Mike Reeves
|
b2d85b843f
|
reposync
|
2023-02-14 09:00:10 -05:00 |
|
Josh Patterson
|
3b9bdecab8
|
Merge pull request #9745 from Security-Onion-Solutions/2.4/firewall
2.4/firewall
|
2023-02-08 13:26:40 -05:00 |
|
m0duspwnens
|
3d34a49e44
|
change to new local ports file
|
2023-02-08 13:21:48 -05:00 |
|
m0duspwnens
|
19f49dde75
|
recusivly copy the firewall files for setup
|
2023-02-08 13:14:08 -05:00 |
|
Josh Patterson
|
d6fb0598df
|
Merge pull request #9743 from Security-Onion-Solutions/2.4/firewall
2.4/firewall
|
2023-02-08 11:37:05 -05:00 |
|
m0duspwnens
|
31daeef30d
|
2.4 fw changes
|
2023-02-08 11:01:26 -05:00 |
|
m0duspwnens
|
342b9619b0
|
Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/firewall
|
2023-02-08 09:18:21 -05:00 |
|
m0duspwnens
|
fb7ebcac7e
|
2.4 fw changes
|
2023-02-08 09:18:05 -05:00 |
|
Doug Burks
|
291bdc0d82
|
Merge pull request #9726 from Security-Onion-Solutions/2.4/change-radio-to-menu
FIX: Minimize keystrokes and errors in Setup by changing radio lists to menus where appropriate #9725
|
2023-02-06 12:11:21 -05:00 |
|
Doug Burks
|
cd38ecb300
|
change whiptail selections from radiolist to menu where appropriate
|
2023-02-06 11:52:42 -05:00 |
|
Josh Patterson
|
22a18d8855
|
Merge pull request #9717 from Security-Onion-Solutions/2.4/firewall
2.4/firewall
|
2023-02-03 11:04:36 -05:00 |
|
m0duspwnens
|
e8a1e164aa
|
add so.version module
|
2023-02-03 10:58:08 -05:00 |
|
m0duspwnens
|
e0e094cd95
|
rename sosbip and sosrange to sobip and sorange
|
2023-02-03 10:10:51 -05:00 |
|
m0duspwnens
|
a37f0fd0c0
|
rename sosbridge to sobridge
|
2023-02-03 10:07:07 -05:00 |
|
m0duspwnens
|
6e45f1b6e1
|
Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/firewall
|
2023-02-03 09:55:50 -05:00 |
|
m0duspwnens
|
df9ef9ffc7
|
add managersearch
|
2023-02-03 09:55:33 -05:00 |
|
weslambert
|
bee5a1e9e8
|
Merge pull request #9711 from Security-Onion-Solutions/fix/so_import_pcap_suricata_metadata_disable_zeek
Only run Zeek if it is defined as the metadata engine
|
2023-02-02 13:27:35 -05:00 |
|
m0duspwnens
|
3e808a70fa
|
allow managersearch. comment out localhost allow in setup
|
2023-02-02 12:11:03 -05:00 |
|
Wes
|
bc082dff99
|
Only run Zeek if it is defined as 'mdengine'
|
2023-02-02 16:22:42 +00:00 |
|
m0duspwnens
|
33787d345b
|
Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/firewall
|
2023-02-02 10:04:01 -05:00 |
|
m0duspwnens
|
9eae31e488
|
add managersearch to allowed roles for so-firewall. fix setup error from so-firewall "Please specify a role with --role="
|
2023-02-02 10:03:22 -05:00 |
|
weslambert
|
395cbf330a
|
Merge pull request #9706 from Security-Onion-Solutions/fix/suricata_metadata
Add Suricata metadata configuration
|
2023-02-02 09:54:49 -05:00 |
|
Wes
|
5fba3c5872
|
Add Suricata metadata configuration
|
2023-02-02 14:48:01 +00:00 |
|
m0duspwnens
|
3ba64f7545
|
Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/firewall
|
2023-02-02 09:31:40 -05:00 |
|
weslambert
|
eb7b6e78b9
|
Merge pull request #9702 from Security-Onion-Solutions/fix/elastic_agent_integration_policy_disable
Disable loading of Kibana and Logstash integration policies
|
2023-02-01 16:02:56 -05:00 |
|
