CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-23 17:33:10 +01:00
Code Issues Packages Projects Releases Wiki Activity
4,571 Commits 18 Branches 120 Tags
c3b2d98ffb383bfdaf4be51e2ce2bf34229fc59c
Commit Graph

2616 Commits

Author SHA1 Message Date
Josh Brower
c3b2d98ffb Add event.category to WEL 2020-09-10 06:15:30 -04:00
Doug Burks
d18c498574 Update so-features-enable 2020-09-09 17:32:42 -04:00
Josh Patterson
1e32b32659 Merge pull request #1302 from Security-Onion-Solutions/fix/sostatus 
Fix/sostatus
 2020-09-09 15:07:12 -04:00
m0duspwnens
39f200f565 fix whitespace 2020-09-09 14:59:21 -04:00
Mike Reeves
a77532c1d8 Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into dev 2020-09-09 14:57:17 -04:00
Mike Reeves
04f4539385 Fix Airgap Repo Name 2020-09-09 14:57:10 -04:00
m0duspwnens
b0c526364f handle strelka 2020-09-09 14:55:54 -04:00
m0duspwnens
921262b9a5 prevent duplicate containers for so-stauts 2020-09-09 14:07:38 -04:00
Jason Ertel
a5b87850df Remove user sync between SOC and Cortex due to the unnecesary complexities involved with this style of integration 2020-09-09 14:07:36 -04:00
m0duspwnens
05d736d2df handle strelka 2020-09-09 14:00:58 -04:00
m0duspwnens
918d9cf00f handle strelka 2020-09-09 13:57:53 -04:00
m0duspwnens
3433b90029 fix so-status for strelka and wazuh 2020-09-09 13:53:10 -04:00
Jason Ertel
fc4ad1d556 Add Google search quick action to Hunt; Change VirusTotal quick action to be applicable to all field values 2020-09-09 12:22:38 -04:00
Jason Ertel
9babc445ce Add Google search quick action to Hunt; Change VirusTotal quick action to be applicable to all field values 2020-09-09 12:07:23 -04:00
Mike Reeves
90feb503ce Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into dev 2020-09-09 10:54:53 -04:00
Mike Reeves
426257443a Final airgap tweaks 2020-09-09 10:54:47 -04:00
Josh Patterson
c2398f966b Merge pull request #1295 from Security-Onion-Solutions/fix/salt-ca-ssl 
Fix/salt ca ssl
 2020-09-09 10:36:54 -04:00
m0duspwnens
7facff2b7d change from cmd.run to cp.get_file_str 2020-09-09 10:34:53 -04:00
Jason Ertel
ad05e75ce7 Add new quick actions to SOC config template 2020-09-09 00:46:23 -04:00
Mike Reeves
7d524a0723 Add Firewall Rule for yum and airgap 2020-09-08 18:51:14 -04:00
Josh Patterson
d7016b4557 Merge pull request #1298 from Security-Onion-Solutions/issue/1291 
Issue/1291
 2020-09-08 17:40:33 -04:00
m0duspwnens
da34222931 makedirs 2020-09-08 17:36:27 -04:00
m0duspwnens
eeb6c3128b add salt.master state to manager nodes 2020-09-08 17:27:13 -04:00
m0duspwnens
da3d0948b4 creating engine to watch the health of the salt mine 2020-09-08 16:49:38 -04:00
Jason Ertel
710a2be422 Add new so-user-enable script and change so-user-disable to call 'so-user disable' instead of deleting the SOC user 2020-09-08 16:24:18 -04:00
Mike Reeves
7c41c31359 Fix airgap statement 2020-09-08 14:48:37 -04:00
Mike Reeves
7371f9236e Update top.sls 2020-09-08 14:18:56 -04:00
Mike Reeves
1aea3f4f85 Merge pull request #1297 from Security-Onion-Solutions/experimental 
Add Airgap code
 2020-09-08 09:26:41 -04:00
Doug Burks
f8ebed43d7 fix spacing 2020-09-07 04:45:26 -04:00
Doug Burks
f5916e26a2 read ca.crt from filesystem when possible 2020-09-07 04:42:11 -04:00
Wes Lambert
f9884606df Fix typo 2020-09-05 12:15:55 +00:00
Jason Ertel
f27e5164d0 Update to latest kratos; add support for a custom status trait to represent whether a user is locked or not; refactor so-user to use new enable/disable capabilities in SOC; remove 'delete' option from so-user usage to avoid having user lists out of sync across SOC and external apps 2020-09-04 17:01:52 -04:00
Josh Brower
39cc7151a5 Update SOCtopus.conf 2020-09-04 14:14:53 -04:00
m0duspwnens
05b8b71af2 add elasticsearch to standalone top 2020-09-03 15:54:24 -04:00
Mike Reeves
b2ee757db2 Airgap Time 2020-09-03 10:35:12 -04:00
weslambert
8db8dcb71a Change HOME_NET and EXTERNAL_NET defaults 2020-09-03 08:15:14 -04:00
Mike Reeves
9745191f19 Add Airgap State 2020-09-02 16:17:44 -04:00
Wes Lambert
770aaf415c Require at least on arg for start/stop/restart scripts 2020-09-02 18:55:59 +00:00
Jason Ertel
0142f43493 Add so-user-disable script which deletes the SOC user and disables the users in Fleet, TheHive, and Cortex 2020-09-02 13:54:50 -04:00
m0duspwnens
9d85b3223f fix note about localrules 2020-09-02 11:46:48 -04:00
Josh Patterson
066c795e71 Merge pull request #1279 from Security-Onion-Solutions/fix/redhat 
move redhat with centos
 2020-09-02 09:12:44 -04:00
m0duspwnens
1f8f197066 move redhat with centos 2020-09-02 09:12:05 -04:00
weslambert
5d920885e0 Add manager to hosts file 2020-09-02 07:43:55 -04:00
Josh Patterson
7fa083069d Merge pull request #1277 from Security-Onion-Solutions/issue/968 
Issue/968
 2020-09-01 15:43:22 -04:00
m0duspwnens
08ca2055dc fix telegraf file input for zeek log 2020-09-01 15:34:06 -04:00
m0duspwnens
93f30a2064 fix telegraf config 2020-09-01 15:29:29 -04:00
m0duspwnens
b13b07eddf add newline to end 2020-09-01 15:10:56 -04:00
m0duspwnens
01777c64d9 fix influxtime 2020-09-01 14:58:48 -04:00
m0duspwnens
b6d66bddfc add redis to proper node types. grafana dahsboard changes. change zeek_restart to not use telegraf socket but read from file instead 2020-09-01 14:38:10 -04:00
Josh Brower
6cd0d16b91 Merge pull request #1276 from Security-Onion-Solutions/feature/import-wel 
Initial support for evtx import
 2020-09-01 13:48:12 -04:00