-26 08:33:24 -05:00
Josh Brower
b8137214e4 Initial Support - Live Query to Hunt 2021-02-26 08:08:09 -05:00
m0duspwnens
9fa625189f upgrade to salt 3002.5 https://github.com/Security-Onion-Solutions/securityonion/issues/3147 2021-02-25 20:07:29 -05:00
Mike Reeves
e06ca75677 Merge pull request #3144 from Security-Onion-Solutions/interfaces
Don't disable NICs
2021-02-25 17:28:47 -05:00
Mike Reeves
a47a3d51c9 Merge pull request #3139 from Security-Onion-Solutions/feature/soup-log_size_limit
Show log_size_limit message at end of soup instead of during
2021-02-25 17:10:38 -05:00
Josh Patterson
8a0e0e88e0 Merge pull request #3142 from Security-Onion-Solutions/issue/3130
stop zeek state.db from getting owned by root
2021-02-25 15:01:20 -05:00
Mike Reeves
51e8839daf Inverse NIC offload 2021-02-25 11:46:00 -05:00
m0duspwnens
fcd3f81400 fix quotes 2021-02-25 11:16:53 -05:00
m0duspwnens
c8213fa3d4 change docker exec 2021-02-25 11:07:54 -05:00
m0duspwnens
add66e750e forgot to add -c 2021-02-25 10:49:09 -05:00
William Wernert
6a097beaff Show log_size_limit message at end of soup instead of during 2021-02-25 10:47:29 -05:00
m0duspwnens
d52abcbcbd ensure zeekctl is run as user zeek https://github.com/Security-Onion-Solutions/securityonion/issues/3130 2021-02-25 09:58:07 -05:00
Doug Burks
c18c865764 Improve Hunt queries for ssh and tunnel #3128 2021-02-25 09:23:19 -05:00
Doug Burks
ef1e296415 Improve Hunt queries for ssh and tunnel #3128 2021-02-25 08:52:34 -05:00