Commit Graph

5729 Commits

Author SHA1 Message Date
weslambert
bc1794e437 Fix function name 2022-02-24 09:42:14 -05:00
weslambert
45ccfc5ad4 Add back post to .100 and call for .110 2022-02-24 09:35:43 -05:00
weslambert
582bf4c64c Remove dashboard updates for .100 so we don't run twice 2022-02-24 09:25:59 -05:00
weslambert
7f08ecdcbe Add function reference for .110 post changes 2022-02-24 09:25:15 -05:00
weslambert
a22e470038 Add Kibana dashboard updates for 2.3.110 2022-02-24 09:20:44 -05:00
weslambert
bc2c1b4ccc Merge pull request #6935 from abesinger/issue/6912
Updated syslog pipeline, resolves #6912.
2022-02-24 08:33:55 -05:00
Josh Brower
585c275df6 UC true 2022-02-23 19:35:10 -05:00
weslambert
6a0ecb9e9c Add IDH and Kratos index templates 2022-02-23 12:13:46 -05:00
Josh Brower
b7b2183c15 Merge pull request #7296 from Security-Onion-Solutions/delta
IDH - Import & Enables Plays
2022-02-23 10:52:37 -05:00
Josh Brower
83aa261d88 IDH - Import & Enables Plays 2022-02-23 10:50:13 -05:00
Josh Brower
0121eda536 Merge pull request #7282 from Security-Onion-Solutions/delta
Initial Support - IDH Node
2022-02-23 08:49:40 -05:00
doug
1392fc37e8 FIX: curator should exclude so-case* indices #7270 2022-02-22 17:00:52 -05:00
Wes Lambert
f7862af934 Switch from .security to match_only_text 2022-02-22 20:33:49 +00:00
Josh Brower
1d95aca4de IDH - VNC default port 2022-02-22 14:16:45 -05:00
Josh Brower
99554d5db8 IDH - UDP vs TCP support 2022-02-22 14:10:05 -05:00
Josh Brower
df9fc807a3 IDH - restart scripts, filebeat fix 2022-02-22 08:05:53 -05:00
Josh Brower
3610b0cd30 merge in dev 2022-02-21 16:52:53 -05:00
Josh Brower
eea2b9ccfd IDH - Play - ssh 2022-02-21 16:43:26 -05:00
Josh Brower
05be776f4b IDH - so-status 2022-02-21 16:41:36 -05:00
Doug Burks
1abd824c5f FIX: curator should exclude so-case* indices #7270 2022-02-21 09:00:05 -05:00
Josh Brower
2203e2fedd IDH - Final setup fixes 2022-02-19 21:01:48 -05:00
Mike Reeves
0d1da5d1dc Update networks.cfg.jinja 2022-02-18 20:02:50 -05:00
weslambert
3124f2bd12 Merge pull request #7255 from Security-Onion-Solutions/fix/remove_old_templates
Remove old index templates
2022-02-18 15:23:07 -05:00
Jason Ertel
380f0ef93a Merge pull request #7256 from Security-Onion-Solutions/kilo
Update password len requirements; clarify password update help
2022-02-18 15:19:08 -05:00
Jason Ertel
93e9548eaf Require a minimum of 8 characters for passwords, to match Kratos min requirements 2022-02-18 15:14:48 -05:00
Wes Lambert
4d1533537b Remove old index templates 2022-02-18 20:08:13 +00:00
Josh Brower
0362afb260 IDH - Finalize Firewall config 2022-02-18 13:23:48 -05:00
m0duspwnens
cb55af4c1c dont allow $ to be used for elasticsearch:auth or kibana:secrets - https://github.com/Security-Onion-Solutions/securityonion/issues/7233 2022-02-18 13:13:56 -05:00
weslambert
87a5e64f12 Merge pull request #7249 from Security-Onion-Solutions/fix/component_index_association
Update component -> index association for file/scan mappings for Strelka
2022-02-18 12:19:41 -05:00
Josh Brower
8de5a054d4 Merge pull request #7248 from Security-Onion-Solutions/feature/kratos-log-ingest
Ingest Kratos logs
2022-02-18 11:56:20 -05:00
William Wernert
786b01c85a Merge pull request #6496 from JamesMConroy/so-staus-tty
so-staus detects tty
2022-02-18 11:52:18 -05:00
Josh Brower
118277ebc5 Ingest Kratos logs 2022-02-18 11:49:02 -05:00
Mike Reeves
6f4ee4123a Update networks.cfg.jinja 2022-02-18 11:26:58 -05:00
Mike Reeves
e4148818d8 Merge pull request #7226 from Security-Onion-Solutions/zeekhn
Add Zeek Homenet in networks.cfg
2022-02-18 11:11:56 -05:00
Mike Reeves
95eab61615 Rename to the .jinja standard 2022-02-18 11:06:33 -05:00
Mike Reeves
9341669a15 Merge pull request #7244 from christopherwoodall/patch-6
Update config.map.jinja
2022-02-18 09:57:33 -05:00
Jason Ertel
fdc63b5816 Clarify so-user update usage/help 2022-02-18 09:41:09 -05:00
Christopher Woodall
eaff6a12de Update config.map.jinja
Extend the array instead of appending.
2022-02-18 08:50:28 -05:00
weslambert
6ee3287d2d Update component -> index association for file/scan mappings for Strelka 2022-02-18 08:12:34 -05:00
James Conroy
91c207cd38 Update salt/common/tools/sbin/so-status
Removed # {% raw %} from line 170

Co-authored-by: William Wernert <william.wernert@gmail.com>
2022-02-17 20:37:43 -06:00
James Conroy
b774e62dfa Update salt/common/tools/sbin/so-status
Add salt raw directive

Co-authored-by: William Wernert <william.wernert@gmail.com>
2022-02-17 20:37:25 -06:00
Josh Brower
f995d0768f IDH - Initial firewall support 2022-02-17 15:54:20 -05:00
Doug Burks
b4b7938ce2 so-ip-update needs to queue the Kibana dashboard update in case a salt operation is already running 2022-02-17 15:47:33 -05:00
Doug Burks
1a96162966 so-ip-update needs to update Kibana dashboards 2022-02-17 14:49:55 -05:00
Mike Reeves
3e194c9b4b Walk the homenet for zeek 2022-02-17 11:33:22 -05:00
Josh Brower
6c124733b5 IDH - Enable default states 2022-02-17 10:50:26 -05:00
Wes Lambert
5c1f61bda8 Switch from dns.answers to dns.answers.name for DTC 2022-02-17 15:03:46 +00:00
Josh Brower
ef4df58510 IDH - Jinjafy hostname 2022-02-17 09:00:57 -05:00
Jason Ertel
cb9712aa08 Merge pull request #7217 from Security-Onion-Solutions/kilo
MFA
2022-02-16 16:47:40 -05:00
weslambert
e71b606dd6 Add pillar update for ES index templates for 2.3.110 2022-02-16 16:22:06 -05:00