2144 Commits

Author	SHA1	Message	Date
Josh Brower	b884e09e7a	Playbook db init fix	2020-07-14 09:09:47 -04:00
Jason Ertel	09c460dbe9	Switch to final image repository prefix 'securityonion' for RC1	2020-07-14 00:45:20 -04:00
Jason Ertel	d75d64c8ed	Mount imported pcap dirs into sensoroni container for imported PCAP pivots	2020-07-13 21:03:47 -04:00
Jason Ertel	8f66a27f07	Refactor image repository to a single variable	2020-07-13 18:26:43 -04:00
Josh Brower	e62381e998	Merge pull request #982 from Security-Onion-Solutions/bugfix/alerting ... Misc fixes	2020-07-10 19:50:27 -04:00
Josh Brower	65062d93f4	Misc fixes	2020-07-10 19:43:43 -04:00
weslambert	eb2dc0be4c	Fix value	2020-07-10 17:17:33 -04:00
m0duspwnens	13af4cacb0	merge with dev and resolve conflicts	2020-07-10 16:27:10 -04:00
Mike Reeves	755f47da2d	Merge pull request #975 from Security-Onion-Solutions/fix/lstemplate ... Fix/lstemplate	2020-07-10 15:55:50 -04:00
Mike Reeves	46d572fa8c	Fix Filebeat spacing	2020-07-10 15:51:12 -04:00
Wes Lambert	d7f7fb801c	Set role	2020-07-10 19:35:27 +00:00
Wes Lambert	37ab252e01	Add sensor proc eval	2020-07-10 19:30:08 +00:00
Jason Ertel	358ef78cd9	Do not stop curator since imported data will now be placed into a longer term so-import index	2020-07-10 13:58:52 -04:00
Jason Ertel	811bbb4cb0	Require sudo to run an import	2020-07-10 13:58:52 -04:00
Wes Lambert	6e99ca600f	Move zeek_clean to so-sensor-clean	2020-07-10 17:56:40 +00:00
Mike Reeves	5eb33d5ac7	Logstash Import and Template Assignment	2020-07-10 13:53:55 -04:00
m0duspwnens	24b8f81e38	merge with dev and resolve conflicts	2020-07-10 12:20:14 -04:00
Mike Reeves	c656bec9c0	Merge branch 'dev' into feature/espillarz	2020-07-10 11:35:12 -04:00
m0duspwnens	0a1b5f29eb	merge with dev and resolv conflicts	2020-07-10 10:48:49 -04:00
m0duspwnens	1f48dc765e	merge with dev and resolv conflicts	2020-07-10 10:36:48 -04:00
Mike Reeves	3706aa76d8	Add jinja extension	2020-07-10 10:35:31 -04:00
Doug Burks	2ce254dfb0	add new DPD query to Hunt	2020-07-10 06:00:36 -04:00
Doug Burks	f5114c034d	change Log Type query in Hunt to include event.dataset in the groupby	2020-07-10 05:52:10 -04:00
Mike Reeves	1a6c4c12b4	Fix elasticsearch yaml	2020-07-09 21:56:32 -04:00
Jason Ertel	6bfd777d25	Enabled elastalert log	2020-07-09 21:34:35 -04:00
m0duspwnens	b2e7a4221c	master to manager for ssl signing policy	2020-07-09 17:19:17 -04:00
m0duspwnens	9c2dcd2318	fix reference to master grain	2020-07-09 17:06:44 -04:00
Mike Reeves	ad6c9e7fe9	recurse actions for curator	2020-07-09 16:58:35 -04:00
Mike Reeves	6094d19b0b	Make hot default	2020-07-09 16:54:31 -04:00
Mike Reeves	3c6465bb7f	ES Jinja the config	2020-07-09 16:42:39 -04:00
Jason Ertel	33179141a1	Enable PCAP pivots from imports	2020-07-09 16:11:38 -04:00
m0duspwnens	5ca3ecf4bd	fix reference to master grain	2020-07-09 15:42:39 -04:00
Josh Brower	206bdc60f3	Merge pull request #967 from Security-Onion-Solutions/feature/low-level-alerts ... Feature - low level alerts	2020-07-09 13:56:31 -04:00
Josh Brower	52f7111e1d	Feature - low level alerts	2020-07-09 13:53:55 -04:00
m0duspwnens	823ee42120	https://github.com/Security-Onion-Solutions/securityonion/issues/404	2020-07-09 13:45:24 -04:00
Mike Reeves	7c6677916a	Curator actions	2020-07-09 12:56:29 -04:00
Mike Reeves	96bcf9d9f3	Add temaplte files per index	2020-07-09 11:51:55 -04:00
m0duspwnens	3cf31e2460	https://github.com/Security-Onion-Solutions/securityonion/issues/404	2020-07-09 11:27:06 -04:00
Mike Reeves	9c2f7d574d	Add ES settings to pillar	2020-07-09 11:19:02 -04:00
Mike Reeves	2c32c24bf0	Fix logstash logic	2020-07-09 09:16:48 -04:00
Josh Patterson	2bfdb09674	Merge pull request #966 from Security-Onion-Solutions/issue/959 ... fix typo	2020-07-09 08:52:30 -04:00
m0duspwnens	d539f1ddf8	fix typo	2020-07-09 08:51:53 -04:00
Doug Burks	8dfafffef0	remove duplicate line for message2.conn_uids	2020-07-09 06:44:08 -04:00
m0duspwnens	59061926f0	pillarize yum.conf installonly_limit and proxy	2020-07-08 15:37:20 -04:00
weslambert	4cf31e1ee7	Drop message field and original exiftool keys	2020-07-08 10:55:40 -04:00
Doug Burks	fef803a86c	Add ignore_failure to geoip processor calls #942	2020-07-08 10:41:14 -04:00
m0duspwnens	5f68542241	add pillar example for filebeat inputs/output	2020-07-08 09:52:25 -04:00
weslambert	b25a3b6986	Rename uids to uid	2020-07-08 09:39:37 -04:00
weslambert	987acaeb7b	Add Wazuh Authd Port	2020-07-08 09:26:04 -04:00
Josh Brower	10cbc96f48	Merge pull request #948 from Security-Onion-Solutions/fix/fleet ... Fleet setup bugfix	2020-07-07 20:56:43 -04:00