Commit Graph

4693 Commits

Author SHA1 Message Date
weslambert 96f25914db Merge pull request #1273 from Security-Onion-Solutions/fix/zeek_syslog_default
Fix/zeek syslog default
2020-08-31 12:32:52 -04:00
Wes Lambert 5ed5e6603d Fix space 2020-08-31 16:32:12 +00:00
Wes Lambert 26ffc44fd1 Only enable syslog log by default in Eval mode 2020-08-31 16:30:32 +00:00
Jason Ertel dc3b065a41 Set exec bit on new user-add scripts 2020-08-31 10:57:23 -04:00
weslambert 6350c83e05 Merge pull request #1272 from Security-Onion-Solutions/feature/wazuh_mgmt_wrappers
Add Wazuh mgmt wrappers for manage_agents and upgrade
2020-08-31 10:55:25 -04:00
Wes Lambert 46e7e121e3 Add Wazuh mgmt wrappers for manage_agents and upgrade 2020-08-31 14:54:24 +00:00
weslambert 5db70cbd59 Merge pull request #1271 from Security-Onion-Solutions/fix/remove_minio
Remove minio for now
2020-08-31 10:29:30 -04:00
Wes Lambert 6d14f2af96 Remove minio for now 2020-08-31 14:07:47 +00:00
weslambert 42bd75a1cc Merge pull request #1270 from Security-Onion-Solutions/fix/elastalert_startup
Wait for Elasticsearch indices to be queryable before starting Elasta…
2020-08-31 09:56:18 -04:00
Wes Lambert 9abbda8e04 Wait for Elasticsearch indices to be queryable before starting Elastalert container 2020-08-31 13:54:49 +00:00
Jason Ertel 189c02648d Move container status check to so-common 2020-08-31 09:52:06 -04:00
Jason Ertel 8e06f0453e Only add users to aux systems if those systems are currently running 2020-08-31 09:41:06 -04:00
Doug Burks 9680270b20 Set default monospace font to Liberation 2020-08-30 16:42:44 -04:00
Doug Burks 2f09156a02 quote filename when spawning NetworkMiner 2020-08-30 16:10:47 -04:00
Doug Burks 77b3ebdabe Hunt Events table should show ssl.server_name when searching for ssl
Hunt Events table should show ssl.server_name when searching for ssl #1267
2020-08-30 06:56:15 -04:00
Doug Burks 13ce439678 Update README 2020-08-29 06:52:26 -04:00
Doug Burks df5ef7c956 Update so-analyst 2020-08-29 06:07:58 -04:00
Doug Burks 1e1212bf41 Update so-analyst 2020-08-29 05:59:21 -04:00
Doug Burks c20f47ffd6 make chaosreader executable 2020-08-29 04:52:21 -04:00
Doug Burks c21b347549 Update README 2020-08-29 04:46:00 -04:00
Doug Burks f6f990ca9f Update README 2020-08-28 16:44:41 -04:00
Doug Burks 8344e38d91 Add files via upload 2020-08-28 16:43:28 -04:00
Josh Brower 764ba4a0e9 Merge pull request #1266 from Security-Onion-Solutions/bugfix/event.code-parsing
Set event.code to string for WEL
2020-08-28 13:49:01 -04:00
Josh Brower b7dd14b8f0 Set event.code to string for WEL 2020-08-28 13:40:04 -04:00
Jason Ertel 3877706f20 Remove auto-start regardless of how setup was started 2020-08-28 09:10:35 -04:00
Jason Ertel 4e3e83820f Correct pillar key for thehive 2020-08-28 08:17:42 -04:00
Josh Patterson f4dc67e32a Merge pull request #1264 from Security-Onion-Solutions/issue/1063
fix inbound for monitor traffic on standalone graphana dashboard
2020-08-27 18:25:26 -04:00
m0duspwnens b1e7ffc173 fix inbound for monitor traffic on standalone graphana dashboard 2020-08-27 18:24:26 -04:00
Jason Ertel a3e34bfaca Add users to Fleet, TheHive, and Cortex when adding a user to SO via so-user-add command 2020-08-27 16:58:02 -04:00
Josh Patterson 9d30b58247 Merge pull request #1262 from Security-Onion-Solutions/issue/643
remove space
2020-08-27 15:09:05 -04:00
m0duspwnens aa60ec8e5a remove space 2020-08-27 15:07:45 -04:00
Josh Patterson 2559f740f1 Merge pull request #1260 from Security-Onion-Solutions/issue/643
Issue/643
2020-08-27 14:35:39 -04:00
m0duspwnens dbb1390c42 move README to / 2020-08-27 14:32:51 -04:00
Mike Reeves 2b0b695ee4 Fix duplicate docker 2020-08-27 10:15:22 -04:00
Mike Reeves dc6c0cc71c Merge pull request #1259 from Security-Onion-Solutions/issue/286
Issue/286
2020-08-27 10:13:17 -04:00
m0duspwnens e9b7538ee8 fix a couple things, add another package 2020-08-26 17:58:27 -04:00
m0duspwnens 16c3b9539b fix a couple things, add another package 2020-08-26 17:51:04 -04:00
m0duspwnens cc88c4c35f adding so-analyst script to create analyst workstatin 2020-08-26 17:39:11 -04:00
weslambert 509985ed07 Merge pull request #1254 from Security-Onion-Solutions/fix/sensor_clean
Cron updates
2020-08-26 11:03:03 -04:00
weslambert 000c2abb33 Update timing for so-yara-update 2020-08-26 11:02:33 -04:00
Mike Reeves 19130b563d Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into issue/286 2020-08-26 11:01:01 -04:00
Mike Reeves e1a52a4921 Update core counts if heavy node or SA 2020-08-26 11:00:23 -04:00
Mike Reeves 86584d90d7 Merge pull request #1253 from Security-Onion-Solutions/issue/1078
Issue/1078 Update Docker
2020-08-26 10:36:34 -04:00
Mike Reeves e993397173 Update docker to latest version 2020-08-26 10:35:17 -04:00
Josh Brower c38f4ad4ae Merge pull request #1251 from Security-Onion-Solutions/feature/fleet3.1
Upgraded to Fleet 3.1
2020-08-26 06:14:34 -04:00
Josh Brower 67e0a219e6 Upgraded to Fleet 3.1 2020-08-26 06:13:45 -04:00
Josh Brower b6ebcf6551 Merge pull request #1250 from Security-Onion-Solutions/feature/es-security-field
Adds new .security analyzed subfield
2020-08-26 05:12:23 -04:00
Josh Brower 1cf7301db4 Adds new .security analyzed subfield 2020-08-26 05:11:42 -04:00
Jason Ertel 3122280bd5 Update version to 2.2.0-rc.3 2020-08-25 15:16:09 -04:00
weslambert ce49e050bc Update timing for sensor clean cron 2020-08-25 12:14:43 -04:00