Commit Graph

1707 Commits

Author SHA1 Message Date
m0duspwnens
c89bc0b51a create nginx conf for standalone - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/140 2020-05-15 14:42:38 -04:00
m0duspwnens
2f566bf6d7 add so-standalone to agent/wazuh-register-agent 2020-05-15 13:25:31 -04:00
m0duspwnens
1a157eb6a5 add so-standalone to agent/ossec.conf 2020-05-15 13:23:58 -04:00
m0duspwnens
9c7481a0c7 add so-status map for standalone 2020-05-15 13:21:05 -04:00
m0duspwnens
74290eca2a change = to in - https://github.com/Security-Onion-Solutions/securityonion-saltstack.git 2020-05-15 11:20:06 -04:00
m0duspwnens
f3a2c1fb4d add missing ] - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/140 2020-05-15 11:08:10 -04:00
m0duspwnens
f4db261baf change elif - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/140 2020-05-15 10:57:25 -04:00
m0duspwnens
fdae84bb74 remove = in - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/140 2020-05-15 10:56:16 -04:00
m0duspwnens
509188092c adding so-standalone state logic, add zeek pillar to so-standalone - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/140 2020-05-15 10:02:25 -04:00
m0duspwnens
692f04727f add standalone mode to pillar and state top - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/140 2020-05-14 16:06:19 -04:00
m0duspwnens
9667f8b853 rename so-aptcacherng for so-status 2020-05-14 14:11:06 -04:00
Doug Burks
34d9882987 fix Wazuh and Sysmon queries 2020-05-14 13:47:01 -04:00
m0duspwnens
7f464af5fa run so-elasticsearch-pipelines only on changes - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/682 2020-05-14 13:39:19 -04:00
Mike Reeves
dbef2e2832 Update soc.json 2020-05-14 11:56:18 -04:00
Mike Reeves
6991900ceb Update Query for geo 2020-05-14 11:34:10 -04:00
Doug Burks
5c3e7acc6d change resp_mime_types to file.resp_mime_types 2020-05-14 11:21:32 -04:00
Doug Burks
6112322bce change file.path to smb.path 2020-05-14 11:20:11 -04:00
Josh Brower
554612d25f Navigator top.sls fix 2020-05-14 11:19:07 -04:00
Doug Burks
c7b4ab116f fix rfb typo 2020-05-14 10:57:44 -04:00
Josh Brower
3db67de27a osquery packages fix 2020-05-13 20:39:56 -04:00
Josh Brower
8a68e6adb3 Playbook hivealert fixes 2020-05-13 19:27:14 -04:00
Josh Brower
c3627c38e3 Elastalert - NIDS fix 2020-05-13 17:03:14 -04:00
Josh Brower
6e4ee26a58 Elastalert --> TheHive fixes 2020-05-13 16:34:35 -04:00
Josh Brower
23b4870ee6 Playbook - update plays 2020-05-13 12:19:37 -04:00
Jason Ertel
db51ab9d45 Adjust elastalert salt setup to match new so-elastalert image 2020-05-13 12:14:18 -04:00
Josh Patterson
e9cf0f8599 Merge pull request #665 from Security-Onion-Solutions/issue/227
Issue/227
2020-05-13 12:11:43 -04:00
m0duspwnens
d94a76a2c7 fix docker_container_cpu calculations for grafana 2020-05-13 12:06:02 -04:00
m0duspwnens
581000b920 add grafana dashboard for mastersearch node - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/227 2020-05-13 11:52:10 -04:00
Mike Reeves
50fc9a4713 Merge pull request #664 from Security-Onion-Solutions/feature/defaultsearch
Remove Keyword
2020-05-12 17:55:32 -04:00
Mike Reeves
0b0c8d8471 Remove Keyword 2020-05-12 17:54:25 -04:00
Josh Brower
bc4b4385bf Merge pull request #662 from Security-Onion-Solutions/bugfix/soctopus-config
soctopus config fix
2020-05-12 17:04:22 -04:00
Josh Brower
d270c8f32d soctopus config fix 2020-05-12 16:59:35 -04:00
m0duspwnens
d5b2a6f059 move statedir and salttmp from salt state to common state 2020-05-12 16:58:26 -04:00
m0duspwnens
56b92afb6b fix telegraf.conf for different roles 2020-05-12 16:54:38 -04:00
Josh Brower
4d3d7dc60e salt bug workarounds 2020-05-12 16:24:24 -04:00
Josh Brower
abd907fee1 Merge pull request #659 from Security-Onion-Solutions/bugfix/nids-parsing-alerting
suricata parsing
2020-05-12 14:07:51 -04:00
Josh Brower
62bec93190 suricata parsing 2020-05-12 14:04:02 -04:00
Mike Reeves
0b7568e08f Update soc.json with default search info 2020-05-12 13:57:40 -04:00
Josh Brower
d1eac195d8 Enable Navigator 2020-05-11 22:41:54 -04:00
Josh Brower
4bd8e136be Enabled playbook 2020-05-11 22:41:02 -04:00
Josh Brower
09ce3e088a playbook mysql fixes 2020-05-11 22:39:13 -04:00
Josh Brower
b658f7133b Update top.sls 2020-05-11 09:48:24 -04:00
Mike Reeves
09e2413695 Remove version hardcode 2020-05-10 17:31:50 -04:00
Josh Brower
20e7331bb9 navigator fixes 2020-05-10 11:57:20 -04:00
Josh Brower
4977a8b17c Merge pull request #648 from Security-Onion-Solutions/bugfix/playbook-mysql
Fix playbook mysql errors
2020-05-10 07:58:39 -04:00
Josh Brower
02160b12ee Fix playbook mysql errors 2020-05-10 07:57:45 -04:00
Josh Brower
170d799470 Merge pull request #647 from Security-Onion-Solutions/bugfix/playbook-mysql
feature/playbook mysql
2020-05-09 16:30:50 -04:00
Jason Ertel
47295d42f5 Initial iteration of new SOC Event search module 2020-05-08 17:00:06 -04:00
Josh Brower
e3a3a01ee1 Merge remote-tracking branch 'remotes/origin/dev' into bugfix/playbook-mysql 2020-05-08 16:49:38 -04:00
Josh Brower
9b54a432fc mysql playbook 2020-05-08 16:36:59 -04:00