CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-01-13 19:51:23 +01:00
Code Issues Packages Projects Releases Wiki Activity
6,031 Commits 22 Branches 120 Tags
dd20002fd5999bd354bbefbc7c0486caee9cd2e8
Commit Graph

3447 Commits

Author SHA1 Message Date
Josh Patterson
fea6e6f4f9 Merge branch 'dev' into patch_2.3.3 2020-11-05 09:58:43 -05:00
Mike Reeves
3825becd1b Update changes.json 2020-11-04 13:44:52 -05:00
Mike Reeves
2aa21512e5 Update soup 2020-11-04 13:40:45 -05:00
William Wernert
3ac9c43b7b Merge branch 'dev' into feature/setup-idempotency 2020-11-04 12:44:14 -05:00
Mike Reeves
e989fc7041 Update map.jinja 2020-11-04 10:58:52 -05:00
Mike Reeves
4592e2d4d7 add airgap option to upgradecommand 2020-11-04 10:08:01 -05:00
Mike Reeves
ec64314b70 Fix soup to clear yum cache for airgap 2020-11-04 10:00:44 -05:00
Mike Reeves
cf001875c2 Update soup 2020-11-03 20:14:15 -05:00
Mike Reeves
c7367eea38 Fix AGREPO Variable 2020-11-03 19:08:58 -05:00
Mike Reeves
8edb1529a9 Update soup 2020-11-03 17:36:53 -05:00
Mike Reeves
e8616e4d46 Update soup 2020-11-03 17:19:55 -05:00
William Wernert
6169758f4e [fix] 0 -> root so file owner is set correctly 2020-11-03 16:47:59 -05:00
William Wernert
57e7e61f21 [fix] Don't add proxy to yum.conf on manager nodes 2020-11-03 15:45:19 -05:00
Mike Reeves
887f412e48 Remove docker_clean from docker_update function 2020-11-03 13:54:00 -05:00
Jason Ertel
aa9aa59213 Correct cheatsheetUrl for airgap installs 2020-11-03 12:27:55 -05:00
m0duspwnens
a859aa4f48 upgrade from salt 3001.1 to salt 3002.1 - https://github.com/Security-Onion-Solutions/securityonion/issues/1807 2020-11-03 11:54:28 -05:00
Jason Ertel
82a7b7e02d Upgrade to Kratos 0.5.3-alpha1 2020-11-03 11:50:25 -05:00
Wes Lambert
7dca988c11 Remove Wazuh API creds after registering intial agent 2020-11-03 14:53:50 +00:00
Wes Lambert
05549a2362 Add Zeek intel.dat 2020-11-02 21:36:44 +00:00
Wes Lambert
24a54a326c Allow for muliple files for rules 2020-11-02 21:03:45 +00:00
Jason Ertel
184d163d65 Do not persist the Cortex PID file; This allows Cortex to recover from non-graceful container shutdowns, such as a power loss event on the host machine 2020-11-02 15:04:13 -05:00
Wes Lambert
3113d5fbdb Format scan.exiftool as text 2020-11-02 19:31:14 +00:00
Wes Lambert
6420ee0310 Update parsing for scan.exiftool 2020-11-02 19:28:12 +00:00
weslambert
71a260a000 Match max-pending-packets size 2020-11-02 08:38:45 -05:00
jtgreen-cse
6359e03ba6 fix for Windows events via osquery 
This change was required to properly let Windows events flow through their specific pipelines. Otherwise, the `temp` field stays around and gets ingested in ES.
 2020-10-29 15:03:13 -04:00
William Wernert
b489fee8b5 Merge pull request #1738 from Security-Onion-Solutions/bugfix/nginx-redirect 
Bugfix/nginx redirect
 2020-10-29 14:33:38 -04:00
William Wernert
91221c4332 [revert] Move proxy_pass back to ip 2020-10-29 10:23:12 -04:00
Mike Reeves
57d8f25422 Create master node role in ES 2020-10-28 16:44:14 -04:00
William Wernert
3abd1c9f16 [fix] Configure soctopus to use url_base 2020-10-28 16:08:19 -04:00
Mike Reeves
13be0da484 Add a place where custom logstash certs can go 2020-10-28 15:26:41 -04:00
Mike Reeves
361b13dc88 Add a place where custom logstash certs can go 2020-10-28 15:25:00 -04:00
Jason Ertel
98c669e80b Disable nginx server version and TLSv1.0/TLSv1.1 2020-10-28 14:29:29 -04:00
William Wernert
b02d434a0e [fix] Change any scripts using auth headers to url_base 2020-10-28 12:29:09 -04:00
William Wernert
3ee9f23d26 [fix] Use url_base in sensoroni.json instead of manager hostname 2020-10-28 12:28:34 -04:00
Jason Ertel
348c2feee2 Prevent usage of dollar signs in admin passwords during setup 2020-10-28 11:07:05 -04:00
Mike Reeves
97207bd006 Merge pull request #1702 from Security-Onion-Solutions/dockernet 
Custom Docker IP Range
 2020-10-28 10:48:56 -04:00
Wes Lambert
453247971e Add Wazuh user management scripts 2020-10-28 12:22:50 +00:00
Mike Reeves
697bc53aec Dockernet Modifications 2020-10-27 15:08:34 -04:00
Jason Ertel
5a705fc0f2 Add Hunt quick action for hunted events, grouping by dataset and module 2020-10-27 12:30:33 -04:00
Jason Ertel
474c4e54b4 Ensure labels and icons are associated with all quick actions 2020-10-27 12:04:57 -04:00
William Wernert
c58deef2e0 Merge branch 'dev' into feature/nginx-update 2020-10-27 09:29:06 -04:00
Mike Reeves
0ad65c8cd4 Merge pull request #1568 from jtgreen-cse/patch-1 
fix for rendering error >1 search node
 2020-10-26 16:57:17 -04:00
William Wernert
0aaf8d6d9a [fix] Change 301 to 307 so curl requests work as intended 2020-10-26 16:37:16 -04:00
Mike Reeves
5395983fc7 Merge pull request #1580 from Security-Onion-Solutions/feature/thehive-casetemplates 
Add case_template field to Playbook alerts
 2020-10-26 14:13:54 -04:00
William Wernert
3648e293a1 [fix] Add -L option to curl to respect redirects 2020-10-26 14:08:52 -04:00
Mike Reeves
ecfd1bbe4d Merge remote-tracking branch 'remotes/origin/dev' into escluster 2020-10-26 13:33:05 -04:00
Jason Ertel
3809573963 Correct cheatsheet URL for airgap installs 2020-10-26 12:16:55 -04:00
Jason Ertel
571550c019 Merge master into dev 2020-10-26 10:30:26 -04:00
William Wernert
e613bb3740 Merge branch 'dev' into feature/nginx-update 2020-10-26 10:28:14 -04:00
William Wernert
4662837075 [fix] Revert changes from merging dev 2020-10-26 10:25:16 -04:00