Josh Brower
65d8005629
Fleet standalone - fix event
2020-11-30 10:32:39 -05:00
Josh Brower
7fddf99648
Merge pull request #2128 from Security-Onion-Solutions/bugfix/fleet-standalone
...
Fix Fleet setup errors
2020-11-27 13:59:19 -05:00
Josh Brower
f52c30bff5
Fix Fleet setup errors
2020-11-27 13:58:41 -05:00
Josh Brower
19a33c5c2a
Merge pull request #2126 from Security-Onion-Solutions/bugfix/fleet-standalone
...
Bugfix/fleet standalone
2020-11-27 11:45:25 -05:00
Josh Brower
19b36f0468
Fleet standalone redirect fix
2020-11-27 11:43:51 -05:00
Josh Brower
95a664e12a
Merge pull request #2103 from Security-Onion-Solutions/bugfix/fleet-standalone
...
Fleet standalone fix
2020-11-25 14:09:27 -05:00
Josh Brower
38afd67108
Fleet standalone fix
2020-11-25 14:08:30 -05:00
Jason Ertel
979f171828
Add missing comma to sensoroni.json
2020-11-25 12:29:45 -05:00
Jason Ertel
8f9081618f
Add role to sensoroni.json file
2020-11-25 11:11:46 -05:00
Jason Ertel
7fb264b4fe
Use double quotes around agent key to ensure interpolation
2020-11-24 17:17:50 -05:00
Jason Ertel
d20560385f
Remove /nsm/wazuh/etc subdir state since confirmed the Wazuh docker container itself
2020-11-24 16:50:46 -05:00
Jason Ertel
e1147398cc
Ensure /nsm/wazuh is owned by ossec
2020-11-24 15:48:46 -05:00
Jason Ertel
8864428a00
Ensure setup output is redirected to logfile
2020-11-24 15:45:40 -05:00
Jason Ertel
ea9bbfd1aa
Improve wazuh agent registration with retry logic to wait for manager to become ready
2020-11-24 13:53:20 -05:00
weslambert
0c4ee94472
Merge pull request #2077 from Security-Onion-Solutions/fix/thehive_upgrade_conf
...
Fix/thehive upgrade conf
2020-11-24 11:52:51 -05:00
weslambert
39bf60feb7
Add digit
2020-11-24 11:52:20 -05:00
weslambert
35653d2e66
Changes for ES7
2020-11-24 11:51:19 -05:00
weslambert
eb2364b926
Changes for ES7
2020-11-24 11:49:08 -05:00
Josh Patterson
9bb485cdc9
Merge pull request #2074 from Security-Onion-Solutions/issue/2040
...
Issue/2040
2020-11-24 11:45:08 -05:00
m0duspwnens
fe2662cab8
dont enable steno pillar on import node https://github.com/Security-Onion-Solutions/securityonion/issues/2040
2020-11-24 11:42:03 -05:00
m0duspwnens
995a377432
squigly comma if steno enabled https://github.com/Security-Onion-Solutions/securityonion/issues/2040
2020-11-24 11:31:41 -05:00
weslambert
e3a41c2a94
Changes for ES7 elasticsearch.yml
2020-11-24 11:20:09 -05:00
Mike Reeves
ddca9563e5
Merge branch 'mkrmerge' into escluster
2020-11-24 10:29:57 -05:00
OmerTirosh
e2ee0db727
Ignore failure for rename processor
...
Ignore failure for winlog.event_data.SubjectUserName rename processor.
For some event ids (for example 4688), this field already been added in winlogbeat JS processor.
Therefor, elastic throw [user.name] already exists error.
