Commit Graph

3595 Commits

Author SHA1 Message Date
William Wernert
22eb81128a Merge pull request #891 from Security-Onion-Solutions/feature/navigator-to-nginx
Feature/navigator to nginx
2020-06-26 15:48:46 -04:00
weslambert
8c47723bc9 Run YARA update script after applying state 2020-06-26 15:45:52 -04:00
Josh Patterson
9c388cd6aa Merge pull request #896 from Security-Onion-Solutions/feature/suripillar
Feature/suripillar
2020-06-26 14:44:36 -04:00
m0duspwnens
0b1a258a4b change sensor homenet map 2020-06-26 14:43:27 -04:00
weslambert
813c243d3d Update so-yara-update 2020-06-26 13:26:08 -04:00
m0duspwnens
2079eba0ad Merge remote-tracking branch 'remotes/origin/dev' into feature/suripillar 2020-06-26 13:09:15 -04:00
m0duspwnens
052c65c05e add the things to pillarize suricata - https://github.com/Security-Onion-Solutions/securityonion/issues/584 2020-06-26 13:07:41 -04:00
William Wernert
cf7e5f1b6f [fix] Change permissions on so-yara-update + fix indents 2020-06-26 09:59:44 -04:00
Josh Brower
b895d6fa4f Merge pull request #894 from Security-Onion-Solutions/feature/playbook-unit-testing
Playbook - Initial Support for Unit Testing
2020-06-26 06:33:05 -04:00
Josh Brower
7f0eacd342 Playbook - Initial Support for Unit Testing 2020-06-26 06:24:09 -04:00
Mike Reeves
1e4c967afc Fix math for suri loss calulcations 2020-06-25 14:02:02 -04:00
Mike Reeves
1e6fab4e6e Fix math for suri loss calulcations 2020-06-25 13:54:01 -04:00
Mike Reeves
65687fd28e Update saltstack update to point to correct github 2020-06-25 13:02:17 -04:00
Mike Reeves
57d0603e4c Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion-saltstack into dev 2020-06-25 12:56:38 -04:00
Mike Reeves
30ac5f9764 ADding Suricata log compression 2020-06-25 12:56:26 -04:00
weslambert
5e41bba6db Merge pull request #892 from Security-Onion-Solutions/feature/more_strelka_rules
Feature/more strelka rules
2020-06-25 12:33:36 -04:00
Wes Lambert
a24402de99 More Strelka rule config 2020-06-25 16:31:04 +00:00
Wes Lambert
63c45be388 Update Strelka init for rules 2020-06-25 15:49:58 +00:00
Wes Lambert
6487fdf5e6 Add Strelka YARA function 2020-06-25 15:46:37 +00:00
William Wernert
a45fbb6f5c Revert "[fix] discovery.zen.minimum_master_nodes is deprecated, update the key"
This reverts commit 8bd6c067aa.
2020-06-25 10:53:26 -04:00
bryant-treacle
00713312c6 Merge pull request #890 from Security-Onion-Solutions/fix/so-elastic-clear
updated so-elastic-clear with new so-* indices - #885
2020-06-24 15:09:37 -04:00
bryant-treacle
443332d584 Update so-elastic-clear 2020-06-24 15:03:25 -04:00
bryant-treacle
ffc9567278 Delete test.test 2020-06-24 15:01:30 -04:00
bryant-treacle
08220e3330 Issue #885: so-elastic-clear not removing so-* indices 2020-06-24 18:40:11 +00:00
weslambert
83ed21314a Merge pull request #888 from Security-Onion-Solutions/feature/strelka_rules
Feature/strelka rules
2020-06-24 13:28:52 -04:00
Wes Lambert
f5bb831edf Fix comment 2020-06-24 17:27:59 +00:00
Wes Lambert
a01339039a Update Setup for Strelka rules 2020-06-24 17:22:55 +00:00
bryant-treacle
0849014b24 Issue #885: so-elastic-clear not removing so-* indices 2020-06-24 17:21:58 +00:00
Wes Lambert
8bfbd77367 Update whiptail for Strelka 2020-06-24 17:18:05 +00:00
William Wernert
8bd6c067aa [fix] discovery.zen.minimum_master_nodes is deprecated, update the key 2020-06-24 13:10:18 -04:00
Wes Lambert
52a0ace1b8 Use Strelka rules if enabled 2020-06-24 17:08:58 +00:00
William Wernert
bd36749959 [feat] Remove navigator container references 2020-06-24 12:38:32 -04:00
William Wernert
4404a4f312 Merge branch 'dev' of github.com:Security-Onion-Solutions/securityonion-saltstack into dev 2020-06-23 17:57:19 -04:00
William Wernert
0a0fe5914a [fix][feat] Move navigator entries to static files + fix indent 2020-06-23 17:57:14 -04:00
weslambert
c3651f1b45 Merge pull request #884 from Security-Onion-Solutions/feature/strelka_client
Add FW config for Strelka frontend
2020-06-23 14:57:06 -04:00
Wes Lambert
f7eacc2b05 Add FW config for Strelka frontend 2020-06-23 18:47:23 +00:00
weslambert
685e3048ac Merge pull request #883 from Security-Onion-Solutions/fix/hunt_files_rename
Update file dataset name for hunt queries
2020-06-23 13:49:52 -04:00
Wes Lambert
c0428ce79d Update file dataset name for hunt queries 2020-06-23 17:48:12 +00:00
weslambert
13df2e6312 Merge pull request #882 from Security-Onion-Solutions/fix/files_rename
Move dataset from files to file
2020-06-23 13:44:26 -04:00
Wes Lambert
af451573eb Move dataset from files to file 2020-06-23 17:43:28 +00:00
m0duspwnens
36a329214a merge eve-log in outputs for suricata meta data generation or zeek/default - https://github.com/Security-Onion-Solutions/securityonion/issues/584 2020-06-22 16:56:03 -04:00
m0duspwnens
f1bcd35734 Merge remote-tracking branch 'remotes/origin/dev' into feature/suripillar 2020-06-22 09:13:29 -04:00
Jason Ertel
d7693f9b55 Expose pcap dir to sensoroni for epoch discovery 2020-06-22 08:27:43 -04:00
Jason Ertel
1ee3625f61 Ensure certs dir is group readable by socore since Sensoroni process will need to read the client key 2020-06-21 15:46:36 -04:00
Jason Ertel
81ed656ba0 Bind both steno and sensoroni processes to host network 2020-06-21 10:50:10 -04:00
Jason Ertel
76e3118bd3 Split Sensoroni and Stenographer executables into separate images 2020-06-21 08:33:09 -04:00
m0duspwnens
57fa2c5abe Merge remote-tracking branch 'remotes/origin/dev' into feature/suripillar 2020-06-18 13:49:07 -04:00
Mike Reeves
6dbe83a77f Update so-docker-refresh 2020-06-18 12:38:07 -04:00
Jason Ertel
2f3a99cfb0 fix: indentation is incorrect 2020-06-17 17:46:49 -04:00
weslambert
fb9ac58ed6 Merge pull request #869 from Security-Onion-Solutions/feature/elastic_indices_rw
Basic index read-only attr removal script
2020-06-17 15:00:23 -04:00