Commit Graph

5222 Commits

Author SHA1 Message Date
Mike Reeves
7f4b8e8183 Update README.md 2020-11-03 11:39:42 -05:00
Josh Patterson
1f8b139462 Merge pull request #1806 from Security-Onion-Solutions/issue/1782
Issue/1782
2020-11-03 11:23:22 -05:00
m0duspwnens
562a016579 remove more from sosetup.log 2020-11-03 10:23:56 -05:00
weslambert
e040009d0b Merge pull request #1804 from Security-Onion-Solutions/fix/wazuh_api_creds_remove
Remove Wazuh API creds after registering initial agent
2020-11-03 09:57:58 -05:00
Wes Lambert
7dca988c11 Remove Wazuh API creds after registering intial agent 2020-11-03 14:53:50 +00:00
Mike Reeves
f007ef0ef5 Update so-functions 2020-11-02 17:00:02 -05:00
weslambert
bfe98433f6 Merge pull request #1789 from Security-Onion-Solutions/fix/zeek_intel
Add Zeek intel.dat
2020-11-02 16:38:16 -05:00
Wes Lambert
05549a2362 Add Zeek intel.dat 2020-11-02 21:36:44 +00:00
m0duspwnens
7e090b0894 dont echo salt minion config file to prevent mysql.pass from showing in sosetup.log 2020-11-02 16:23:34 -05:00
weslambert
8a645edb34 Merge pull request #1788 from Security-Onion-Solutions/feature/nids_rules
Allow for muliple files for rules
2020-11-02 16:05:53 -05:00
Wes Lambert
24a54a326c Allow for muliple files for rules 2020-11-02 21:03:45 +00:00
Jason Ertel
184d163d65 Do not persist the Cortex PID file; This allows Cortex to recover from non-graceful container shutdowns, such as a power loss event on the host machine 2020-11-02 15:04:13 -05:00
weslambert
bb0cf9b8c7 Merge pull request #1784 from Security-Onion-Solutions/fix/strelka_exif_parsing
Fix/strelka exif parsing
2020-11-02 14:32:45 -05:00
Wes Lambert
3113d5fbdb Format scan.exiftool as text 2020-11-02 19:31:14 +00:00
Wes Lambert
6420ee0310 Update parsing for scan.exiftool 2020-11-02 19:28:12 +00:00
William Wernert
033f5dbb9c [fix] Use (mostly) absolute path when adding to PATH 2020-11-02 14:25:46 -05:00
William Wernert
1c4abcef15 [fix] Kill all jobs before checking if we can reach the salt master 2020-11-02 14:25:02 -05:00
Jason Ertel
2acb930a2e fix: Remove crontab for automation installs 2020-11-02 11:08:45 -05:00
weslambert
37c630d6ab Merge pull request #1776 from Security-Onion-Solutions/bugfix/af-packet-ring-size
Match max-pending-packets size
2020-11-02 08:39:21 -05:00
weslambert
71a260a000 Match max-pending-packets size 2020-11-02 08:38:45 -05:00
William Wernert
b489fee8b5 Merge pull request #1738 from Security-Onion-Solutions/bugfix/nginx-redirect
Bugfix/nginx redirect
2020-10-29 14:33:38 -04:00
William Wernert
91221c4332 [revert] Move proxy_pass back to ip 2020-10-29 10:23:12 -04:00
William Wernert
3abd1c9f16 [fix] Configure soctopus to use url_base 2020-10-28 16:08:19 -04:00
Mike Reeves
b14c1d0999 Merge pull request #1713 from Security-Onion-Solutions/logstashbind
Add a place where custom logstash certs can go
2020-10-28 15:27:26 -04:00
Mike Reeves
13be0da484 Add a place where custom logstash certs can go 2020-10-28 15:26:41 -04:00
Mike Reeves
3385d98a2a Merge pull request #1712 from Security-Onion-Solutions/logstashbind
Add a place where custom logstash certs can go
2020-10-28 15:26:08 -04:00
Mike Reeves
361b13dc88 Add a place where custom logstash certs can go 2020-10-28 15:25:00 -04:00
Jason Ertel
98c669e80b Disable nginx server version and TLSv1.0/TLSv1.1 2020-10-28 14:29:29 -04:00
William Wernert
b02d434a0e [fix] Change any scripts using auth headers to url_base 2020-10-28 12:29:09 -04:00
William Wernert
3ee9f23d26 [fix] Use url_base in sensoroni.json instead of manager hostname 2020-10-28 12:28:34 -04:00
Jason Ertel
348c2feee2 Prevent usage of dollar signs in admin passwords during setup 2020-10-28 11:07:05 -04:00
Mike Reeves
b238c492e4 Update so-functions 2020-10-28 10:50:10 -04:00
Mike Reeves
97207bd006 Merge pull request #1702 from Security-Onion-Solutions/dockernet
Custom Docker IP Range
2020-10-28 10:48:56 -04:00
Mike Reeves
bed70ab6bf Update whiptail menu for docker question 2020-10-28 10:19:15 -04:00
Mike Reeves
8173cb589b Update whiptail menu for docker question 2020-10-28 10:17:53 -04:00
Mike Reeves
563a606e0e Upodate dockernet menu 2020-10-28 10:14:14 -04:00
Mike Reeves
8d952eca7e Upodate dockernet menu 2020-10-28 10:12:07 -04:00
Mike Reeves
8f7dffea4b Upodate dockernet menu 2020-10-28 10:10:43 -04:00
weslambert
7ea8dc84b6 Merge pull request #1696 from Security-Onion-Solutions/feature/wazuh-user-mods
Add Wazuh user management scripts
2020-10-28 08:24:15 -04:00
Wes Lambert
453247971e Add Wazuh user management scripts 2020-10-28 12:22:50 +00:00
Mike Reeves
741e17a637 add bip for docker 2020-10-27 18:21:53 -04:00
Mike Reeves
fedf334ee9 add bip for docker 2020-10-27 18:21:09 -04:00
Mike Reeves
8fee19ee1b add bip for docker 2020-10-27 18:01:48 -04:00
Mike Reeves
697bc53aec Dockernet Modifications 2020-10-27 15:08:34 -04:00
Jason Ertel
5a705fc0f2 Add Hunt quick action for hunted events, grouping by dataset and module 2020-10-27 12:30:33 -04:00
William Wernert
7b17b4abc7 Merge pull request #1680 from Security-Onion-Solutions/feature/setup-fixes
Feature/setup fixes
2020-10-27 12:17:21 -04:00
William Wernert
a043bc7cc4 [fix] Second if to elif 2020-10-27 12:16:19 -04:00
William Wernert
72dc267ab5 [fix] Menu sizing fixes 2020-10-27 12:14:44 -04:00
William Wernert
970be4d530 [fix] Change cd to relative
Since the script already changes to the correct dir, we can work from relative directories now.
2020-10-27 12:13:07 -04:00
Jason Ertel
474c4e54b4 Ensure labels and icons are associated with all quick actions 2020-10-27 12:04:57 -04:00