55 Commits

Author	SHA1	Message	Date
m0duspwnens	b8e8510dd2	merge pillar with the defaults https://github.com/Security-Onion-Solutions/securityonion/issues/2319	2020-12-11 14:26:32 -05:00
m0duspwnens	1fca5e65df	redo how containers get added to so-status https://github.com/Security-Onion-Solutions/securityonion/issues/1681	2020-11-10 15:31:47 -05:00
Wes Lambert	05549a2362	Add Zeek intel.dat	2020-11-02 21:36:44 +00:00
m0duspwnens	09cc8ae1fb	fail the state if it isnt in top	2020-09-09 16:48:50 -04:00
m0duspwnens	a229ae82ce	only allow state to run if it is in top for the node	2020-09-02 16:15:52 -04:00
m0duspwnens	ff84640aad	add pcap to import node, test not starting zeek docker by default	2020-08-14 13:59:23 -04:00
Mike Reeves	24ed92c9dc	minio and change to global	2020-08-04 15:54:03 -04:00
Mike Reeves	3de2afe618	Fix final bugs	2020-07-18 17:29:11 -04:00
Mike Reeves	1d24d7bc7f	Misc pillars	2020-07-17 17:38:10 -04:00
m0duspwnens	e3efaee864	change reference from bro to zeek	2020-07-17 14:41:44 -04:00
Jason Ertel	8f66a27f07	Refactor image repository to a single variable	2020-07-13 18:26:43 -04:00
m0duspwnens	13af4cacb0	merge with dev and resolve conflicts	2020-07-10 16:27:10 -04:00
Wes Lambert	6e99ca600f	Move zeek_clean to so-sensor-clean	2020-07-10 17:56:40 +00:00
m0duspwnens	5ca3ecf4bd	fix reference to master grain	2020-07-09 15:42:39 -04:00
m0duspwnens	3cf31e2460	https://github.com/Security-Onion-Solutions/securityonion/issues/404	2020-07-09 11:27:06 -04:00
m0duspwnens	fd939a06b9	whitespace cleanup	2020-07-01 13:40:40 -04:00
m0duspwnens	38db512eda	fix spacing	2020-07-01 13:29:19 -04:00
m0duspwnens	4e7e19af54	pillarize zeek node.cfg. change reference from bro to zeek.	2020-07-01 13:26:27 -04:00
Wes Lambert	90c278096c	Add custom Zeek script dir	2020-06-17 17:11:27 +00:00
Jason Ertel	970368c74e	Avoid logs leaking to stdout/stderr during cron jobs	2020-06-03 09:42:44 -04:00
m0duspwnens	8d2ca003fb	change how we populate local.zeek - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/585	2020-04-28 14:10:57 -04:00
m0duspwnens	c46a45f00f	LOAD to LOCAL in local.zeek and sort local.zeek and zeekctl.cfg output	2020-04-28 12:08:32 -04:00
m0duspwnens	ca42850a0c	add missing )	2020-04-28 11:31:19 -04:00
m0duspwnens	b6741daca6	pillarize local.zeek and move zeekctl from defaults.yml to zeek pillar - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/585	2020-04-28 09:44:37 -04:00
m0duspwnens	766b56a944	update dockers to 1.2.2	2020-04-23 10:11:26 -04:00
Mike Reeves	d9e27a5444	Update Versions	2020-04-15 15:37:59 -04:00
Wes Lambert	8d8bde36e8	migrate Zeek clean script from Bro	2020-04-10 12:46:28 +00:00
Josh Brower	31ae8a2c26	Zeek - enable Community ID policy	2020-03-26 16:33:47 -04:00
m0duspwnens	20a6a79551	add tojson to dict passed into zeekctl	2020-03-16 10:28:12 -04:00
m0duspwnens	2bda1f4beb	remove whitespace	2020-03-13 16:12:16 -04:00
m0duspwnens	1db9692c6b	allow all zeekctl configuration options to be defined - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/97	2020-03-13 16:10:42 -04:00
m0duspwnens	a21ffaecc8	add option to compress archived logs for zeekctl - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/97	2020-03-13 15:05:25 -04:00
m0duspwnens	da8811bc87	restart zeek docker if zeekctl.cfg changes	2020-03-13 14:44:56 -04:00
m0duspwnens	1b7e22d5bd	fix couple minor issue - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/97	2020-03-13 14:41:16 -04:00
m0duspwnens	f9cf04e14e	fix couple minor issue - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/97	2020-03-13 13:42:28 -04:00
m0duspwnens	bc6aab5b22	add zeekctl.cfg docker file bind	2020-03-13 13:23:27 -04:00
m0duspwnens	3aa48b1a23	first go at managing zeekctl.cfg - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/97	2020-03-13 13:20:48 -04:00
m0duspwnens	7ea0b2c284	add salt cron identifiers - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/134	2020-03-13 08:38:45 -04:00
Wes Lambert	aeb298a818	fix typo	2020-03-06 18:49:29 +00:00
Wes Lambert	73cbadfe5c	add complete directory to extracted	2020-03-05 15:49:22 +00:00
Wes Lambert	ee611d44cf	update file extraction script	2020-03-05 15:48:28 +00:00
Wes Lambert	a0522943f7	fix path	2020-03-03 22:40:46 +00:00
Wes Lambert	a8a93260a9	add file extraction	2020-03-03 22:40:06 +00:00
Josh Brower	f9e07709f2	bpf fix	2020-02-18 16:36:20 -05:00
William Wernert	981dfa1cb2	chmod +x script changes	2020-02-05 11:39:37 -05:00
m0duspwnens	820462e45a	fix zeek state	2020-02-03 11:15:44 -05:00
Josh Brower	b5bf12f8c8	Zeek - bpf fixup	2020-01-31 15:06:57 -05:00
Josh Brower	3fdc5fbef4	Dep Bro and enabled Zeek BPF	2020-01-30 09:45:02 -05:00
Wes Lambert	3277ca185e	Update Zeek config	2020-01-29 22:09:32 +00:00
Mike Reeves	67d940048f	Merge pull request #257 from Security-Onion-Solutions/features/features_setup ... Initial Features Support	2020-01-28 10:15:27 -05:00