Commit Graph

4620 Commits

Author SHA1 Message Date
Mike Reeves
e8d2a6fdc2 Disk Space Check 2020-09-14 19:32:14 -04:00
Mike Reeves
0a0e00866c Upgrade Fun 2020-09-14 14:50:22 -04:00
Mike Reeves
38266f7db8 Merge pull request #1342 from Security-Onion-Solutions/experimental
Fix ruleupdate setting
2020-09-14 14:26:31 -04:00
Mike Reeves
9957fdec0f Fix ruleupdate setting 2020-09-14 14:17:55 -04:00
Josh Patterson
32632864eb Merge pull request #1341 from Security-Onion-Solutions/issue/1066
change how we determine how to run so-status
2020-09-14 12:43:05 -04:00
m0duspwnens
b559e5dd32 change how we determine how to run so-status 2020-09-14 12:40:39 -04:00
Jason Ertel
f86780a0db Open PCAPs in same tab, but open external sites in new tabs 2020-09-14 10:41:39 -04:00
Mike Reeves
1958fef4ad Merge pull request #1338 from Security-Onion-Solutions/experimental
Fix strelka rules
2020-09-14 09:58:34 -04:00
Mike Reeves
ee1317adf1 Merge branch 'experimental' of https://github.com/Security-Onion-Solutions/securityonion into experimental 2020-09-14 09:57:14 -04:00
Mike Reeves
d1836fb3a3 Fix Salt issue with script 2020-09-14 09:57:08 -04:00
Josh Patterson
67c1ece0bb Merge pull request #1337 from Security-Onion-Solutions/issue/1066
Issue/1066
2020-09-14 09:38:15 -04:00
m0duspwnens
b93d149631 fix so-status 2020-09-14 09:36:26 -04:00
m0duspwnens
46cbcfa330 Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion-saltstack into issue/1066 2020-09-14 08:45:54 -04:00
Mike Reeves
841db1b4b9 Merge pull request #1336 from Security-Onion-Solutions/experimental
Get Rules onto the install for airgap
2020-09-13 14:58:36 -04:00
Mike Reeves
112a0b426e Merge branch 'dev' into experimental 2020-09-13 14:54:00 -04:00
Doug Burks
18dc7a915a Hunt: Fix Tunnel query #1335 2020-09-13 08:26:33 -04:00
Jason Ertel
89c38541ee Force all SOC quick actions to open in new tab 2020-09-13 02:52:25 -04:00
Mike Reeves
d6d22fb0e0 Fix Strelka 2020-09-12 23:07:35 -04:00
Mike Reeves
bb936c5bee Fix Strelka 2020-09-12 23:07:15 -04:00
Mike Reeves
259df2ed6b Fix Strelka 2020-09-12 23:06:06 -04:00
Doug Burks
311d67b934 Hunt: fix RFB groupby #1332 2020-09-12 06:14:58 -04:00
Josh Patterson
f03b128924 Merge pull request #1331 from Security-Onion-Solutions/fix/top
add redis to eval if playbook enabled
2020-09-11 18:31:19 -04:00
m0duspwnens
5f567368be add redis to eval if playbook enabled 2020-09-11 18:30:21 -04:00
m0duspwnens
77911acfb4 so-status module 2020-09-11 18:28:53 -04:00
Mike Reeves
48d1d0c168 Strelkas Rules Update 2020-09-11 18:24:56 -04:00
Josh Patterson
2d508d9e57 Merge pull request #1328 from Security-Onion-Solutions/issue/1281
Issue/1281
2020-09-11 15:02:30 -04:00
m0duspwnens
15563f2ee6 add nginx to top for sensor 2020-09-11 12:28:42 -04:00
m0duspwnens
bb0e686444 add elasticsearch to top for nodes missing it 2020-09-11 11:35:17 -04:00
Mike Reeves
46866f40b3 Merge pull request #1325 from Security-Onion-Solutions/experimental
Update Script
2020-09-11 11:02:57 -04:00
Mike Reeves
6e0cdf7be4 Update Script help 2020-09-11 11:01:56 -04:00
m0duspwnens
5f7c270984 only allow strelka to run on nodes that are sensors 2020-09-11 10:22:12 -04:00
Mike Reeves
af9a19b6e8 Merge pull request #1321 from Security-Onion-Solutions/experimental
IDS Tools now with Airgap support
2020-09-10 19:05:16 -04:00
Mike Reeves
53319738c4 Fix Nginx state 2020-09-10 16:56:48 -04:00
Mike Reeves
ef46094b0c Update all nginx configs 2020-09-10 13:55:56 -04:00
Josh Patterson
53ff87b0ee Merge pull request #1312 from Security-Onion-Solutions/issue/1281
add elasticsearch state to top for manager node
2020-09-10 12:47:05 -04:00
m0duspwnens
bc420d4a02 add 2020-09-10 11:57:15 -04:00
Josh Patterson
ca26548b2c Merge pull request #1310 from Security-Onion-Solutions/issue/1281
Issue/1281
2020-09-10 10:08:25 -04:00
m0duspwnens
0ed9c65646 remove logic from fleet state to only run if in top 2020-09-10 10:07:05 -04:00
Doug Burks
8c280221da Hunt: Fix Intel groupby #1131 2020-09-10 07:00:54 -04:00
Doug Burks
24c325e9a1 Fix Elasticsearch parsing for Zeek Intel Indicator #1309 2020-09-10 06:41:19 -04:00
Josh Brower
56587f0df5 Merge pull request #1308 from Security-Onion-Solutions/feature/wel-ingest
Add event.category to WEL
2020-09-10 06:16:56 -04:00
Josh Brower
c3b2d98ffb Add event.category to WEL 2020-09-10 06:15:30 -04:00
Doug Burks
7161a662aa improve Wazuh support in Hunt 2020-09-10 06:03:33 -04:00
Mike Reeves
5d4e8925a3 Add Firewall Logic 2020-09-09 21:16:40 -04:00
Mike Reeves
45b11b2321 Fix Rulecat 2020-09-09 18:38:07 -04:00
Doug Burks
d18c498574 Update so-features-enable 2020-09-09 17:32:42 -04:00
m0duspwnens
09cc8ae1fb fail the state if it isnt in top 2020-09-09 16:48:50 -04:00
m0duspwnens
01c9f7b2ae merge with dev and resolve conflicts 2020-09-09 16:23:36 -04:00
Mike Reeves
7ebf93fcb5 IDSTools Overhaul 2020-09-09 15:53:32 -04:00
Josh Patterson
1e32b32659 Merge pull request #1302 from Security-Onion-Solutions/fix/sostatus
Fix/sostatus
2020-09-09 15:07:12 -04:00