Commit Graph

4626 Commits

Author SHA1 Message Date
Mike Reeves
45b11b2321 Fix Rulecat 2020-09-09 18:38:07 -04:00
Doug Burks
d18c498574 Update so-features-enable 2020-09-09 17:32:42 -04:00
m0duspwnens
09cc8ae1fb fail the state if it isnt in top 2020-09-09 16:48:50 -04:00
m0duspwnens
01c9f7b2ae merge with dev and resolve conflicts 2020-09-09 16:23:36 -04:00
Mike Reeves
7ebf93fcb5 IDSTools Overhaul 2020-09-09 15:53:32 -04:00
Josh Patterson
1e32b32659 Merge pull request #1302 from Security-Onion-Solutions/fix/sostatus
Fix/sostatus
2020-09-09 15:07:12 -04:00
m0duspwnens
39f200f565 fix whitespace 2020-09-09 14:59:21 -04:00
Mike Reeves
a77532c1d8 Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into dev 2020-09-09 14:57:17 -04:00
Mike Reeves
04f4539385 Fix Airgap Repo Name 2020-09-09 14:57:10 -04:00
m0duspwnens
b0c526364f handle strelka 2020-09-09 14:55:54 -04:00
m0duspwnens
921262b9a5 prevent duplicate containers for so-stauts 2020-09-09 14:07:38 -04:00
Jason Ertel
a5b87850df Remove user sync between SOC and Cortex due to the unnecesary complexities involved with this style of integration 2020-09-09 14:07:36 -04:00
m0duspwnens
05d736d2df handle strelka 2020-09-09 14:00:58 -04:00
m0duspwnens
918d9cf00f handle strelka 2020-09-09 13:57:53 -04:00
m0duspwnens
3433b90029 fix so-status for strelka and wazuh 2020-09-09 13:53:10 -04:00
Doug Burks
82b582540e Add period 2020-09-09 12:56:19 -04:00
Doug Burks
90ba1be978 Improve formatting of NIDS selection screen 2020-09-09 12:55:14 -04:00
m0duspwnens
e84507c386 Merge remote-tracking branch 'remotes/origin/dev' into fix/sostatus 2020-09-09 12:51:01 -04:00
m0duspwnens
9ee9a199b1 predefine each component as 0 to fix issues with it being unset 2020-09-09 12:50:22 -04:00
Jason Ertel
fc4ad1d556 Add Google search quick action to Hunt; Change VirusTotal quick action to be applicable to all field values 2020-09-09 12:22:38 -04:00
Jason Ertel
9babc445ce Add Google search quick action to Hunt; Change VirusTotal quick action to be applicable to all field values 2020-09-09 12:07:23 -04:00
Mike Reeves
90feb503ce Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into dev 2020-09-09 10:54:53 -04:00
Mike Reeves
426257443a Final airgap tweaks 2020-09-09 10:54:47 -04:00
Doug Burks
eaf3281ab7 Remove Suricata version numbers from Setup screens #1300
https://github.com/Security-Onion-Solutions/securityonion/issues/1300
2020-09-09 10:43:41 -04:00
Josh Patterson
c2398f966b Merge pull request #1295 from Security-Onion-Solutions/fix/salt-ca-ssl
Fix/salt ca ssl
2020-09-09 10:36:54 -04:00
m0duspwnens
7facff2b7d change from cmd.run to cp.get_file_str 2020-09-09 10:34:53 -04:00
Jason Ertel
ad05e75ce7 Add new quick actions to SOC config template 2020-09-09 00:46:23 -04:00
Mike Reeves
7d524a0723 Add Firewall Rule for yum and airgap 2020-09-08 18:51:14 -04:00
Josh Patterson
d7016b4557 Merge pull request #1298 from Security-Onion-Solutions/issue/1291
Issue/1291
2020-09-08 17:40:33 -04:00
m0duspwnens
da34222931 makedirs 2020-09-08 17:36:27 -04:00
m0duspwnens
eeb6c3128b add salt.master state to manager nodes 2020-09-08 17:27:13 -04:00
m0duspwnens
da3d0948b4 creating engine to watch the health of the salt mine 2020-09-08 16:49:38 -04:00
Jason Ertel
710a2be422 Add new so-user-enable script and change so-user-disable to call 'so-user disable' instead of deleting the SOC user 2020-09-08 16:24:18 -04:00
Mike Reeves
7c41c31359 Fix airgap statement 2020-09-08 14:48:37 -04:00
Mike Reeves
7371f9236e Update top.sls 2020-09-08 14:18:56 -04:00
Mike Reeves
1aea3f4f85 Merge pull request #1297 from Security-Onion-Solutions/experimental
Add Airgap code
2020-09-08 09:26:41 -04:00
Doug Burks
f8ebed43d7 fix spacing 2020-09-07 04:45:26 -04:00
Doug Burks
f5916e26a2 read ca.crt from filesystem when possible 2020-09-07 04:42:11 -04:00
weslambert
b6b52671e2 Merge pull request #1294 from Security-Onion-Solutions/fix/wazuh_agent_name
Fix typo
2020-09-05 08:17:09 -04:00
Wes Lambert
f9884606df Fix typo 2020-09-05 12:15:55 +00:00
Jason Ertel
f27e5164d0 Update to latest kratos; add support for a custom status trait to represent whether a user is locked or not; refactor so-user to use new enable/disable capabilities in SOC; remove 'delete' option from so-user usage to avoid having user lists out of sync across SOC and external apps 2020-09-04 17:01:52 -04:00
Josh Brower
351e7761ef Merge pull request #1292 from Security-Onion-Solutions/bugfix/playbook-rulesets
Update SOCtopus.conf
2020-09-04 14:15:18 -04:00
Josh Brower
39cc7151a5 Update SOCtopus.conf 2020-09-04 14:14:53 -04:00
Doug Burks
f8e68c82e4 downgrade to Mono 4.2.1.102 and NetworkMiner 2.4 2020-09-04 10:12:28 -04:00
Doug Burks
c050003b5a Install file-roller for opening zip files 2020-09-04 07:14:01 -04:00
Doug Burks
a2265fac4f NetworkMiner has a compatibility issue with Mono 6 right now 2020-09-04 06:50:22 -04:00
Doug Burks
1fc64d3eef so-analyst should install gedit 2020-09-03 16:46:14 -04:00
Josh Patterson
c71a154e81 Merge pull request #1288 from Security-Onion-Solutions/quickfix/standalonetop
add elasticsearch to standalone top
2020-09-03 15:55:43 -04:00
m0duspwnens
05b8b71af2 add elasticsearch to standalone top 2020-09-03 15:54:24 -04:00
Mike Reeves
b2ee757db2 Airgap Time 2020-09-03 10:35:12 -04:00