6216 Commits

Author	SHA1	Message	Date
m0duspwnens	7e1bbe3cc2	define MAANGER	2021-10-15 16:14:14 -04:00
m0duspwnens	947285e932	update cmd.run amd s_o files	2021-10-15 16:06:25 -04:00
m0duspwnens	1741f5068a	update config-load to do an update or import	2021-10-15 15:35:30 -04:00
Mike Reeves	a9f6c84d7c	Add Steno Tuning Options	2021-10-15 14:17:54 -04:00
weslambert	59852841ff	Add keyword subfield for event.module	2021-10-15 13:29:50 -04:00
Jason Ertel	8de8d58155	Upgrade to ES 7.15.1	2021-10-15 13:27:08 -04:00
Wes Lambert	032373187c	Allow setting ES index patterns for SOC in pillar	2021-10-15 16:02:53 +00:00
William Wernert	db2b70f655	Merge pull request #5900 from Security-Onion-Solutions/foxtrot ... Replace rather than append to Kibana misc log	2021-10-15 10:27:25 -04:00
Jason Ertel	1800ec4570	Upgrade to Elastalert 2 v2.2.2	2021-10-15 09:25:44 -04:00
Mike Reeves	8a5960c220	Merge pull request #5896 from Security-Onion-Solutions/kilo	2021-10-14 18:05:33 -04:00
Jason Ertel	9797a15218	Fix issue with 'so-user delete' resetting all user roles - note that this function is not technically supported or published since it's not intended for production use	2021-10-14 17:23:18 -04:00
William Wernert	c7b15a9b1f	Replace rather than append to Kibana misc log	2021-10-14 15:13:55 -04:00
m0duspwnens	6a2bf11a75	change format of file	2021-10-14 13:43:39 -04:00
m0duspwnens	78d30285b1	seperate securitySolutions load	2021-10-14 13:24:51 -04:00
Wes Lambert	15049f44b9	Add EG pivot	2021-10-14 15:15:23 +00:00
Doug Burks	42a642b85c	Merge pull request #5873 from petiepooo/enh-rediscount-tty ... featreq: remove tty flag in redis-count script	2021-10-14 10:07:07 -04:00
Wes Lambert	5ee0ea3fe7	Allow SOC actions to use Jinja	2021-10-14 13:59:55 +00:00
Wes Lambert	a9b250c0f4	Add EG firewall config	2021-10-13 21:37:59 +00:00
m0duspwnens	ae9753326a	fix var, quote vars	2021-10-13 16:38:01 -04:00
m0duspwnens	c8fb504ee0	Revert "Merge remote-tracking branch 'remotes/origin/dev' into issue/3933" ... This reverts commit 54eec92621, reversing changes made to 7832e59629.	2021-10-13 15:22:46 -04:00
m0duspwnens	54eec92621	Merge remote-tracking branch 'remotes/origin/dev' into issue/3933	2021-10-13 15:19:33 -04:00
m0duspwnens	7832e59629	only load default kibana saved_objects during setup	2021-10-13 15:19:20 -04:00
Wes Lambert	2a504a061b	Add Curator action files for EG indices	2021-10-13 18:40:34 +00:00
Pete	e7581036f7	remove tty/interactive flags ... This call to docker exec simply returns a number. No interaction (stdin) or tty is required. Specifically, having the -t option prevents running via salt using a command such as: > salt '*' cmd.run 'so-redis-count'	2021-10-13 13:51:05 -04:00
Wes Lambert	e1629d7ec4	Initial EG stuff	2021-10-13 17:13:07 +00:00
m0duspwnens	23ea53248d	single line format	2021-10-12 14:15:37 -04:00
m0duspwnens	f1a5991699	add securitySolution.defaultIndex to defaults	2021-10-12 12:35:13 -04:00
m0duspwnens	c69ad091f7	update saved_objects config	2021-10-12 12:02:30 -04:00
m0duspwnens	498e385484	change name to SAVED_OBJECTS	2021-10-12 10:15:39 -04:00
m0duspwnens	19489f3626	Merge remote-tracking branch 'remotes/origin/dev' into issue/3933	2021-10-12 10:07:40 -04:00
m0duspwnens	89d1df8a1d	change name to SAVED_OBJECTS	2021-10-12 10:07:26 -04:00
Mike Reeves	2561480371	Merge pull request #5850 from Security-Onion-Solutions/kilo ... Upgrade to Kratos 0.7.6-alpha.1	2021-10-12 08:19:25 -04:00
Jason Ertel	d21dee162d	Add Note field to user traits; Enforce max length restrictions on email, firstname, lastname, and note fields	2021-10-08 12:39:17 -04:00
Mike Reeves	2a82373051	highlander fixes	2021-10-08 09:32:13 -04:00
Mike Reeves	64758a534c	Set ml to true	2021-10-08 08:42:26 -04:00
m0duspwnens	7517a63008	disabled ml	2021-10-07 13:06:52 -04:00
m0duspwnens	b2facdf31c	add securitySolutions advanced setting	2021-10-07 12:57:28 -04:00
m0duspwnens	4c54d6309c	change host to 0.0.0.0	2021-10-07 09:59:29 -04:00
Jason Ertel	62c3afc81d	Migrate users from locked to inactive during soup	2021-10-06 15:45:35 -04:00
Jason Ertel	7d8c8144b0	Drop obsolete status trait	2021-10-06 12:52:41 -04:00
Jason Ertel	a2c4fce1ef	Switch to use state attribute in identities for enabling/disabling users	2021-10-06 11:53:10 -04:00
m0duspwnens	599aba43d9	restart so-kibaba if config changes	2021-10-06 09:51:16 -04:00
m0duspwnens	fa4f92cdda	change defaults	2021-10-05 17:35:44 -04:00
m0duspwnens	5d98c0d14c	fix dict update	2021-10-05 15:57:57 -04:00
Mike Reeves	27614569e3	Fix set	2021-10-05 14:32:02 -04:00
m0duspwnens	ec357cca3c	fix cars	2021-10-05 12:57:30 -04:00
m0duspwnens	26681ac98a	var for dash saved objevs	2021-10-05 12:46:21 -04:00
m0duspwnens	748f0f2a1d	Merge remote-tracking branch 'remotes/origin/dev' into issue/3933	2021-10-05 12:12:56 -04:00
Mike Reeves	869af548af	Fix spaces for highlander	2021-10-05 11:06:13 -04:00
Mike Reeves	2fd344822d	Add additional roles for highlander	2021-10-05 10:40:40 -04:00