Commit Graph

8820 Commits

Author SHA1 Message Date
m0duspwnens 451b19dc4d change from file to x509 2021-10-22 09:53:20 -04:00
William Wernert d5d970672d Merge pull request #5974 from Security-Onion-Solutions/foxtrot
Add so-deny script + rewrite so-allow to match
2021-10-21 16:37:05 -04:00
m0duspwnens f93c6146f5 docker binds requires 2021-10-21 15:24:55 -04:00
weslambert 40dd33affe Merge pull request #5971 from Security-Onion-Solutions/feature/es_templates
Add .keyword subfield for conflict fields
2021-10-21 15:07:00 -04:00
William Wernert f374dcbb58 Check for IP environment variable in so-allow and so-deny 2021-10-21 13:54:06 -04:00
weslambert 77ee1db44c Add .keyword subfield for conflict fields 2021-10-21 12:56:03 -04:00
Josh Patterson 8784d65023 Merge pull request #5967 from Security-Onion-Solutions/issue/5954
require files before starting soc or kratos
2021-10-21 11:15:36 -04:00
William Wernert 15fe7512b7 Install lxml during setup and in common state 2021-10-21 10:49:41 -04:00
William Wernert 0beeeb94bf Actually add new so-allow script 2021-10-21 10:48:17 -04:00
m0duspwnens 928aed27c5 require files before starting soc or kratos 2021-10-20 17:04:02 -04:00
William Wernert 387d4d6ad5 Add so-deny script + rewrite so-allow to match so-deny 2021-10-20 16:44:57 -04:00
William Wernert adf6cb4b3c Merge branch 'dev' into foxtrot 2021-10-20 16:44:50 -04:00
William Wernert 0ed2ce0766 Fix validation.sh tests 2021-10-20 16:44:09 -04:00
William Wernert b5cb47e066 Fix sbin perms 2021-10-20 16:43:55 -04:00
Josh Patterson 8061508330 Merge pull request #5961 from Security-Onion-Solutions/issue/5960
Issue/5960
2021-10-20 16:08:50 -04:00
m0duspwnens adffb11800 fix redis port 2021-10-20 15:39:21 -04:00
m0duspwnens 8619af59cc servers to list format 2021-10-20 15:02:33 -04:00
m0duspwnens 7ecfb55b70 fix pillar call 2021-10-20 14:50:50 -04:00
m0duspwnens b496810b63 add redis and logstash input plugins to telegraf 2021-10-20 14:46:47 -04:00
Mike Reeves e1ad02c28d Merge pull request #5949 from Security-Onion-Solutions/kilo
Fix Docker-created corruption of SOC user roles file
2021-10-19 18:37:37 -04:00
Jason Ertel 2f8bb5a2a6 Fix Docker-created corruption of SOC user roles file 2021-10-19 16:04:10 -04:00
weslambert 6f3e441bf7 Merge pull request #5945 from Security-Onion-Solutions/fix/soc_index_pattern
Remove space to allow pattern(s) to be correctly interpreted
2021-10-19 13:05:40 -04:00
Mike Reeves 7f1585dcc0 Merge pull request #5942 from Security-Onion-Solutions/tunesteno
Fix Steno Math for PL
2021-10-19 13:03:50 -04:00
weslambert 9453ed7fa1 Remove space to allow pattern(s) to be correctly interpreted 2021-10-19 13:01:40 -04:00
Mike Reeves 64f25961b0 Fix Steno Math for PL 2021-10-19 11:15:58 -04:00
Mike Reeves b9a3d3a6a9 Fix Steno Math for PL 2021-10-19 11:14:02 -04:00
m0duspwnens 36cb0d6c42 remove space 2021-10-18 14:34:33 -04:00
m0duspwnens 1b2268dfe5 load kibana configs during setup 2021-10-18 14:30:47 -04:00
Mike Reeves 00e5b54dda Merge pull request #5911 from Security-Onion-Solutions/tunesteno
Add Steno Tuning Options
2021-10-18 09:01:14 -04:00
Mike Reeves 4016b416ec Merge pull request #5923 from Security-Onion-Solutions/kilo
Upgrade to ES 7.15.1
2021-10-16 09:15:06 -04:00
weslambert 7590728a0b Merge pull request #5915 from Security-Onion-Solutions/feature/ti_module
Add TI module
2021-10-15 17:17:33 -04:00
weslambert bb36fc1ed8 Add TI module defaults 2021-10-15 17:16:38 -04:00
weslambert d0a6dafc8b Add TI module 2021-10-15 17:09:59 -04:00
m0duspwnens 76097476d3 remove includes 2021-10-15 16:57:38 -04:00
m0duspwnens 8b3b0bf160 fix opts 2021-10-15 16:51:11 -04:00
m0duspwnens f19680b3e6 fix opts 2021-10-15 16:50:03 -04:00
m0duspwnens 7e1bbe3cc2 define MAANGER 2021-10-15 16:14:14 -04:00
m0duspwnens 947285e932 update cmd.run amd s_o files 2021-10-15 16:06:25 -04:00
m0duspwnens 1741f5068a update config-load to do an update or import 2021-10-15 15:35:30 -04:00
Mike Reeves a9f6c84d7c Add Steno Tuning Options 2021-10-15 14:17:54 -04:00
weslambert 59852841ff Add keyword subfield for event.module 2021-10-15 13:29:50 -04:00
weslambert 6f1f7d2a63 Merge pull request #5905 from Security-Onion-Solutions/feature/soc_es_index_pattern
Allow setting ES index patterns for SOC in pillar
2021-10-15 13:28:04 -04:00
Jason Ertel 8de8d58155 Upgrade to ES 7.15.1 2021-10-15 13:27:08 -04:00
Wes Lambert 8feeff97b5 Add EG index pattern during setup (if enabled) 2021-10-15 16:19:19 +00:00
Wes Lambert 032373187c Allow setting ES index patterns for SOC in pillar 2021-10-15 16:02:53 +00:00
William Wernert db2b70f655 Merge pull request #5900 from Security-Onion-Solutions/foxtrot
Replace rather than append to Kibana misc log
2021-10-15 10:27:25 -04:00
Jason Ertel 1800ec4570 Upgrade to Elastalert 2 v2.2.2 2021-10-15 09:25:44 -04:00
Mike Reeves 8a5960c220 Merge pull request #5896 from Security-Onion-Solutions/kilo 2021-10-14 18:05:33 -04:00
Jason Ertel 9797a15218 Fix issue with 'so-user delete' resetting all user roles - note that this function is not technically supported or published since it's not intended for production use 2021-10-14 17:23:18 -04:00
William Wernert c7b15a9b1f Replace rather than append to Kibana misc log 2021-10-14 15:13:55 -04:00