Commit Graph

1102 Commits

Author SHA1 Message Date
Jason Ertel
bdbc637852 Stop SOC prior to opening the firewall for analysts, this ensures no outside requests can be processed prior to the server rebooting 2021-01-06 14:37:27 -05:00
Jason Ertel
ebb0e615b9 Fix script typo to correctly run the so-test 2021-01-06 14:37:26 -05:00
Jason Ertel
f20feabda2 Reboot to ensure thehive falls in line before kicking off the test 2021-01-06 14:37:26 -05:00
Jason Ertel
9b40318bfe Ensure so-test is logged 2021-01-06 14:37:26 -05:00
Jason Ertel
fc44474519 Add eval automation 2021-01-06 14:37:26 -05:00
Jason Ertel
229657f7d2 Use AMI's public IP for external access 2021-01-06 14:37:26 -05:00
Jason Ertel
fb28faa4e3 Monitor interface will not always be bond0 - pull correct value from pillar; Replay test data after automated test installations complete. 2021-01-06 14:37:26 -05:00
William Wernert
9d674d6d3a [feat] Add so-monitor-add script 2021-01-04 13:35:14 -05:00
William Wernert
f8c7413b15 [fix] Move is_iso variable assignment up 2021-01-04 10:37:07 -05:00
William Wernert
0fa001ed92 [fix] Add more logic to network-only process 2021-01-04 09:27:22 -05:00
William Wernert
3f3fe78322 [fix] Correct reversed logic 2020-12-30 14:01:20 -05:00
William Wernert
0a57b78900 [feat] Add option to set up only network on an iso 2020-12-29 12:52:21 -05:00
William Wernert
97466957a7 [fix] Fix text printed to whiptail progress bar 2020-12-28 15:06:03 -05:00
William Wernert
b03408df6b [fix] Add missing function 2020-12-28 14:30:34 -05:00
William Wernert
4d1cb37468 [feat] Add function to wait for dpkg lock 2020-12-28 09:35:51 -05:00
Jason Ertel
cfe5019f51 Add firewall listhogroups and listportgroups commands; Change AMI test defaults to use a custom hostname for cypress access 2020-12-22 17:59:59 -05:00
Wes Lambert
ac96ded2dc Support setting rule repos via pillar 2020-12-22 15:36:15 +00:00
Mike Reeves
6fcc11eac2 Fix setup 2020-12-17 16:31:25 -05:00
Mike Reeves
b6f2cdce8c Fix whiptail menu 2020-12-17 15:57:13 -05:00
TOoSmOotH
96ebb98fc6 Change wording about true clustering again 2020-12-17 15:34:29 -05:00
TOoSmOotH
336ec18e09 Change wording about true clustering 2020-12-17 15:32:34 -05:00
TOoSmOotH
d99596ad06 Fix Docker Settings on new installs 2020-12-17 15:21:29 -05:00
m0duspwnens
2e278586f2 disable steno in so-status for import node 2020-12-16 13:03:24 -05:00
m0duspwnens
81e2b4d572 Merge remote-tracking branch 'remotes/origin/dev' into fix/so-status-import-node 2020-12-16 12:02:39 -05:00
m0duspwnens
96b72d46be show steno,zeek,suricata as disabled in so-status on import node 2020-12-16 12:01:48 -05:00
William Wernert
9c8fc5e6ed [fix] Make parent directories if needed 2020-12-16 11:16:14 -05:00
William Wernert
6ba3c16c75 [fix] Actually count containers when checking count 2020-12-16 11:10:57 -05:00
William Wernert
a1fc354a89 [fix] Correct ordering of printf lines 2020-12-16 09:32:36 -05:00
William Wernert
a4897d2063 [fix] Add Elasticsearch to containers running on Helix sensor 2020-12-16 09:07:38 -05:00
Jason Ertel
e3c8018824 Toggle strelka rules after the user is prompted it strelka should be installed to ensure strelka rules are updated later during the setup process 2020-12-15 16:44:52 -05:00
Jason Ertel
e58ca93896 Add logging for strelka configuration during setup 2020-12-15 15:46:59 -05:00
William Wernert
15347d1209 [fix] More condition changes for Helix 2020-12-15 15:08:33 -05:00
William Wernert
951556902c [fix] Accept salt key on Helix Sensor install 2020-12-15 13:41:00 -05:00
William Wernert
7ba10ee698 [fix] Add HELIXSENSOR to case for Ubuntu 2020-12-15 13:38:00 -05:00
William Wernert
343e9f8b2c [fix] Only try to stop/remove containers if at least one exists 2020-12-15 13:37:46 -05:00
William Wernert
e89c06f71b [fix] Add backslash for newline 2020-12-15 13:37:21 -05:00
Mike Reeves
bf1f00d2fe Merge pull request #2348 from Security-Onion-Solutions/soup2320
SOUP Changes
2020-12-14 21:19:45 -05:00
TOoSmOotH
cbd59ed86a SOUP Changes 2020-12-14 20:46:31 -05:00
William Wernert
aa281f849f [feat] Add message about dropping to command line when setting up ssh key 2020-12-14 15:31:25 -05:00
William Wernert
f4c4a16f54 Merge pull request #2343 from Security-Onion-Solutions/experimental
Experimental
2020-12-14 14:27:52 -05:00
Jason Ertel
aa479b9c8e Move node address/desc into the minion pillar 2020-12-14 12:42:16 -05:00
William Wernert
3e2a9cc884 Merge branch 'dev' into experimental 2020-12-14 12:32:53 -05:00
William Wernert
a533e6fa35 [fix] Always set INSTALLUSERNAME var 2020-12-14 11:42:34 -05:00
Jason Ertel
fd7fe72b2a Correct default address pool base value 2020-12-11 23:29:59 -05:00
Jason Ertel
c5a3597564 Swap AWS interfaces 2020-12-11 21:57:56 -05:00
Jason Ertel
42c8f1e325 Use eth0/eth1 instead of ens5/ens6 in AWS 2020-12-11 15:34:16 -05:00
Jason Ertel
bb61c1f745 Cleanup bash imports/sources, function definitions, and variables 2020-12-11 15:33:31 -05:00
Jason Ertel
eb735c7289 Replace duplicate random generator with common function 2020-12-11 13:22:13 -05:00
William Wernert
db276d9020 [fix] Always set hostname 2020-12-11 11:02:27 -05:00
William Wernert
75c5abef30 [fix] Add all selected options to install_opts 2020-12-11 10:16:00 -05:00