Commit Graph

5569 Commits

Author SHA1 Message Date
Jason Ertel
bfbc0f354c Only default to logging out to tty if tty exists as a character device 2020-11-17 22:48:40 -05:00
Jason Ertel
1ec8b52353 Replace scan.exiftool.* fields due to reduction in strelka field counts 2020-11-17 15:12:06 -05:00
Josh Patterson
f8346cde08 Merge pull request #1962 from Security-Onion-Solutions/soup-verify-salt
Soup verify salt
2020-11-17 15:08:32 -05:00
m0duspwnens
e162be2e1d change salt upgrade command https://github.com/Security-Onion-Solutions/securityonion/issues/1961 2020-11-17 14:29:39 -05:00
m0duspwnens
4f4f64a47d Merge remote-tracking branch 'remotes/origin/dev' into soup-verify-salt 2020-11-17 13:16:18 -05:00
m0duspwnens
4cd1086efa new way for soup to install and resart salt for upgrade 2020-11-17 13:15:55 -05:00
Mike Reeves
2184c3b8ee Revert "The Hive ES update"
This reverts commit 88c2ee0d36.
2020-11-17 12:51:42 -05:00
Mike Reeves
65d28f98b5 Revert "The Hive ES Update"
This reverts commit f31d459a24.
2020-11-17 12:51:13 -05:00
Jason Ertel
aa8d9c12a0 Remove yara rule update that can't succeed since the script doesn't exist at this point of the setup process 2020-11-17 12:15:27 -05:00
Mike Reeves
f31d459a24 The Hive ES Update 2020-11-17 11:59:03 -05:00
Mike Reeves
88c2ee0d36 The Hive ES update 2020-11-17 11:58:22 -05:00
Jason Ertel
d13733e716 Queue the registry state in case a highstate is already active 2020-11-17 09:59:09 -05:00
Josh Patterson
86922a2388 Merge pull request #1959 from Security-Onion-Solutions/soup-verify-salt
verify new salt version is installed during soup if not, exit before proceeding
2020-11-17 09:53:08 -05:00
m0duspwnens
65440f9aef verify new salt version is installed during soup if not, exit before proceeding 2020-11-17 09:51:28 -05:00
William Wernert
12c661101a Merge pull request #1958 from Security-Onion-Solutions/feat/require-min-nics
Feat/require min nics
2020-11-17 09:49:09 -05:00
William Wernert
79b63ed14b [fix] Use singular when needed for requirements 2020-11-17 09:47:08 -05:00
Josh Brower
cc4357d567 Merge pull request #1954 from Security-Onion-Solutions/bugfix/ingest-mappings
Cleanup & fix sysmon pid ingest
2020-11-17 09:05:31 -05:00
Jason Ertel
b9267ee015 Add missing newline after armor header 2020-11-17 09:00:02 -05:00
Jason Ertel
5c310327e4 Merge pull request #1942 from Security-Onion-Solutions/jertel/refactor-seed
Jertel/refactor seed
2020-11-16 18:46:28 -05:00
Jason Ertel
4311f66110 Remove unnecessary redirect 2020-11-16 16:58:09 -05:00
Josh Patterson
a8644478b5 Merge pull request #1939 from Security-Onion-Solutions/fix/nginx-nonmanager
fix nginx for non manaager/fleet nodes
2020-11-16 16:47:39 -05:00
m0duspwnens
4436f02f6d fix nginx for non manaager/fleet nodes 2020-11-16 16:46:22 -05:00
Jason Ertel
3cf8afc1dd Remove unused redirect descriptors and ensure gpg import output is not leaked to console 2020-11-16 16:39:54 -05:00
Josh Patterson
f1e33b6eea Merge pull request #1938 from Security-Onion-Solutions/fix/so.status-module
fix so-status to work with so.status module and change padding
2020-11-16 16:35:08 -05:00
m0duspwnens
0d9b22fe2d fix so-status to work with so.status module and change padding 2020-11-16 16:33:29 -05:00
William Wernert
a08923030b [feat] Exit setup if less than required number of NICs present 2020-11-16 16:26:38 -05:00
Jason Ertel
1ec4af1a4d Destroy the old registry before updating SO images 2020-11-16 15:41:15 -05:00
Jason Ertel
5ae78d4108 Install curl in order to test for cloud 2020-11-16 15:31:40 -05:00
Jason Ertel
3bae243915 Continued refactoring of bash 2020-11-16 15:20:00 -05:00
Jason Ertel
8234b6f835 Switch remaining containers over to new registries; Continued bash refactoring 2020-11-16 15:11:08 -05:00
Josh Patterson
55231eab25 Merge pull request #1934 from Security-Onion-Solutions/fix/so-status-in-setup
redirect output from setting up so-status stuff in so-setup
2020-11-16 14:57:58 -05:00
m0duspwnens
e956ee9324 redirect output from setting up so-status stuff in so-setup 2020-11-16 14:56:20 -05:00
Jason Ertel
a343e3f31e Save descriptors while inside the progress pipe 2020-11-16 14:10:48 -05:00
Jason Ertel
2ff738a61c Refactor docker_seed_registry to eliminate duplicate logic 2020-11-16 13:27:23 -05:00
William Wernert
c226c1d902 [fix] Redirect stderr when checking for link state 2020-11-16 11:30:47 -05:00
Josh Patterson
7a49c55ea0 Merge pull request #1930 from Security-Onion-Solutions/issue/1831
Issue/1831
2020-11-16 10:09:49 -05:00
m0duspwnens
cc50eba6cb make sure /opt/so/log/salt/so-salt-minion-check gets touched even if salt-minon verison isnt correct https://github.com/Security-Onion-Solutions/securityonion/issues/1831 2020-11-16 10:01:40 -05:00
m0duspwnens
5c25dcf192 add /opt/so/log/salt/so-salt-minion-check to log rotate https://github.com/Security-Onion-Solutions/securityonion/issues/1831 2020-11-16 09:50:10 -05:00
Jason Ertel
c744d389f7 More bash cleanup 2020-11-15 10:44:14 -05:00
Jason Ertel
76c917d977 Continued bash cleanup 2020-11-15 09:57:12 -05:00
Josh Brower
1908a68330 Cleanup & fix sysmon pid ingest 2020-11-14 16:19:23 -05:00
Jason Ertel
d22040fb5d Annual fall bash cleanup event 2020-11-14 11:53:31 -05:00
Jason Ertel
372f694cc1 Set curl type to 'features' when adding features to existing installation 2020-11-14 11:04:40 -05:00
Jason Ertel
1c079f7ff4 Remove duplicate docker pull/sigverify logic from so-features-enable; Provide current SO version to curl 2020-11-14 10:35:45 -05:00
m0duspwnens
4e6e29e7dc update logging 2020-11-13 20:26:06 -05:00
m0duspwnens
43a244e0da change log path https://github.com/Security-Onion-Solutions/securityonion/issues/1831 2020-11-13 19:37:03 -05:00
m0duspwnens
e958246457 touch file at start of highstate, just kill salt dont systemctl stop it https://github.com/Security-Onion-Solutions/securityonion/issues/1831 2020-11-13 19:34:17 -05:00
m0duspwnens
b210092534 logging changes issue/1831 2020-11-13 19:09:53 -05:00
m0duspwnens
e820c6fa42 logging changes issue/1831 2020-11-13 19:04:09 -05:00
m0duspwnens
71a409f210 fix threshold logic https://github.com/Security-Onion-Solutions/securityonion/issues/1831 2020-11-13 18:23:55 -05:00