2020-11-24 17:21:47 +02:00
m0duspwnens
4dfd49ef39
add vars https://github.com/Security-Onion-Solutions/securityonion/issues/2040
2020-11-24 10:11:28 -05:00
m0duspwnens
65334d15ea
https://github.com/Security-Onion-Solutions/securityonion/issues/2040
2020-11-24 09:33:38 -05:00
Jason Ertel
1e32a01657
Create symlink before registration otherwise registration script can't save it's state (.log) file into the conf subdir; add more logging output to track down registration failures
2020-11-23 18:36:19 -05:00
Jason Ertel
bafefb980b
Update so-elastalert-test script for compatibility with SO 2.3
2020-11-23 10:45:56 -05:00
Mike Reeves
426769588a
Merge pull request #1739 from jtgreen-cse/patch-2
...
fix for Windows events via osquery
2020-11-21 13:27:05 -05:00
Josh Patterson
a183be489c
Merge pull request #2030 from Security-Onion-Solutions/master
...
Merge master to dev
2020-11-20 17:00:31 -05:00
Josh Patterson
b29ffcac92
Merge pull request #2029 from Security-Onion-Solutions/soup-ubuntu-salt
...
fix issue with proper salt.minion state execution for ubuntu
2020-11-20 16:55:45 -05:00
Jason Ertel
78f5727f6f
Improve so-ip-update prompts
2020-11-20 15:16:07 -05:00
m0duspwnens
0d3754200f
fix issue with proper salt.minion state execution for ubuntu
2020-11-20 14:27:07 -05:00
Jason Ertel
bc40a2bfc5
Correct so-import-pcap wrapping; add so-pcap-import alias for so-import-pcap; prompt to reboot after changing IP address on manager; ensure all tools have exec bit set
2020-11-20 14:14:03 -05:00
Jason Ertel
f074179656
Correct so-import-pcap wrapping; add so-pcap-import alias for so-import-pcap; prompt to reboot after changing IP address on manager; ensure all tools have exec bit set
2020-11-20 14:14:03 -05:00
William Wernert
b6e36d4d06
Merge pull request #2023 from Security-Onion-Solutions/bugfix/bug-hunt
...
Bugfix/bug hunt
2020-11-20 13:04:33 -05:00
William Wernert
2e6be747d9
[fix] Fixes for quiet flag in so-ssh-harden
2020-11-20 11:18:40 -05:00
William Wernert
1a11c24f03
[fix] Add newline escapes to so-ssh-harden
2020-11-20 11:13:40 -05:00
William Wernert
d15064b294
Merge branch 'dev' into bugfix/bug-hunt
2020-11-20 10:15:52 -05:00
William Wernert
d3ef46a5f6
Merge pull request #2020 from Security-Onion-Solutions/bugfix/pre-whiptail-message
...
[fix] Remove echo redirect at beginning of install
2020-11-20 10:15:24 -05:00
William Wernert
9d837f7b45
[fix] Reload sshd if config changes are made
...
Fixes #1976
2020-11-20 10:09:14 -05:00
William Wernert
e62b52da1b
[fix] Add condition to zeek state during setup for ZEEKVERSION
...
Fixes #1990
2020-11-20 09:58:07 -05:00
William Wernert
79ec1de83a
[fix] Add exit check for static ip whiptail menus
...
Fixes #1992
2020-11-20 09:56:48 -05:00
Jason Ertel
9fb8a6d482
Increment version to 2.3.20
2020-11-19 16:53:34 -05:00
Mike Reeves
5344d30d56
Merge pull request #2003 from Security-Onion-Solutions/dev
...
2.3.10
2.3.10
2020-11-19 16:48:53 -05:00
Mike Reeves
4051111999
Update hashes and keys
2020-11-19 16:00:40 -05:00
Mike Reeves
316a1c02f1
Update soup to display what its doing
2020-11-19 15:19:50 -05:00
Josh Patterson
c07f62f8d1
Merge pull request #2007 from Security-Onion-Solutions/fix/minon
...
kill salt process with soup and dont restart salt-minion service when…
2020-11-19 15:17:58 -05:00
m0duspwnens
cdc7a5cc7c
kill salt process with soup and dont restart salt-minion service when salt upgrade
2020-11-19 15:17:11 -05:00
Josh Patterson
10a3e6f414
Merge pull request #2006 from Security-Onion-Solutions/fix/minon
...
change typo on minon to minion
2020-11-19 15:11:16 -05:00