Doug Burks
7184b9cb25
disable ecat_arp_info by default in so-zeek-logs
2022-12-01 07:18:05 -05:00
Mike Reeves
571ac4edec
Update soup
2022-11-29 18:36:47 -05:00
Wes
16cd1080be
Add dnp3_control reference in various places
2022-11-29 17:23:37 +00:00
Doug Burks
b06e9e8477
add new zeek opcua logs to so-zeek-logs
2022-11-26 18:44:28 -05:00
Doug Burks
ec0cf71c3f
add opcua_binary_opensecure_channel to so-zeek-logs
2022-11-26 17:00:32 -05:00
Doug Burks
33a478ff59
fix zeek ics logs in so-zeek-logs
2022-11-25 09:40:48 -05:00
Doug Burks
2ada4712bc
fix zeek ics logs in so-zeek-logs
2022-11-25 09:37:52 -05:00
Doug Burks
fad6c46e7c
fix zeek ics logs in so-zeek-logs
2022-11-25 09:35:00 -05:00
Doug Burks
9f5e75b302
add software to so-zeek-logs
2022-11-25 07:27:50 -05:00
Doug Burks
0536d174fe
Fix opcua_binary reference in so-zeek-logs
2022-11-21 14:03:22 -05:00
Doug Burks
a54bb2bad4
Remove descriptions from so-zeek-logs
2022-11-21 13:23:53 -05:00
lock-wire
f80c8b89e4
Shorten Log Descriptions
2022-11-21 09:49:31 -07:00
lock-wire
1b8e546045
Add s7comm,tds,stun,profinet,wireguard
2022-11-16 21:41:02 -06:00
lock-wire
8dc08f66fd
Merge branch 'foxtrot' of https://github.com/Security-Onion-Solutions/securityonion into foxtrot
...
merge remote
2022-11-11 12:18:02 -08:00
lock-wire
73b1e5949b
Add ecat, enip, cip, and opcua
2022-11-11 12:15:54 -08:00
Jason Ertel
595a95fdf5
merge conflicts
2022-11-10 16:47:52 -05:00
Mike Reeves
4acd9f8816
Update soup
2022-11-09 10:10:52 -05:00
Mike Reeves
a7417a7242
Update soup
2022-11-08 14:48:48 -05:00
Mike Reeves
16d8e9e5a0
Fix soup and perms updates
2022-11-01 09:05:26 -04:00
Mike Reeves
ee1f55361e
Add soup and perms updates
2022-10-31 16:33:38 -04:00
Mike Reeves
bd7e12f682
Merge pull request #8952 from Njinx/dev
...
FEATURE: so-pcap-export can run without needing to be attached to a TTY
2022-10-25 14:38:48 -04:00
Jason Ertel
05e271af47
update soup for 2.3.181
2022-10-21 11:52:54 -04:00
Ben Allen
f13f05eb94
Run without needing to be attached to a TTY
2022-10-19 14:11:11 -04:00
Doug Burks
7401008523
Update soup for 2.3.180
2022-10-11 12:58:37 -04:00
Mike Reeves
b8355b3a03
Update soup
2022-09-22 09:10:12 -04:00
Mike Reeves
e62bebeafe
Update soup
2022-08-29 09:39:41 -04:00
Mike Reeves
30b9868de1
Update soup
2022-08-29 09:32:46 -04:00
weslambert
f00d9074ff
Allow local modification acceptance prompt to be skipped when passing 'skip-prompt' as a parameter value to check_local_mods() function
2022-08-19 16:07:14 -04:00
weslambert
fbf0803906
Update verbiage around major Elasticsearch version and not requiring Elastalert index maintenance
2022-08-18 09:16:22 -04:00
weslambert
5deda45b66
Update elastalert_indices_check() function to only delete Elastalert indices if major Elasticsearch version is less than 8
...
Update elastalert_indices_check() function to only delete Elastalert indices if major Elasticsearch version is less than 8. Also clean up the output to only emit one notification regarding index deletion, and additional verbiage around function operation.
2022-08-18 09:11:38 -04:00
weslambert
fd7a118664
Invoke check_local_mods() function earlier so we don't have to wait for Docker image downloads or OS updates before checking and potentially exiting SOUP
2022-08-08 08:58:19 -04:00
weslambert
d7906945df
Add extra set of brackets for comparison of integers
2022-08-08 08:24:38 -04:00
weslambert
cb384ae024
Ensure check_local_mods() runs at the beginning of SOUP, in addition to the end, and also that it prompts (forces) the user to accept/review local modifications.
2022-08-05 11:25:33 -04:00
weslambert
340dbe8547
Check to see if Elastalert is enabled before trying to run 'so-elastalert-stop'. Also suppress error output for when so-elastalert container is not present.
2022-07-19 13:25:09 -04:00
Wes Lambert
5ceff52796
Move Elastalert indices check to function and call from beginning of soup and during pre-upgrade to 2.3.140
2022-07-19 14:54:39 +00:00
Wes Lambert
f3a0ab0b2d
Perform Elastalert index check twice
2022-07-19 14:48:19 +00:00
Wes Lambert
4a7c994b66
Revise Elastalert index check deletion logic
2022-07-19 14:31:45 +00:00
Mike Reeves
07b8785f3d
Update soup
2022-07-19 10:23:10 -04:00
weslambert
f5e10430ed
Add forward slash to fix issue with missing query path
2022-07-18 09:07:13 -04:00
weslambert
2443e8b97e
Change web_response to evaluate the response from the Spaces API and the default space query
2022-07-14 12:04:56 -04:00
weslambert
0fd4f34b5b
Add shebang so that so-kibana-space-defaults will work correctly on Ubuntu
2022-07-13 16:48:39 -04:00
Doug Burks
c67a58a5b1
change hyperlink for Elastic 8 issues
2022-07-13 12:40:03 -04:00
weslambert
513c7ae56c
Add missing 'fi' to if/then for unsupported indices check
2022-07-13 09:13:28 -04:00
weslambert
8e92060c29
Ensure Elastalert indices are deleted before continuing with SOUP -- if they are not, generate a failure condition
2022-07-13 08:38:55 -04:00
weslambert
d0a0ca8458
Update exit code for ES checks
2022-07-12 16:15:44 -04:00
weslambert
4502182b53
Typo - Ensure Elasticsearch version 6 indices are checked
2022-07-12 15:35:46 -04:00
weslambert
0fc6f7b022
Add check for Elasticsearch 6 indices
2022-07-12 15:34:24 -04:00
weslambert
bd32394560
Add securitySolutionCases feature to ensure Cases are disabled by default
2022-07-11 16:38:05 -04:00
weslambert
f77edaa5c9
Run so-kibana-space-defaults to re-establish the default enabled features since Fleet feature name changed
2022-07-11 14:41:23 -04:00
Jason Ertel
15124b6ad7
Merge pull request #8271 from Security-Onion-Solutions/kilo
...
Add content-type header to PUT request, now required in Kratos 0.10.1
2022-07-11 13:47:28 -04:00
