Commit Graph

4571 Commits

Author SHA1 Message Date
Josh Brower
ad0f54fc40 Merge pull request #1209 from Security-Onion-Solutions/bugfix/osquery-parsing
Osquery Parsing fix
2020-08-18 15:54:47 -04:00
Josh Brower
d4f7a07f85 Osquery Parsing fix 2020-08-18 15:54:11 -04:00
weslambert
ca84ae43ef Merge pull request #1208 from Security-Onion-Solutions/fix/remove_pillar_from_setup
Don't echo pillar to setup log
2020-08-18 15:44:20 -04:00
weslambert
a4e986ea37 Don't echo pillar to setup log 2020-08-18 15:43:43 -04:00
Josh Patterson
be8483c580 Merge pull request #1207 from Security-Onion-Solutions/issue/1188
remove monint from nodestab grafana dashboard since search nodes dont…
2020-08-18 15:37:56 -04:00
m0duspwnens
65d9afd8d5 remove monint from nodestab grafana dashboard since search nodes dont have monint 2020-08-18 15:37:17 -04:00
Mike Reeves
59aa55f9bc Add playsecrets 2020-08-18 15:29:41 -04:00
Jason Ertel
47ad3f65ef Only fail setup when the root mailbox is not empty for ISO installations, since network installations can't be sure if the error came from setup or something unrelated 2020-08-18 15:26:30 -04:00
Josh Patterson
1bf4b86d07 Merge pull request #1206 from Security-Onion-Solutions/issue/1188
remove monint from manager since it doesnt have a monint
2020-08-18 15:10:40 -04:00
m0duspwnens
5a3d95d9a1 remove monint from manager since it doesnt have a monint 2020-08-18 15:09:21 -04:00
Mike Reeves
44fcd999fd Address #1205 2020-08-18 15:08:24 -04:00
weslambert
82bfa567d0 Merge pull request #1204 from Security-Onion-Solutions/fix/enable_strelka_default
Enable YARA rules by default
2020-08-18 14:54:46 -04:00
weslambert
eaad0487b5 Enable YARA rules by default 2020-08-18 14:54:11 -04:00
Josh Patterson
54c43634a3 Merge pull request #1203 from Security-Onion-Solutions/issue/1188
add strelka to heavynode if strelka is enabled
2020-08-18 14:29:07 -04:00
m0duspwnens
c8dfc2495c add strelka to heavynode if strelka is enabled - https://github.com/Security-Onion-Solutions/securityonion/issues/1188 2020-08-18 14:21:23 -04:00
Jason Ertel
45d957566d Only show 'Waiting for TheHive to start up' status if setup is actually installing thehive 2020-08-18 11:36:29 -04:00
Josh Patterson
b214b20e58 Merge pull request #1201 from Security-Onion-Solutions/issue/1063
fix monint for several node types for grafana
2020-08-18 10:53:30 -04:00
m0duspwnens
9f8f59f4df fix monint for several node types for grafana 2020-08-18 10:48:52 -04:00
Mike Reeves
ba192d6c32 Update addtotab.sh 2020-08-17 17:23:25 -04:00
Josh Brower
9c1c4b1a98 Merge pull request #1198 from Security-Onion-Solutions/feature/playbook-tweaks
Playbook schema update - RC2
2020-08-17 14:10:26 -04:00
Josh Brower
a8aa97edd2 Playbook schema update - RC2 2020-08-17 14:09:17 -04:00
Josh Patterson
1d02fbdd0b Merge pull request #1197 from Security-Onion-Solutions/feature/soup
add sls extension
2020-08-17 12:27:34 -04:00
m0duspwnens
eb1272c127 add sls extension 2020-08-17 12:26:44 -04:00
Josh Patterson
5581cf6721 Merge pull request #1196 from Security-Onion-Solutions/feature/soup
Feature/soup
2020-08-17 10:57:32 -04:00
m0duspwnens
