2373 Commits

Author	SHA1	Message	Date
Jason Ertel	8ce19a93b9	exclude false positives related to detections	2024-05-21 13:29:20 -04:00
reyesj2	6fac6eebce	Helper script for enrolling tpm into luks ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2024-05-20 14:37:54 -04:00
reyesj2	34a5985311	Create tpm enrollment script ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2024-05-16 21:14:57 -04:00
Jason Ertel	aa32eb9c0e	Merge pull request #13025 from Security-Onion-Solutions/jertel/suridp ... exclude detect-parse errors	2024-05-15 19:21:30 -04:00
Jason Ertel	4771810361	exclude detect-parse errors	2024-05-15 19:10:50 -04:00
m0duspwnens	427b1e4524	revert soup_scripts back to common	2024-05-15 10:28:02 -04:00
m0duspwnens	2dbbe8dec4	soup_scripts put so-yaml in salt file system. move soup scripts to manager.soup_scripts	2024-05-15 10:07:06 -04:00
m0duspwnens	1ef9509aac	define local_salt_dir	2024-05-13 14:34:22 -04:00
m0duspwnens	eb03858230	missed one	2024-05-13 12:44:57 -04:00
m0duspwnens	2643da978b	those functions in so-functions	2024-05-13 11:51:10 -04:00
m0duspwnens	649f52dac7	create_local_directories in soup too	2024-05-13 10:37:56 -04:00
Doug Burks	d120326cb9	Merge pull request #12999 from Security-Onion-Solutions/dougburks-patch-1 ... FEATURE: Add more fields to the SOC Dashboards URL for so-import-pcap #12972	2024-05-13 09:20:01 -04:00
Jason Ertel	dff2de4527	Merge pull request #12984 from Security-Onion-Solutions/jertel/testcy ... tests will retry on any rule import failure	2024-05-09 15:50:37 -04:00
Jason Ertel	19e1aaa1a6	exclude detection rule errors	2024-05-09 15:45:33 -04:00
Doug Burks	5b7b6e5fb8	FEATURE: Add more fields to the SOC Dashboards URL for so-import-pcap #12972	2024-05-08 14:00:23 -04:00
Doug Burks	5a5a1e86ac	FIX: Adjust so-import-pcap so that suricata works when it is pcapengine #12969	2024-05-08 13:26:36 -04:00
DefensiveDepth	58ddd55123	Exclude yara runtime log	2024-04-23 07:28:07 -04:00
Doug Burks	8d9aae1983	FEATURE: Add queue=True to so-checkin so that it will wait for any running states #12815	2024-04-18 09:28:30 -04:00
Mike Reeves	21f86be8ee	Update so-log-check	2024-04-05 08:03:42 -04:00
Mike Reeves	784ec54795	2.3 updates	2024-04-04 09:24:17 -04:00
Mike Reeves	54fce4bf8f	2.3 updates	2024-04-04 09:21:16 -04:00
Mike Reeves	c4ebe25bab	Attempt to fix 2.3 when main repo changes	2024-04-04 09:18:37 -04:00
Mike Reeves	7668fa1396	Attempt to fix 2.3 when main repo changes	2024-04-04 09:03:29 -04:00
Mike Reeves	470b0e4bf6	Attempt to fix 2.3 when main repo changes	2024-04-04 08:55:13 -04:00
Mike Reeves	d3f163bf9e	Attempt to fix 2.3 when main repo changes	2024-04-04 08:54:04 -04:00
Mike Reeves	4b31632dfc	Attempt to fix 2.3 when main repo changes	2024-04-04 08:52:37 -04:00
Mike Reeves	14c824143b	Attempt to fix 2.3 when main repo changes	2024-04-04 08:48:44 -04:00
DefensiveDepth	1d221a574b	Exclude Elastalert EQL errors	2024-04-04 06:48:25 -04:00
Jason Ertel	3e05c04aa1	Merge pull request #12731 from Security-Onion-Solutions/jertel/ana ... SOC Telemetry	2024-04-03 14:51:41 -04:00
Mike Reeves	8889c974b8	Change code to allow for non root	2024-04-03 12:38:59 -04:00
Mike Reeves	c31e459c2b	Change metrics reporting order	2024-04-03 11:06:00 -04:00
Jason Ertel	ca57c20691	suppress soup update output for cleaner console	2024-04-03 10:31:24 -04:00
Mike Reeves	0de1f76139	add agent count to reposync	2024-04-03 10:26:59 -04:00
Jason Ertel	c1b5ef0891	ensure so-yaml.py is updated during soup	2024-04-03 08:44:40 -04:00
Jason Ertel	216b8c01bf	disregard errors that in removed applications that occurred before the upgrade	2024-03-28 09:31:39 -04:00
DefensiveDepth	d7ecad4333	Initial cut to remove Playbook and deps	2024-03-25 19:42:31 -04:00
Jason Ertel	f889a089bf	disregard benign telegraf error	2024-03-22 09:48:27 -04:00
Jason Ertel	40574982e4	unswap files	2024-03-07 14:25:43 -05:00
Jason Ertel	fffef9b621	gracefully handle status check failure on ubuntu	2024-03-07 12:31:51 -05:00
m0duspwnens	a2b17d2348	move jinja to top	2024-02-14 14:27:41 -05:00
m0duspwnens	c1f467a068	handle airgap	2024-02-14 14:22:18 -05:00
m0duspwnens	79e98e508f	pass in UPDATE_DIR as a pillar	2024-02-14 13:28:12 -05:00
m0duspwnens	00f2374582	fix path for so-firewall	2024-02-13 15:43:02 -05:00
m0duspwnens	88786e8342	use file.copy to preserve perms	2024-02-13 15:05:09 -05:00
m0duspwnens	141fd49f02	use rsync	2024-02-13 14:27:22 -05:00
m0duspwnens	d6ac7a3286	fix the jinja	2024-02-13 13:31:34 -05:00
m0duspwnens	9175a73456	dont need $ for vars	2024-02-13 13:08:09 -05:00
m0duspwnens	1bde002f20	update case	2024-02-13 12:51:53 -05:00
m0duspwnens	5c9b1ab38b	copy with cp	2024-02-13 12:48:31 -05:00
m0duspwnens	b713771494	add back common soup_scripts state	2024-02-13 12:30:36 -05:00