weslambert
|
d242050627
|
Disable loading of Kibana and Logstash logs for now since there are issues with the packages from the registry
|
2023-02-01 15:59:35 -05:00 |
|
weslambert
|
3dfa7959b3
|
Merge pull request #9698 from Security-Onion-Solutions/fix/strelka_yara_exclusion_2_4
Add 'configured_vulns_ext_vars.yar' to exclusion list
|
2023-02-01 14:38:38 -05:00 |
|
weslambert
|
2101ca60e9
|
Add 'configured_vulns_ext_vars.yar' to exclusion list
|
2023-02-01 14:25:46 -05:00 |
|
m0duspwnens
|
33668105a5
|
Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/firewall
|
2023-02-01 11:32:02 -05:00 |
|
m0duspwnens
|
d2dd68eb44
|
add global vars for managersearch
|
2023-02-01 11:31:36 -05:00 |
|
Josh Patterson
|
77749adc8f
|
Merge pull request #9691 from Security-Onion-Solutions/2.4/firewall
2.4/firewall
|
2023-01-31 17:11:57 -05:00 |
|
m0duspwnens
|
6ec086e24a
|
add influxdb as extra_hosts for grafana container
|
2023-01-31 17:10:11 -05:00 |
|
m0duspwnens
|
6f1438148f
|
allow elastic agent access
|
2023-01-31 16:54:46 -05:00 |
|
m0duspwnens
|
12bede5e77
|
Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/firewall
|
2023-01-31 16:10:50 -05:00 |
|
weslambert
|
056bcd0121
|
Merge pull request #9683 from Security-Onion-Solutions/fix/kibana_osquery_live_query_link_remove
Remove OSQuery live query link
|
2023-01-31 13:38:07 -05:00 |
|
m0duspwnens
|
8cbafb52d8
|
Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/firewall
|
2023-01-31 13:32:51 -05:00 |
|
m0duspwnens
|
16e1e297a0
|
allow elasticsearch_rest
|
2023-01-31 13:32:33 -05:00 |
|
weslambert
|
98bea0322e
|
Merge pull request #9688 from Security-Onion-Solutions/fix/elastic_agent_elasticsearch_output_typo_fix
Fix Elastic Agent Elasticsearch output typo
|
2023-01-31 12:57:38 -05:00 |
|
weslambert
|
74eed31eec
|
Change Elasticsearch output name from 'so-manager_elasticsearch2' to 'so-manager_elasticsearch'
|
2023-01-31 12:55:03 -05:00 |
|
m0duspwnens
|
aa411e2682
|
allow influxdb on manager and managersearch
|
2023-01-31 12:42:46 -05:00 |
|
weslambert
|
cbf2bd1373
|
Remove OSQuery live query link
|
2023-01-31 10:59:17 -05:00 |
|
m0duspwnens
|
0ba193c7a4
|
allow docker_registry fw
|
2023-01-31 10:55:14 -05:00 |
|
m0duspwnens
|
e09a86dc30
|
2.4 searchnode es config
|
2023-01-31 10:54:40 -05:00 |
|
m0duspwnens
|
8dc7a9da9e
|
add searchnode global vars
|
2023-01-31 10:52:35 -05:00 |
|
Doug Burks
|
acffc5ee07
|
Merge pull request #9682 from Security-Onion-Solutions/fix/suricata-dhcp-parsing-2.4
2.4: Improve Suricata DHCP parsing and dashboard
|
2023-01-31 10:18:41 -05:00 |
|
Doug Burks
|
a44d83d69b
|
Improve Suricata DHCP parsing and dashboard
|
2023-01-31 08:33:38 -05:00 |
|
weslambert
|
bde828cd4f
|
Merge pull request #9676 from Security-Onion-Solutions/fix/so-import-evtx_updates
Updates to so-import-evtx
|
2023-01-31 08:17:02 -05:00 |
|
weslambert
|
0436f885b8
|
Set values for '@timestamp' and 'event.ingested'
|
2023-01-31 08:04:49 -05:00 |
|
Wes
|
5472f53c9f
|
Remove bind mount and reference the correctly named entrypoint script
|
2023-01-30 21:24:30 +00:00 |
|
Wes
|
0156784687
|
Add EVTX integration policy for 'so-import-evtx'
|
2023-01-30 21:22:37 +00:00 |
|