a82c4c24fb move url_base from manager to global in when running soup 2020-08-17 10:55:07 -04:00
Mike Reeves
dcb110b31f Add rc1 conditional logic 2020-08-17 09:57:00 -04:00
Jason Ertel
d8833abf73 Use load instead of import on the registry image itself 2020-08-15 09:42:56 -04:00
Josh Patterson
2c9c328a40 Merge pull request #1193 from Security-Onion-Solutions/issue/1039
Issue/1039
2020-08-14 18:45:12 -04:00
m0duspwnens
e6da423dc3 change reference from manager:url_base to global:url_base - https://github.com/Security-Onion-Solutions/securityonion/issues/1039 2020-08-14 17:55:30 -04:00
m0duspwnens
4946bb54d8 Merge remote-tracking branch 'remotes/origin/dev' into issue/1039 2020-08-14 17:25:13 -04:00
Josh Patterson
5663edfaee Merge pull request #1192 from Security-Onion-Solutions/quickfix/importnoderonicheckin
set checking interval for sensoroni on import node
2020-08-14 17:11:35 -04:00
m0duspwnens
387c26f052 set checking interval for sensoroni on import node 2020-08-14 17:10:36 -04:00
Josh Patterson
e4b80ff183 Merge pull request #1190 from Security-Onion-Solutions/quickfix/setuplogging
send service status to /dev/null to prevent FP on install failure
2020-08-14 16:47:55 -04:00
m0duspwnens
43f6f5c27a send service status to /dev/null to prevent FP on install failure 2020-08-14 16:45:28 -04:00
Josh Patterson
51cbccad09 Merge pull request #1189 from Security-Onion-Solutions/quickfix/modulerun
use new module.run style
2020-08-14 16:39:17 -04:00
m0duspwnens
5220b5ae0c use new module.run style 2020-08-14 16:37:45 -04:00
Josh Patterson
6b6f39edde Merge pull request #1187 from Security-Onion-Solutions/quickfix/heavyfw
heavynode firewall rules
2020-08-14 16:01:56 -04:00
m0duspwnens
47faee48a6 heavynode firewall rules 2020-08-14 15:58:59 -04:00
Mike Reeves
eb6b2f6ca0 Merge pull request #1186 from Security-Onion-Solutions/feature/airgap
Airgap round 1
2020-08-14 15:41:36 -04:00
Mike Reeves
bac58abf3e Airgap round 1 2020-08-14 15:32:33 -04:00
m0duspwnens
d963222f31 provide proper url for so-import-pcap based on redirect strategy chosen during setup - https://github.com/Security-Onion-Solutions/securityonion/issues/1039 2020-08-14 15:28:47 -04:00
Jason Ertel
11ebc6b8b2 Do not cancel setup if user choose not to run so-allow during setup 2020-08-14 15:28:42 -04:00
Josh Patterson
0ba0c16c38 Merge pull request #1185 from Security-Onion-Solutions/issue/1049
Issue/1049
2020-08-14 14:55:14 -04:00
m0duspwnens
35027e32b3 dont constantly run steno or suricata containers for import node 2020-08-14 14:43:37 -04:00
weslambert
945bc5c6de Merge pull request #1184 from Security-Onion-Solutions/fix/automate_ssh
Don't copy SSH key if automated install
2020-08-14 14:42:44 -04:00
weslambert
c9d6293f8f Don't copy SSH key if automated install 2020-08-14 14:41:35 -04:00
Jason Ertel
7fa5e17935 Correct if logic for determining when to show web interface URL 2020-08-14 14:40:12 -04:00
m0duspwnens
f9a6b8d231 remove zeek and suricata from so-status for import node 2020-08-14 14:39:02 -04:00
m0duspwnens
3836f00309 allow sensori port for import node 2020-08-14 14:32:34 -04:00
Jason Ertel
04340728ff Improve title spacing among standard log lines 2020-08-14 14:28:52 -04:00