74 Commits

Author	SHA1	Message	Date
m0duspwnens	54c9a3ec71	enable/disable each strelka container in ui	2023-05-10 15:50:07 -04:00
Mike Reeves	cbd1c05929	Sbin Changes	2023-05-04 10:36:03 -04:00
m0duspwnens	1047462898	add identifiers for all cron.present	2023-04-13 16:25:47 -04:00
m0duspwnens	924d598a8a	add filecheck_runas	2023-03-17 08:38:56 -04:00
m0duspwnens	dd4461daf4	remove other filecheck map import	2023-03-16 17:50:19 -04:00
m0duspwnens	a9b8877268	remove filecheckdefaults from strelka init	2023-03-16 17:15:52 -04:00
m0duspwnens	2056ce37c6	strelka ui things	2023-03-16 16:32:41 -04:00
m0duspwnens	f9b8c78d74	move repos to rules dir	2023-03-14 14:43:13 -04:00
m0duspwnens	b38d5df684	set default mime_db	2023-03-14 13:25:51 -04:00
m0duspwnens	9d4e1cc149	jinja for strelka	2023-03-13 16:48:21 -04:00
m0duspwnens	58343e39fa	2.4 strelka	2023-03-10 17:32:14 -05:00
Mike Reeves	39361c2ab0	unfix playbook fix	2023-02-24 10:01:27 -05:00
Mike Reeves	1289500e03	unfix playbook fix	2023-02-24 09:55:49 -05:00
m0duspwnens	a37f0fd0c0	rename sosbridge to sobridge	2023-02-03 10:07:07 -05:00
m0duspwnens	3653df4d5f	spell it right	2023-01-13 10:18:13 -05:00
m0duspwnens	6033e9a0de	use port_bindings from docker defaults in docker states	2023-01-13 10:15:10 -05:00
m0duspwnens	24876eecd9	change refs from sosnet to sosbridge	2022-12-22 14:02:40 -05:00
m0duspwnens	accc293c8a	2.4 firewall changes	2022-12-21 15:03:45 -05:00
Jason Ertel	0bbc68edae	Switch back to older style redirect due to incompatibility with Ub 18	2022-12-07 14:08:11 -05:00
Jason Ertel	fde33de030	Use original style due to pgrep conflict with cron	2022-12-07 11:51:49 -05:00
Jason Ertel	e849783a86	Reduce cron noise; ensure filecheck is restarted if modified	2022-12-07 08:36:56 -05:00
Jason Ertel	88410bc8f8	Merge branch '2.4/dev' into config	2022-12-06 12:38:43 -05:00
Jason Ertel	168cd00e1b	Handle suricata extracted with filecheck	2022-12-06 12:34:02 -05:00
Mike Reeves	f083b3867b	Update init.sls	2022-12-02 09:40:35 -05:00
m0duspwnens	b95a83b016	Merge remote-tracking branch 'remotes/origin/2.4/dev' into dockerips	2022-11-22 14:17:19 -05:00
Jason Ertel	ed9aa5b73f	Ensure filecheck is up by checking every minute	2022-11-17 10:48:53 -05:00
Jason Ertel	0ffef75d7b	Move background jobs to cron	2022-11-17 09:50:41 -05:00
Jason Ertel	c572848ece	temporarily remove filecheck for debug purposes	2022-11-17 08:06:24 -05:00
Mike Reeves	591616fe5b	Add statics to all containers	2022-11-15 11:05:17 -05:00
Mike Reeves	225c33e5c9	Add Strelka Filecheck	2022-11-02 09:46:23 -04:00
m0duspwnens	b526532ab6	use global vars in states	2022-10-11 11:57:15 -04:00
Jason Ertel	21c7f940d7	Update copyrights	2022-09-13 11:48:25 -04:00
Mike Reeves	2bd9dd80e2	Move In Day	2022-09-07 09:06:25 -04:00
Jason Ertel	eefcc929c2	Update copyright pattern to match other repos	2022-01-24 10:09:23 -05:00
Jason Ertel	7c22f46a55	Update copyright year for 2022	2022-01-24 09:35:29 -05:00
weslambert	39e5ded58d	Refactor ignore list and only ignore for signature-base for now	2021-09-15 11:32:29 -04:00
Wes Lambert	038c58f3d5	Ignore TIME_WAIT when checking for Strelka frontend port reservation	2021-03-16 14:51:16 +00:00
Wes Lambert	b6a785395d	Add Strelka staging directory for state	2021-03-15 15:42:13 +00:00
Mike Reeves	b4b449aa14	Pull in Suricata changes	2021-02-19 11:01:15 -05:00
Wes Lambert	0039877779	Check for port availability for Wazuh and Strelka	2021-01-21 13:29:09 +00:00
m0duspwnens	b693373d8d	change how we allow or disallow states to be run https://github.com/Security-Onion-Solutions/securityonion/issues/2679	2021-01-20 15:09:53 -05:00
Mike Reeves	2950779d91	Fix stralka rule update	2021-01-13 09:57:12 -05:00
Wes Lambert	ac96ded2dc	Support setting rule repos via pillar	2020-12-22 15:36:15 +00:00
weslambert	2fee2ca143	Change identifier name to be more descriptive	2020-12-18 15:40:54 -05:00
weslambert	7453626b06	Add identifier	2020-12-18 15:39:52 -05:00
weslambert	1a463bccaf	Add cron.absent to remove old cron job if present	2020-12-18 11:25:14 -05:00
weslambert	bf76c1b58c	Create unprocessed dir and move Zeek extracted files there	2020-12-18 10:52:14 -05:00
m0duspwnens	1fca5e65df	redo how containers get added to so-status https://github.com/Security-Onion-Solutions/securityonion/issues/1681	2020-11-10 15:31:47 -05:00
Mike Reeves	112a0b426e	Merge branch 'dev' into experimental	2020-09-13 14:54:00 -04:00
Mike Reeves	48d1d0c168	Strelkas Rules Update	2020-09-11 18:24:56 -04:00