 weslambert
|
c1a88977cf
|
Disable fielddata for _id field by default (since it is deprecated and can be memory-intensive)
|
2022-01-05 15:23:52 -05:00 |
|
 m0duspwnens
|
0ff5e3cf6f
|
require so-elasticsearch container to be running to run the scripts
|
2022-01-05 14:48:41 -05:00 |
|
|
Wes Lambert
|
b60837e71a
|
Initial commit for data type compliance
|
2022-01-05 16:38:56 +00:00 |
|
 Jason Ertel
|
4f8524e0ac
|
Prevent PCAP action from showing up outside of hunt/alerts
|
2022-01-05 11:13:12 -05:00 |
|
|
weslambert
|
db43e21378
|
Fix indentation
|
2022-01-05 10:46:41 -05:00 |
|
|
weslambert
|
4d8b417fc9
|
Denote which branch is being used in SOUP if BRANCH is specified
|
2022-01-05 10:41:27 -05:00 |
|
 Jason Ertel
|
89415b12ce
|
Merge pull request #6762 from Security-Onion-Solutions/kilo
Switch soc.json to use lowercase labels in default queries; Also enab…
|
2022-01-05 09:59:39 -05:00 |
|
|
Jason Ertel
|
4bfdfffe21
|
Switch soc.json to use lowercase labels in default queries; Also enable the 'Add Case' feature
|
2022-01-05 09:54:13 -05:00 |
|
|
m0duspwnens
|
7bb9b6efa9
|
populate mine with network.ip_addrs pillar.host.mainint for each host prior to highstate
|
2022-01-04 10:27:45 -05:00 |
|
 Mike Reeves
|
288389c93e
|
Soup changes for 2.3.100
|
2022-01-04 08:38:14 -05:00 |
|
|
Josh Patterson
|
4247a3a816
|
Merge pull request #6730 from Security-Onion-Solutions/fix/ub1804ssl
more detailed logging for the retry command
|
2021-12-30 13:19:58 -05:00 |
|
|
m0duspwnens
|
cc2f6e23ca
|
more detailed logging for the retry command
|
2021-12-30 13:09:29 -05:00 |
|
|
Josh Patterson
|
064355dfb5
|
Merge pull request #6729 from Security-Onion-Solutions/fix/ub1804ssl
change exitCode to exitcode. set exitcode to 1 if failed output found
|
2021-12-30 11:38:32 -05:00 |
|
|
m0duspwnens
|
d274615376
|
change exitCode to exitcode. set exitcode to 1 if failed output found
|
2021-12-30 10:45:30 -05:00 |
|
|
Josh Patterson
|
78eda75c0f
|
Merge pull request #6725 from Security-Onion-Solutions/fix/ub1804ssl
add option to look for failed outout in retry function in so-common. …
|
2021-12-29 18:18:12 -05:00 |
|
|
m0duspwnens
|
200736a118
|
add option to look for failed outout in retry function in so-common. look for Err: when running soapt-get update in setup
|
2021-12-29 18:15:16 -05:00 |
|
|
Jason Ertel
|
1d136b611a
|
Merge pull request #6723 from Security-Onion-Solutions/kilo
Uniform presets
|
2021-12-29 16:49:41 -05:00 |
|
|
Jason Ertel
|
e6051cb653
|
Switch all presets to lowercase for uniformity
|
2021-12-29 16:42:34 -05:00 |
|
|
Jason Ertel
|
74dbc4bf67
|
Merge pull request #6720 from Security-Onion-Solutions/kilo
Add case template to eval install types; also improve clarity of case queries
|
2021-12-29 11:41:06 -05:00 |
|
|
Jason Ertel
|
fb02d0d35c
|
clarify case filters
|
2021-12-29 11:07:36 -05:00 |
|
|
Jason Ertel
|
d4f3615cae
|
Merge pull request #6717 from Security-Onion-Solutions/kilo
Support CCS in CM
|
2021-12-29 09:12:13 -05:00 |
|
|
Jason Ertel
|
e5110ac4e8
