Commit Graph

5932 Commits

Author SHA1 Message Date
Jason Ertel
e58ca93896 Add logging for strelka configuration during setup 2020-12-15 15:46:59 -05:00
William Wernert
15347d1209 [fix] More condition changes for Helix 2020-12-15 15:08:33 -05:00
William Wernert
c7c3d004ca [fix] More helix -> helixsensor 2020-12-15 14:01:19 -05:00
William Wernert
1825776271 [fix] helix -> helixsensor 2020-12-15 13:58:36 -05:00
William Wernert
951556902c [fix] Accept salt key on Helix Sensor install 2020-12-15 13:41:00 -05:00
William Wernert
7ba10ee698 [fix] Add HELIXSENSOR to case for Ubuntu 2020-12-15 13:38:00 -05:00
William Wernert
343e9f8b2c [fix] Only try to stop/remove containers if at least one exists 2020-12-15 13:37:46 -05:00
William Wernert
e89c06f71b [fix] Add backslash for newline 2020-12-15 13:37:21 -05:00
William Wernert
f7d02763e8 [fix] Move FEATURESCHECK var assignment, fix indentation 2020-12-15 13:07:21 -05:00
William Wernert
f70d828aa6 [fix] Create array correctly 2020-12-15 13:04:09 -05:00
Jason Ertel
3da7a26e88 Remove jinja whitespace trimming to avoid syntax error in bash 2020-12-15 12:37:05 -05:00
Mike Reeves
922534a5da Merge pull request #2352 from Security-Onion-Solutions/soup2320
SOUP Features
2020-12-15 12:07:19 -05:00
TOoSmOotH
80a61d3316 SOUP Features 2020-12-15 12:06:30 -05:00
Mike Reeves
bf1f00d2fe Merge pull request #2348 from Security-Onion-Solutions/soup2320
SOUP Changes
2020-12-14 21:19:45 -05:00
TOoSmOotH
cbd59ed86a SOUP Changes 2020-12-14 20:46:31 -05:00
Josh Brower
efe44323cb Merge pull request #2346 from Security-Onion-Solutions/bugfix/fleet-patch
Swap localhost for 127.0.0.1
2020-12-14 15:49:58 -05:00
William Wernert
aa281f849f [feat] Add message about dropping to command line when setting up ssh key 2020-12-14 15:31:25 -05:00
William Wernert
f4c4a16f54 Merge pull request #2343 from Security-Onion-Solutions/experimental
Experimental
2020-12-14 14:27:52 -05:00
Jason Ertel
aa479b9c8e Move node address/desc into the minion pillar 2020-12-14 12:42:16 -05:00
William Wernert
3e2a9cc884 Merge branch 'dev' into experimental 2020-12-14 12:32:53 -05:00
William Wernert
a533e6fa35 [fix] Always set INSTALLUSERNAME var 2020-12-14 11:42:34 -05:00
Josh Patterson
de3f86724a Merge pull request #2335 from Security-Onion-Solutions/issue/1586
remove old firewall ports pillar file
2020-12-14 11:15:34 -05:00
m0duspwnens
4e04f31b8e remove old firewall ports pillar file https://github.com/Security-Onion-Solutions/securityonion/issues/1586 2020-12-14 10:24:49 -05:00
Doug Burks
7a314b5935 Prevent Wazuh "last -n 20" logs from going to Alerts queue #2321 2020-12-12 11:35:29 -05:00
Doug Burks
61ae187d03 revert previous commit #2321 2020-12-12 10:12:23 -05:00
Josh Brower
73d23e6d17 Revert "Initial support - Playbook Overrides"
This reverts commit 8915e49288.
2020-12-12 10:07:30 -05:00
Josh Brower
8faf80a03b Revert "Playbook db updates"
This reverts commit 35be785f7a.
2020-12-12 10:07:23 -05:00
Mike Reeves
b5ed973abd Merge pull request #2138 from OmerTirosh/OmerTirosh-fix-win.eventlog
Fix Error: SO elasticsearch ingest failed to convert 'winlog.event_data.SubjectUserName' to 'user.name'
2020-12-12 10:00:27 -05:00
Doug Burks
85aac4ad75 Prevent Wazuh "last -n 20" logs from going to Alerts queue #2321 2020-12-12 09:22:08 -05:00
Jason Ertel
fd7fe72b2a Correct default address pool base value 2020-12-11 23:29:59 -05:00
Jason Ertel
c5a3597564 Swap AWS interfaces 2020-12-11 21:57:56 -05:00
Josh Brower
66495e6bae Swap localhost for 127.0.0.1 2020-12-11 17:38:42 -05:00
Jason Ertel
42c8f1e325 Use eth0/eth1 instead of ens5/ens6 in AWS 2020-12-11 15:34:16 -05:00
Jason Ertel
bb61c1f745 Cleanup bash imports/sources, function definitions, and variables 2020-12-11 15:33:31 -05:00
Josh Patterson
e4eea6a616 Merge pull request #2320 from Security-Onion-Solutions/issue/2319
zeek file extraction can now be manipulated with zeek pillar
2020-12-11 14:38:10 -05:00
m0duspwnens
09b3a4a0dd merge pillar with the defaults https://github.com/Security-Onion-Solutions/securityonion/issues/2319 2020-12-11 14:35:06 -05:00
m0duspwnens
b8e8510dd2 merge pillar with the defaults https://github.com/Security-Onion-Solutions/securityonion/issues/2319 2020-12-11 14:26:32 -05:00
Jason Ertel
eb735c7289 Replace duplicate random generator with common function 2020-12-11 13:22:13 -05:00
Josh Patterson
2f2867804a Merge pull request #2318 from Security-Onion-Solutions/issue/1175
pillarize grafana and allow for grafana alerts to be created
2020-12-11 12:36:06 -05:00
m0duspwnens
d877fac786 add null for max graph value https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-11 12:28:43 -05:00
m0duspwnens
c88a1a943d update search and sensor node dashboard panaels from guage to graph https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-11 12:21:16 -05:00
m0duspwnens
e3335a3106 update managersearch dashboard panaels from guage to graph https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-11 12:00:02 -05:00
m0duspwnens
0a77a28e06 guage to graph cor cpu on manager and eval https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-11 11:51:42 -05:00
m0duspwnens
6eb64227ae update manager dashboard panaels from guage to graph https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-11 11:44:21 -05:00
m0duspwnens
5a95181b2b update eval version 1 https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-11 11:36:19 -05:00
m0duspwnens
2fc151d923 update eval dashboard panaels from guage to graph https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-11 11:34:08 -05:00
William Wernert
db276d9020 [fix] Always set hostname 2020-12-11 11:02:27 -05:00
m0duspwnens
33fde42dbc dont show legend on pcap retention panel 2020-12-11 10:42:30 -05:00
m0duspwnens
e0e38ac37f update standlone dashboard panaels from guage to graph https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-11 10:39:25 -05:00
William Wernert
75c5abef30 [fix] Add all selected options to install_opts 2020-12-11 10:16:00 -05:00