Commit Graph

484 Commits

Author SHA1 Message Date
weslambert
c421bd464a Remove Strelka function (in favor of direct script execution in so-setup) 2020-06-26 16:42:44 -04:00
weslambert
8c47723bc9 Run YARA update script after applying state 2020-06-26 15:45:52 -04:00
William Wernert
cf7e5f1b6f [fix] Change permissions on so-yara-update + fix indents 2020-06-26 09:59:44 -04:00
Wes Lambert
6487fdf5e6 Add Strelka YARA function 2020-06-25 15:46:37 +00:00
Wes Lambert
f5bb831edf Fix comment 2020-06-24 17:27:59 +00:00
Wes Lambert
a01339039a Update Setup for Strelka rules 2020-06-24 17:22:55 +00:00
Wes Lambert
8bfbd77367 Update whiptail for Strelka 2020-06-24 17:18:05 +00:00
Wes Lambert
52a0ace1b8 Use Strelka rules if enabled 2020-06-24 17:08:58 +00:00
Jason Ertel
6bf8f0af08 Eliminate multiple version definitions in this repo 2020-06-17 10:46:07 -04:00
Jason Ertel
3451f74b63 Update version to 2.0.0-rc.1 2020-06-17 10:32:39 -04:00
William Wernert
0c9c7002dc [fix] Simplify if statements and apply mine.update during setup 2020-06-16 08:38:50 -04:00
Mike Reeves
a91dbf0d1d Fix wording for Suricata meta data in whiptail 2020-06-15 15:10:16 -04:00
m0duspwnens
51e500f521 add firewall rules for fleet standalone 2020-06-15 13:50:37 -04:00
m0duspwnens
aaa6cf816a set firewall during setup for fleet standalone 2020-06-15 09:42:06 -04:00
m0duspwnens
285468c059 user apply switch for so-firewall to apply firewall state on master for distributed install 2020-06-12 12:31:29 -04:00
m0duspwnens
729a6998a2 Merge remote-tracking branch 'remotes/origin/dev' into issue/739 2020-06-11 16:26:23 -04:00
Mike Reeves
032c8ca4e9 Fix Conflicts 2020-06-11 13:14:11 -04:00
m0duspwnens
32b4a2ff08 adding grafana dashboard for standalone - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/739 2020-06-11 10:28:29 -04:00
m0duspwnens
55e597d302 run firewall state after adding ips during setup - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/641 2020-06-11 09:45:31 -04:00
m0duspwnens
9466cc5439 remove firewall pillar from top, add roles to hosts during setup - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/641 2020-06-11 08:49:52 -04:00
m0duspwnens
5317ee8b5a add localhost to the same hostgroups as in currently in dev - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/641 2020-06-10 17:41:22 -04:00
m0duspwnens
119ce2d93f remove from writing to firewall pillar - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/641 2020-06-10 15:37:18 -04:00
m0duspwnens
7c5343ebe1 copy local firewall yaml files during setup - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/641 2020-06-10 15:35:15 -04:00
m0duspwnens
fcb26bdaed change how ips are added during setup - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/641 2020-06-10 15:03:34 -04:00
William Wernert
33105c10aa [feat] Make automated webuser pass follow requirements 2020-06-10 14:19:24 -04:00
Jason Ertel
1933c26797 Additional diagnostic logging for the curious case of the disappearing certificate 2020-06-10 09:51:56 -04:00
Jason Ertel
d09e2b6468 Dump salt mine to log after applying SSL/CA salt states 2020-06-09 13:16:03 -04:00
Josh Brower
e5a23c22fd thehive setup fix 2020-06-09 12:16:39 -04:00
Josh Brower
913c1a89bf Fleet setup fixes 2020-06-08 13:28:27 -04:00
Josh Brower
51f97f5ae5 Fleet setup - final fixes 2020-06-08 08:47:06 -04:00
Josh Brower
3f3990ac83 Merge remote-tracking branch 'remotes/origin/dev' into feature/fleet-setup 2020-06-08 08:30:37 -04:00
Josh Brower
950d4077f6 Update so-setup 2020-06-08 08:12:14 -04:00
Josh Brower
ab6e36e00a Fleet syntax error fix 2020-06-06 13:15:44 -04:00
Josh Brower
33f21c05f7 Fleet standaline custom fqdn fixes 2020-06-06 10:03:25 -04:00
m0duspwnens
5f9f86caa5 merge with dev and fix conflicts 2020-06-04 09:59:12 -04:00
Josh Brower
0890171527 Fixes 2020-06-04 07:51:05 -04:00
Mike Reeves
5a9030883a Rename Bro to Zeek in some whiptail menus 2020-06-03 16:44:52 -04:00
Josh Brower
a09991d770 Fleet standalone - custom hostnames 2020-06-03 15:56:59 -04:00
Josh Brower
3d92145bb9 Fleet standalone - custom hostnames 2020-06-03 15:52:18 -04:00
Jason Ertel
9f0e48e337 Send stderr to /dev/null as well, since it's already been decided this output is unsuited for the logfile based on the comment 2020-06-03 08:55:06 -04:00
Josh Brower
782c669835 Fleet standalone fixes - req 2020-06-02 12:42:14 -04:00
Josh Brower
77df87880c Fleet standalone fixes - fleet sa req 2020-06-02 10:20:29 -04:00
Jason Ertel
07c0075fc0 Upgrade containerd.io and docker-ce to match ISO rpms 2020-06-02 08:43:06 -04:00
Josh Brower
b695b7f245 Fleet standalone fixes - firewall 2020-06-02 08:05:48 -04:00
Jason Ertel
9d5f4049b5 Avoid filtering NIC when it's an empty string 2020-06-02 05:52:03 -04:00
Josh Brower
4b14ecf1d9 Fleet standalone fixes 2020-06-01 16:36:32 -04:00
m0duspwnens
a84203be7c Merge remote-tracking branch 'remotes/origin/dev' into issue/749 2020-05-29 16:38:10 -04:00
m0duspwnens
d7e904e1ab fix minion_type for *NODE install_type 2020-05-29 16:35:39 -04:00
m0duspwnens
9ae68b52ef Merge remote-tracking branch 'remotes/origin/dev' into issue/749 2020-05-29 16:22:00 -04:00
m0duspwnens
52954d8e5d set_intial_firewall policy sooner in install process so packages can be installed if masterupdates are enabled 2020-05-29 15:34:18 -04:00