Commit Graph

4504 Commits

Author SHA1 Message Date
Mike Reeves
b2ee757db2 Airgap Time 2020-09-03 10:35:12 -04:00
Mike Reeves
9745191f19 Add Airgap State 2020-09-02 16:17:44 -04:00
Mike Reeves
951fe2ac69 Create repo 2020-09-01 11:26:33 -04:00
Mike Reeves
9cff7c1427 Enable airgap functions 2020-09-01 11:24:22 -04:00
Mike Reeves
643dab12d0 Enable airgap 2020-09-01 11:09:33 -04:00
Josh Patterson
67766745a4 Merge pull request #1275 from Security-Onion-Solutions/fix/redhat
resolve issue with salt state if os is redhat
2020-09-01 10:44:59 -04:00
m0duspwnens
2fee151bff resolve issue with salt state if os is redhat 2020-09-01 10:43:21 -04:00
Jason Ertel
ff5d1cd815 Expand nginx body size limit to 2.5GB to handle 2G PCAPs from sensors 2020-09-01 10:07:28 -04:00
Doug Burks
45c0a7ac77 Kernel messages can overwrite whiptail screen #812
Kernel messages can overwrite whiptail screen #812
2020-09-01 08:55:34 -04:00
weslambert
011958a2f3 Merge pull request #1274 from Security-Onion-Solutions/fix/zeek_syslog
Ensure Zeek syslog log is enabled for Import node
2020-08-31 13:08:44 -04:00
Wes Lambert
ae3fe9e892 Ensure Zeek syslog log is enabled for Import node 2020-08-31 17:07:16 +00:00
weslambert
96f25914db Merge pull request #1273 from Security-Onion-Solutions/fix/zeek_syslog_default
Fix/zeek syslog default
2020-08-31 12:32:52 -04:00
Wes Lambert
5ed5e6603d Fix space 2020-08-31 16:32:12 +00:00
Wes Lambert
26ffc44fd1 Only enable syslog log by default in Eval mode 2020-08-31 16:30:32 +00:00
Jason Ertel
dc3b065a41 Set exec bit on new user-add scripts 2020-08-31 10:57:23 -04:00
weslambert
6350c83e05 Merge pull request #1272 from Security-Onion-Solutions/feature/wazuh_mgmt_wrappers
Add Wazuh mgmt wrappers for manage_agents and upgrade
2020-08-31 10:55:25 -04:00
Wes Lambert
46e7e121e3 Add Wazuh mgmt wrappers for manage_agents and upgrade 2020-08-31 14:54:24 +00:00
weslambert
5db70cbd59 Merge pull request #1271 from Security-Onion-Solutions/fix/remove_minio
Remove minio for now
2020-08-31 10:29:30 -04:00
Wes Lambert
6d14f2af96 Remove minio for now 2020-08-31 14:07:47 +00:00
weslambert
42bd75a1cc Merge pull request #1270 from Security-Onion-Solutions/fix/elastalert_startup
Wait for Elasticsearch indices to be queryable before starting Elasta…
2020-08-31 09:56:18 -04:00
Wes Lambert
9abbda8e04 Wait for Elasticsearch indices to be queryable before starting Elastalert container 2020-08-31 13:54:49 +00:00
Jason Ertel
189c02648d Move container status check to so-common 2020-08-31 09:52:06 -04:00
Jason Ertel
8e06f0453e Only add users to aux systems if those systems are currently running 2020-08-31 09:41:06 -04:00
Doug Burks
9680270b20 Set default monospace font to Liberation 2020-08-30 16:42:44 -04:00
Doug Burks
2f09156a02 quote filename when spawning NetworkMiner 2020-08-30 16:10:47 -04:00
Doug Burks
77b3ebdabe Hunt Events table should show ssl.server_name when searching for ssl
Hunt Events table should show ssl.server_name when searching for ssl #1267
2020-08-30 06:56:15 -04:00
Doug Burks
13ce439678 Update README 2020-08-29 06:52:26 -04:00
Doug Burks
df5ef7c956 Update so-analyst 2020-08-29 06:07:58 -04:00
Doug Burks
1e1212bf41 Update so-analyst 2020-08-29 05:59:21 -04:00
Doug Burks
c20f47ffd6 make chaosreader executable 2020-08-29 04:52:21 -04:00
Doug Burks
c21b347549 Update README 2020-08-29 04:46:00 -04:00
Doug Burks
f6f990ca9f Update README 2020-08-28 16:44:41 -04:00
Doug Burks
8344e38d91 Add files via upload 2020-08-28 16:43:28 -04:00
Josh Brower
764ba4a0e9 Merge pull request #1266 from Security-Onion-Solutions/bugfix/event.code-parsing
Set event.code to string for WEL
2020-08-28 13:49:01 -04:00
Josh Brower
b7dd14b8f0 Set event.code to string for WEL 2020-08-28 13:40:04 -04:00
Jason Ertel
3877706f20 Remove auto-start regardless of how setup was started 2020-08-28 09:10:35 -04:00
Jason Ertel
4e3e83820f Correct pillar key for thehive 2020-08-28 08:17:42 -04:00
Josh Patterson
f4dc67e32a Merge pull request #1264 from Security-Onion-Solutions/issue/1063
fix inbound for monitor traffic on standalone graphana dashboard
2020-08-27 18:25:26 -04:00
m0duspwnens
b1e7ffc173 fix inbound for monitor traffic on standalone graphana dashboard 2020-08-27 18:24:26 -04:00
Jason Ertel
a3e34bfaca Add users to Fleet, TheHive, and Cortex when adding a user to SO via so-user-add command 2020-08-27 16:58:02 -04:00
Josh Patterson
9d30b58247 Merge pull request #1262 from Security-Onion-Solutions/issue/643
remove space
2020-08-27 15:09:05 -04:00
m0duspwnens
aa60ec8e5a remove space 2020-08-27 15:07:45 -04:00
Josh Patterson
2559f740f1 Merge pull request #1260 from Security-Onion-Solutions/issue/643
Issue/643
2020-08-27 14:35:39 -04:00
m0duspwnens
dbb1390c42 move README to / 2020-08-27 14:32:51 -04:00
Mike Reeves
2b0b695ee4 Fix duplicate docker 2020-08-27 10:15:22 -04:00
Mike Reeves
dc6c0cc71c Merge pull request #1259 from Security-Onion-Solutions/issue/286
Issue/286
2020-08-27 10:13:17 -04:00
m0duspwnens
e9b7538ee8 fix a couple things, add another package 2020-08-26 17:58:27 -04:00
m0duspwnens
16c3b9539b fix a couple things, add another package 2020-08-26 17:51:04 -04:00
m0duspwnens
cc88c4c35f adding so-analyst script to create analyst workstatin 2020-08-26 17:39:11 -04:00
weslambert
509985ed07 Merge pull request #1254 from Security-Onion-Solutions/fix/sensor_clean
Cron updates
2020-08-26 11:03:03 -04:00