|
Use CCS compatible index
|
2021-12-29 09:08:10 -05:00 |
|
|
Jason Ertel
|
e87cbc37a4
|
Add case template
|
2021-12-28 19:17:15 -05:00 |
|
 Doug Burks
|
e56a9a5f22
|
Merge pull request #6711 from Security-Onion-Solutions/dougburks-patch-1
fix typo in so-analyst-install
|
2021-12-28 15:24:19 -05:00 |
|
|
Doug Burks
|
463925686d
|
fix typo in so-analyst-install
|
2021-12-28 15:23:17 -05:00 |
|
|
m0duspwnens
|
2a5b4ef276
|
add mine function to signing_policies.conf. no longer need to check if mine in ca during manager install
|
2021-12-28 15:19:06 -05:00 |
|
|
m0duspwnens
|
487ac24306
|
revert back to getting ca from mine
|
2021-12-28 11:16:01 -05:00 |
|
|
m0duspwnens
|
2405de4b82
|
fix require
|
2021-12-28 11:00:35 -05:00 |
|
|
m0duspwnens
|
f2adcf4ca5
|
ensure /etc/pki is created and simplify ca logic for non manager in ssl state
|
2021-12-28 10:41:57 -05:00 |
|
|
Jason Ertel
|
5a4473ecd6
|
fix indent
|
2021-12-28 08:33:31 -05:00 |
|
|
Jason Ertel
|
f335670b3f
|
Add new client-side param for cases
|
2021-12-27 21:53:30 -05:00 |
|
|
Jason Ertel
|
194e4119f0
|
Correct missing json vars
|
2021-12-27 20:36:28 -05:00 |
|
|
Jason Ertel
|
09626deb05
|
Correct var names for jinja
|
2021-12-27 18:01:15 -05:00 |
|
|
Jason Ertel
|
ae7a4b6528
|
More syntax corrections
|
2021-12-27 16:18:12 -05:00 |
|
|
Jason Ertel
|
0a255e5765
|
Resolve syntax error
|
2021-12-27 15:15:33 -05:00 |
|
|
Jason Ertel
|
789719d25e
|
Correct preset file syntax
|
2021-12-27 13:21:13 -05:00 |
|
|
Jason Ertel
|
7140255d95
|
Add missing presets file
|
2021-12-27 12:27:04 -05:00 |
|
|
Jason Ertel
|
ab3319b472
|
Add artifact support
|
2021-12-27 10:49:10 -05:00 |
|
|
Jason Ertel
|
b0d36f2ed2
|
Ensure update timestamp is updated when changing passwords; this ensures the sync will automatically follow
|
2021-12-21 13:38:35 -05:00 |
|
|
Jason Ertel
|
62e5914ab8
|
Merge branch 'dev' into kilo
|
2021-12-21 13:37:37 -05:00 |
|
|
Jason Ertel
|
9aeaa1fccc
|
resolved merge conflicts
|
2021-12-21 09:35:57 -05:00 |
|
|
Jason Ertel
|
2c9062efb7
|
resolved merge conflicts
|
2021-12-21 09:34:39 -05:00 |
|
|
Jason Ertel
|
35617acaeb
|
Update cacerts to reflect new path; this changed due to ES 7.16.2
|
2021-12-20 12:12:00 -05:00 |
|
|
Jason Ertel
|
6f116a2d01
|
Switch to new Ubuntu SSL dir
|
2021-12-20 09:43:59 -05:00 |
|
|
Jason Ertel
|
d6c651af1c
|
Remove old patch dir from previously-patched installations
|
2021-12-20 09:42:27 -05:00 |
|
|
Jason Ertel
|
b8fcec04b8
|
Remove patched jar due to upgrade of Elastic images to 7.16.2
|
2021-12-20 09:27:03 -05:00 |
|
|
Jason Ertel
|
6556a37869
|
Merge branch 'master' into patch/1.3.91
|
2021-12-20 09:20:03 -05:00 |
|
|
Jason Ertel
|
5af2bd8fa4
|
Upgrade to Elastic 7.16.2
|
2021-12-20 09:16:28 -05:00 |
|
|
m0duspwnens
|
a46a876ec6
|
add managersearch to list
|
2021-12-16 13:48:41 -05:00 |
|
 Josh Brower
|
affe5b9ac0
|
Merge pull request #6605 from Security-Onion-Solutions/fix/fleet-ips
Fix cidr for fleet custom docker range
|
2021-12-16 11:55:11 -05:00 |
|