Commit Graph

12160 Commits

Author SHA1 Message Date
Jason Ertel
44344612b7 adjust var name 2023-05-08 15:31:08 -04:00
Jason Ertel
7ac4bc52a3 add missing file 2023-05-08 14:55:37 -04:00
m0duspwnens
9aaa33c224 fix allowed_states logic in playbook config 2023-05-08 14:51:10 -04:00
m0duspwnens
ef18cb3704 top and allow_states changes for playbook 2023-05-08 14:12:46 -04:00
m0duspwnens
d5c7eec4ef enabled false by default, enabled via pillar in so-minion 2023-05-08 13:43:53 -04:00
m0duspwnens
a2c444e03b enabled/disable playbook in ui 2023-05-08 13:43:08 -04:00
Jason Ertel
40c3f9a156 Merge branch '2.4/dev' into kilo 2023-05-08 12:19:00 -04:00
Jason Ertel
bd23d1ab7b implement selective rate limiting 2023-05-08 12:18:46 -04:00
weslambert
a1e0041b14 Merge pull request #10287 from Security-Onion-Solutions/fix/strelka_ignore_yara_rules_2.4
Ignore "expl_outlook_cve_2023_23397.yar" and "gen_mal_3cx_compromise_mar23.yar" since they are causing problems with YARA compilation
2023-05-08 11:58:17 -04:00
weslambert
7483dbf442 Merge pull request #10304 from Security-Onion-Solutions/fix/kibana_pivot_to_pcap_url_2.4
Surround _id field in double quotes to prevent errors associated with values beginning with a hyphen
2023-05-08 11:55:35 -04:00
Wes
0f30e787b3 Surround _id field in double quotes to prevent errors associated with values beginning with a hyphen 2023-05-08 15:34:35 +00:00
m0duspwnens
5d50dbb69e enabled/disable zeek 2023-05-08 10:12:32 -04:00
Mike Reeves
867ea5a1ac Merge pull request #10298 from Security-Onion-Solutions/dockerbinds
Add custom volume binds to all containers
2023-05-08 09:48:45 -04:00
Doug Burks
52cfc59113 Merge pull request #10300 from Security-Onion-Solutions/dougburks-patch-2
FIX: Improve soup's local file modification logic #8972
2023-05-08 09:47:57 -04:00
Mike Reeves
789eafa8c2 Fix string entry 2023-05-08 09:45:08 -04:00
Doug Burks
ed712477d6 FIX: Improve soup's local file modification logic #8972 2023-05-08 09:43:20 -04:00
Mike Reeves
e3cb0a9953 Fix string entry 2023-05-08 09:35:07 -04:00
m0duspwnens
743bbfea35 add zeek.enabled to zeek annotation file 2023-05-05 17:09:01 -04:00
m0duspwnens
e8a5a5bffb import GLOBALS 2023-05-05 16:44:46 -04:00
m0duspwnens
a97fa9675b enable/disable zeek in ui 2023-05-05 16:33:59 -04:00
Mike Reeves
2418d9a096 Add volume mounts 2023-05-05 16:01:23 -04:00
m0duspwnens
2a8ed24045 import GLOBALS 2023-05-05 15:35:04 -04:00
Mike Reeves
f1c91e91b1 Remove port bindings from logstash config section 2023-05-05 15:10:21 -04:00
m0duspwnens
5405bc4e20 handle import node and merge with 2.4/dev 2023-05-05 14:41:26 -04:00
m0duspwnens
47a580d110 fix enabled and disable steno in ui 2023-05-05 13:59:52 -04:00
Mike Reeves
61a43f7df5 Merge pull request #10233 from Security-Onion-Solutions/mkrfixes
Several Fixes
2023-05-05 13:52:56 -04:00
Mike Reeves
21ffcbf2fd Update so-setup 2023-05-05 13:16:45 -04:00
Mike Reeves
563c0631ba Update so-functions 2023-05-05 13:01:40 -04:00
Mike Reeves
77cbf35625 Update so-functions 2023-05-05 11:26:10 -04:00
Mike Reeves
d7972032e4 Update init.sls 2023-05-05 10:33:11 -04:00
Mike Reeves
f6dcefe0f8 Update so-user 2023-05-05 09:34:33 -04:00
Mike Reeves
d5a1406095 Update so-user 2023-05-05 09:15:52 -04:00
Josh Patterson
3d3be6bd29 Merge pull request #10290 from Security-Onion-Solutions/ui/logstash
UI/logstash
2023-05-05 09:01:57 -04:00
m0duspwnens
52fec5fef0 Merge remote-tracking branch 'origin/mkrfixes' into ui/logstash 2023-05-05 09:00:23 -04:00
m0duspwnens
ddb776c80e add redis pillars to searchnode. move redis scripts with jinja to sbin_jinja 2023-05-04 17:26:18 -04:00
Mike Reeves
469258ee5e Update init.sls 2023-05-04 16:46:54 -04:00
Mike Reeves
4fec2a18a5 Update so-functions 2023-05-04 16:26:40 -04:00
weslambert
c7ed29dfa8 Ignore "expl_outlook_cve_2023_23397.yar" and "gen_mal_3cx_compromise_mar23.yar" since they are causing problems with YARA compilation 2023-05-04 16:16:06 -04:00
Mike Reeves
80cbe5f6e8 Update so-functions 2023-05-04 15:45:05 -04:00
Mike Reeves
a64eb0ba97 Update so-setup 2023-05-04 15:30:44 -04:00
Josh Patterson
dbb1b82e1b Merge pull request #10285 from Security-Onion-Solutions/ui/logstash
source from sbin_jinja and exlude pat
2023-05-04 15:14:47 -04:00
m0duspwnens
f34627f709 source from sbin_jinja and exlude pat 2023-05-04 15:13:42 -04:00
Josh Patterson
59451fc4d0 Merge pull request #10284 from Security-Onion-Solutions/ui/logstash
remove extra " from so-elasticsearch-roles-load
2023-05-04 15:02:34 -04:00
m0duspwnens
dc77b20723 remove extra " from so-elasticsearch-roles-load 2023-05-04 14:54:37 -04:00
Josh Patterson
51869ce5b2 Merge pull request #10282 from Security-Onion-Solutions/ui/logstash
UI/logstash
2023-05-04 13:55:28 -04:00
m0duspwnens
98705608a6 Merge remote-tracking branch 'origin/mkrfixes' into ui/logstash 2023-05-04 13:53:55 -04:00
Mike Reeves
8055088d25 Fix some errors 2023-05-04 13:35:44 -04:00
Mike Reeves
d0cfaaeb26 Fix some errors 2023-05-04 13:28:11 -04:00
Mike Reeves
fbacfce0e4 Fix some errors 2023-05-04 13:18:08 -04:00
m0duspwnens
082704ce1f logstash jinja for ui 2023-05-04 13:07:07 -04:00