135 Commits

Author	SHA1	Message	Date
weslambert	4d7af21dd5	Fix quote	2024-01-23 13:55:37 -05:00
weslambert	1698d95efe	Use PLACEHOLDER for key values	2024-01-23 13:45:26 -05:00
weslambert	72319e33db	Avoid leak test triggering	2024-01-23 12:38:09 -05:00
Wes	3bcb0bc132	Update defaults	2024-01-23 17:18:54 +00:00
Mike Reeves	ee45fc31a2	Delete salt/strelka/tools/sbin_jinja/so-yara-download	2023-09-28 11:04:16 -04:00
m0duspwnens	05e7c32cf9	remove duplicate filecheck_run cron	2023-09-27 10:08:08 -04:00
Jason Ertel	bb3632d1b2	fix bind if statement	2023-09-18 14:38:15 -04:00
Jason Ertel	66bb1272ae	avoid volume sprawl	2023-09-18 13:39:56 -04:00
m0duspwnens	0a88c812e8	differnet watchdog package names for debian vs redhat fams	2023-08-25 13:03:33 -04:00
m0duspwnens	ab1d97c985	restart filecheck if watchdog pkg changes	2023-08-25 09:39:16 -04:00
m0duspwnens	4a489afb89	remove old and install new watchdog package	2023-08-25 08:55:00 -04:00
m0duspwnens	789fff561e	ensure ownership of /opt/so/log/strelka/filecheck.log	2023-08-08 17:55:30 -04:00
m0duspwnens	58fe25623b	ensure ownership of /opt/so/log/strelka/filecheck_stdout.log	2023-08-08 17:48:34 -04:00
m0duspwnens	553b758c61	update cronjobs first, the kill filecheck	2023-08-08 17:28:14 -04:00
m0duspwnens	6da2f117f2	change which user runs filecheck cron based on md engine	2023-08-08 17:25:08 -04:00
m0duspwnens	2dbe679849	force restart of filecheck if the config changes	2023-08-08 17:05:03 -04:00
Mike Reeves	5a59975cb8	Update so-yara-download	2023-07-31 10:14:31 -04:00
Mike Reeves	f0c391e801	Multi OS Support	2023-07-13 15:05:51 -04:00
m0duspwnens	676696b24a	restart strelka backend if rules change	2023-07-11 15:48:22 -04:00
weslambert	b7cab1d118	Change path to old one	2023-07-11 09:10:20 -04:00
Mike Reeves	c7a0801eed	Merge pull request #10725 from Security-Onion-Solutions/yararules ... Yararules	2023-07-11 08:49:20 -04:00
m0duspwnens	47b2481cdd	nothing in strelka/tools/sbin_jinja to file.recurse	2023-07-10 10:29:19 -04:00
Mike Reeves	0c9e230294	Initial RHEL support	2023-07-10 10:14:47 -04:00
m0duspwnens	f4dc73a206	yara download and update	2023-07-10 09:42:37 -04:00
m0duspwnens	8be5082b60	yara scripts	2023-07-07 16:43:26 -04:00
weslambert	79ed17b506	Change path	2023-07-07 13:31:43 -04:00
Mike Reeves	5922fc0e45	Rule Updates	2023-05-26 16:29:13 -04:00
Mike Reeves	b48e259fee	Rule Updates	2023-05-26 16:27:29 -04:00
Mike Reeves	b2d2a9f0ed	Rule Updates	2023-05-26 15:16:14 -04:00
Mike Reeves	5315c51197	Allow additional docker parameters	2023-05-18 16:52:38 -04:00
Mike Reeves	2aa801d906	Allow additional docker parameters	2023-05-18 16:31:29 -04:00
m0duspwnens	7a4fea7a12	fix nginx merge conflicts	2023-05-15 11:40:12 -04:00
m0duspwnens	20f706f165	enable/disable telegraf in ui	2023-05-11 12:12:25 -04:00
m0duspwnens	06a0492226	import DOCKER and GLOBALS for filestream enabled	2023-05-10 16:04:53 -04:00
m0duspwnens	c91fb438bb	update map file with new strelka format	2023-05-10 15:53:28 -04:00
m0duspwnens	54c9a3ec71	enable/disable each strelka container in ui	2023-05-10 15:50:07 -04:00
weslambert	a1e0041b14	Merge pull request #10287 from Security-Onion-Solutions/fix/strelka_ignore_yara_rules_2.4 ... Ignore "expl_outlook_cve_2023_23397.yar" and "gen_mal_3cx_compromise_mar23.yar" since they are causing problems with YARA compilation	2023-05-08 11:58:17 -04:00
weslambert	c7ed29dfa8	Ignore "expl_outlook_cve_2023_23397.yar" and "gen_mal_3cx_compromise_mar23.yar" since they are causing problems with YARA compilation	2023-05-04 16:16:06 -04:00
Mike Reeves	cbd1c05929	Sbin Changes	2023-05-04 10:36:03 -04:00
Mike Reeves	2d4f4791e0	Move files out of common	2023-05-01 15:21:31 -04:00
m0duspwnens	1047462898	add identifiers for all cron.present	2023-04-13 16:25:47 -04:00
Mike Reeves	22c3a4d398	Adjust elasticsearch annotations	2023-03-20 16:08:26 -04:00
m0duspwnens	924d598a8a	add filecheck_runas	2023-03-17 08:38:56 -04:00
m0duspwnens	dd4461daf4	remove other filecheck map import	2023-03-16 17:50:19 -04:00
m0duspwnens	a9b8877268	remove filecheckdefaults from strelka init	2023-03-16 17:15:52 -04:00
m0duspwnens	7950f692a8	Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/strelka	2023-03-16 16:41:24 -04:00
m0duspwnens	0dfbbfcf8e	fix spacing on filecheck config	2023-03-16 16:37:38 -04:00
m0duspwnens	2056ce37c6	strelka ui things	2023-03-16 16:32:41 -04:00
Jason Ertel	49df376bcc	Remove non-existant Ruby scanner	2023-03-15 19:24:03 -04:00
Mike Reeves	a36a6d5659	Strelka UI components	2023-03-15 10:40:16 -04:00