1421 Commits

Author	SHA1	Message	Date
Doug Burks	a96825f43e	Update soup for 2.3.210	2023-01-30 09:16:00 -05:00
Doug Burks	672cab858e	Continue even if thehive errors	2023-01-12 12:48:16 -05:00
Doug Burks	a4bae77973	Merge pull request #9271 from Njinx/dev ... so-status runs some code before checking for root privileges	2023-01-04 16:05:34 -05:00
doug	7dcdcc18a5	fix so-common references	2023-01-04 14:28:47 -05:00
doug	3482df5ee1	fix jinja whitespace	2023-01-04 13:33:51 -05:00
doug	a67a254edc	update Copyright year	2023-01-04 12:44:18 -05:00
Jason Ertel	87cebedc85	Backup the new Kratos location	2022-12-14 14:12:47 -05:00
Jason Ertel	a7a15117f0	Improve soup wording when the script itself needs updated	2022-12-14 12:03:47 -05:00
Jason Ertel	865ba4264b	Stop backing up kratos since it now lives in /nsm. Ensure kratos is removed when re-installing.	2022-12-14 10:57:24 -05:00
Jason Ertel	6985b0ab27	Move kratos DB to /nsm	2022-12-14 10:50:24 -05:00
Doug Burks	aa08803f03	FIX: so-import utilities should hyperlink to dashboards #9373	2022-12-13 13:23:27 -05:00
Doug Burks	bb346d531d	FIX: so-import utilities should hyperlink to dashboards #9373	2022-12-13 13:22:53 -05:00
Doug Burks	6c057d0b0a	FIX: so-import utilities should hyperlink to dashboards #9373	2022-12-13 12:43:54 -05:00
Doug Burks	47e43e53d9	FIX: so-import utilities should hyperlink to dashboards #9373	2022-12-13 12:43:10 -05:00
Ben Allen	a1b2c28a42	Check privileges much earlier	2022-12-02 14:08:22 -05:00
Doug Burks	7184b9cb25	disable ecat_arp_info by default in so-zeek-logs	2022-12-01 07:18:05 -05:00
Mike Reeves	571ac4edec	Update soup	2022-11-29 18:36:47 -05:00
Wes	16cd1080be	Add dnp3_control reference in various places	2022-11-29 17:23:37 +00:00
Doug Burks	b06e9e8477	add new zeek opcua logs to so-zeek-logs	2022-11-26 18:44:28 -05:00
Doug Burks	ec0cf71c3f	add opcua_binary_opensecure_channel to so-zeek-logs	2022-11-26 17:00:32 -05:00
Doug Burks	33a478ff59	fix zeek ics logs in so-zeek-logs	2022-11-25 09:40:48 -05:00
Doug Burks	2ada4712bc	fix zeek ics logs in so-zeek-logs	2022-11-25 09:37:52 -05:00
Doug Burks	fad6c46e7c	fix zeek ics logs in so-zeek-logs	2022-11-25 09:35:00 -05:00
Doug Burks	9f5e75b302	add software to so-zeek-logs	2022-11-25 07:27:50 -05:00
Doug Burks	0536d174fe	Fix opcua_binary reference in so-zeek-logs	2022-11-21 14:03:22 -05:00
Doug Burks	a54bb2bad4	Remove descriptions from so-zeek-logs	2022-11-21 13:23:53 -05:00
lock-wire	f80c8b89e4	Shorten Log Descriptions	2022-11-21 09:49:31 -07:00
lock-wire	1b8e546045	Add s7comm,tds,stun,profinet,wireguard	2022-11-16 21:41:02 -06:00
lock-wire	8dc08f66fd	Merge branch 'foxtrot' of https://github.com/Security-Onion-Solutions/securityonion into foxtrot ... merge remote	2022-11-11 12:18:02 -08:00
lock-wire	73b1e5949b	Add ecat, enip, cip, and opcua	2022-11-11 12:15:54 -08:00
Jason Ertel	595a95fdf5	merge conflicts	2022-11-10 16:47:52 -05:00
Mike Reeves	4acd9f8816	Update soup	2022-11-09 10:10:52 -05:00
Mike Reeves	a7417a7242	Update soup	2022-11-08 14:48:48 -05:00
Mike Reeves	16d8e9e5a0	Fix soup and perms updates	2022-11-01 09:05:26 -04:00
Mike Reeves	ee1f55361e	Add soup and perms updates	2022-10-31 16:33:38 -04:00
Mike Reeves	bd7e12f682	Merge pull request #8952 from Njinx/dev ... FEATURE: so-pcap-export can run without needing to be attached to a TTY	2022-10-25 14:38:48 -04:00
Jason Ertel	05e271af47	update soup for 2.3.181	2022-10-21 11:52:54 -04:00
Ben Allen	f13f05eb94	Run without needing to be attached to a TTY	2022-10-19 14:11:11 -04:00
Doug Burks	7401008523	Update soup for 2.3.180	2022-10-11 12:58:37 -04:00
Mike Reeves	b8355b3a03	Update soup	2022-09-22 09:10:12 -04:00
Mike Reeves	e62bebeafe	Update soup	2022-08-29 09:39:41 -04:00
Mike Reeves	30b9868de1	Update soup	2022-08-29 09:32:46 -04:00
weslambert	f00d9074ff	Allow local modification acceptance prompt to be skipped when passing 'skip-prompt' as a parameter value to check_local_mods() function	2022-08-19 16:07:14 -04:00
weslambert	fbf0803906	Update verbiage around major Elasticsearch version and not requiring Elastalert index maintenance	2022-08-18 09:16:22 -04:00
weslambert	5deda45b66	Update elastalert_indices_check() function to only delete Elastalert indices if major Elasticsearch version is less than 8 ... Update elastalert_indices_check() function to only delete Elastalert indices if major Elasticsearch version is less than 8. Also clean up the output to only emit one notification regarding index deletion, and additional verbiage around function operation.	2022-08-18 09:11:38 -04:00
weslambert	fd7a118664	Invoke check_local_mods() function earlier so we don't have to wait for Docker image downloads or OS updates before checking and potentially exiting SOUP	2022-08-08 08:58:19 -04:00
weslambert	d7906945df	Add extra set of brackets for comparison of integers	2022-08-08 08:24:38 -04:00
weslambert	cb384ae024	Ensure check_local_mods() runs at the beginning of SOUP, in addition to the end, and also that it prompts (forces) the user to accept/review local modifications.	2022-08-05 11:25:33 -04:00
weslambert	340dbe8547	Check to see if Elastalert is enabled before trying to run 'so-elastalert-stop'. Also suppress error output for when so-elastalert container is not present.	2022-07-19 13:25:09 -04:00
Wes Lambert	5ceff52796	Move Elastalert indices check to function and call from beginning of soup and during pre-upgrade to 2.3.140	2022-07-19 14:54:39 +00:00