Commit Graph

57 Commits

Author SHA1 Message Date
m0duspwnens
b693373d8d change how we allow or disallow states to be run https://github.com/Security-Onion-Solutions/securityonion/issues/2679 2021-01-20 15:09:53 -05:00
m0duspwnens
2e278586f2 disable steno in so-status for import node 2020-12-16 13:03:24 -05:00
m0duspwnens
96b72d46be show steno,zeek,suricata as disabled in so-status on import node 2020-12-16 12:01:48 -05:00
m0duspwnens
65334d15ea https://github.com/Security-Onion-Solutions/securityonion/issues/2040 2020-11-24 09:33:38 -05:00
m0duspwnens
5a95159ec3 just use so-status.conf for containers to fix salt warning https://github.com/Security-Onion-Solutions/securityonion/issues/1681 2020-11-11 11:38:48 -05:00
m0duspwnens
1fca5e65df redo how containers get added to so-status https://github.com/Security-Onion-Solutions/securityonion/issues/1681 2020-11-10 15:31:47 -05:00
m0duspwnens
172ca9aa8d add option to enable or disable to steno docker container - https://github.com/Security-Onion-Solutions/securityonion/issues/1601 2020-10-22 10:52:34 -04:00
m0duspwnens
09cc8ae1fb fail the state if it isnt in top 2020-09-09 16:48:50 -04:00
m0duspwnens
a229ae82ce only allow state to run if it is in top for the node 2020-09-02 16:15:52 -04:00
m0duspwnens
35027e32b3 dont constantly run steno or suricata containers for import node 2020-08-14 14:43:37 -04:00
Mike Reeves
24ed92c9dc minio and change to global 2020-08-04 15:54:03 -04:00
Jason Ertel
d75d64c8ed Mount imported pcap dirs into sensoroni container for imported PCAP pivots 2020-07-13 21:03:47 -04:00
Jason Ertel
8f66a27f07 Refactor image repository to a single variable 2020-07-13 18:26:43 -04:00
m0duspwnens
5ca3ecf4bd fix reference to master grain 2020-07-09 15:42:39 -04:00
m0duspwnens
3cf31e2460 https://github.com/Security-Onion-Solutions/securityonion/issues/404 2020-07-09 11:27:06 -04:00
Jason Ertel
d7693f9b55 Expose pcap dir to sensoroni for epoch discovery 2020-06-22 08:27:43 -04:00
Jason Ertel
1ee3625f61 Ensure certs dir is group readable by socore since Sensoroni process will need to read the client key 2020-06-21 15:46:36 -04:00
Jason Ertel
81ed656ba0 Bind both steno and sensoroni processes to host network 2020-06-21 10:50:10 -04:00
Jason Ertel
76e3118bd3 Split Sensoroni and Stenographer executables into separate images 2020-06-21 08:33:09 -04:00
m0duspwnens
766b56a944 update dockers to 1.2.2 2020-04-23 10:11:26 -04:00
Mike Reeves
d9e27a5444 Update Versions 2020-04-15 15:37:59 -04:00
Jason Ertel
7529144635 secure config files 2020-04-10 17:27:50 -04:00
Josh Brower
f9e07709f2 bpf fix 2020-02-18 16:36:20 -05:00
Josh Brower
86689edf24 Merge branch 'dev' into feature/bpf-steno 2020-01-28 18:18:17 -05:00
Josh Brower
ae087c5552 Steno BPF tweaks 2020-01-28 16:53:19 -05:00
Mike Reeves
de369494ed Merge pull request #252 from Security-Onion-Solutions/feature/bpf-steno
Steno BPF - cleanup & simplify
2020-01-28 10:18:23 -05:00
Wes Lambert
b995b09d52 Update version in all state files 2020-01-28 14:59:53 +00:00
Josh Brower
7875436efd Steno BPF - cleanup & simplify 2020-01-25 11:27:10 -05:00
Josh Brower
3262854f4e Steno - fix error name 2020-01-24 04:30:06 -05:00
Josh Brower
78527ab87c Steno - BPF Config 2020-01-24 04:20:49 -05:00
Mike Reeves
ae55b59048 Switch to using images in registry 2020-01-14 10:11:26 -05:00
Mike Reeves
f3c204c790 Disable Beats input - Update sensoroni version 2019-11-06 13:37:42 -05:00
Mike Reeves
ca4cd782a1 Docker URL Fix - Issue #68 2019-10-16 10:39:18 -04:00
Mike Reeves
063f9012d1 PCAP Module - Fix sensoroni logging 2019-09-25 16:21:02 -04:00
Mike Reeves
5e2cc08039 PCAP Module - Update steno image 2019-09-24 14:05:20 -04:00
Mike Reeves
02d49c8376 PCAP module - add log dir for sensoroni 2019-06-18 10:10:58 -04:00
Mike Reeves
ad2cbcbc59 PCAP Module - Fix Cert stuff 2019-06-17 19:51:47 -04:00
Mike Reeves
feefc07235 HH Alpha Initial Push 2019-06-17 18:09:46 -04:00
Mike Reeves
f1e015edcf Add content trust to all modules 2019-05-02 16:53:19 -04:00
Mike Reeves
3fa06efa41 Fix on PCAP Paths for 1.0.4 2018-11-24 10:32:12 -05:00
Mike Reeves
ae331d0b23 PCAP Module - Update PCAP location 2018-11-12 13:29:18 -05:00
Mike Reeves
84e3d27e5e Steno Docker - Change permissions and add logs and tmp 2018-09-25 21:16:27 -04:00
Mike Reeves
21ae45b8be Steno Module - Add User to Config and add techpreview tag 2018-09-24 22:22:00 -04:00
Mike Reeves
c6c42a37c7 PCAP state - Fix options 2018-03-16 15:49:13 -04:00
Mike Reeves
48b2ad505a Suricata Salt Module - Add skeleton 2018-02-23 14:49:46 -05:00
Mike Reeves
aabaf81170 Steno Salt Module - new and improved 2018-02-23 08:33:37 -05:00
Mike Reeves
23d86f6439 PCAP Salt Module - modify user ids and permissions 2018-02-21 17:53:49 -05:00
Mike Reeves
75535abcc2 PCAP Salt Module - change to run as root for test 2018-02-21 17:05:42 -05:00
Mike Reeves
47e7b3b9fd PCAP Salt Module - add the steno user 2018-02-21 16:33:45 -05:00
Mike Reeves
b780bedd97 PCAP Salt Module - add the steno user 2018-02-21 16:24:14 -05:00