Commit Graph

7751 Commits

Author SHA1 Message Date
Jason Ertel
e3c8018824 Toggle strelka rules after the user is prompted it strelka should be installed to ensure strelka rules are updated later during the setup process 2020-12-15 16:44:52 -05:00
TOoSmOotH
7909834722 Clean up previous upgrade dirs in temp 2020-12-15 16:23:49 -05:00
Mike Reeves
06dd3432f8 Copy the correct files over that soup needs 2020-12-15 16:13:51 -05:00
Mike Reeves
6cab65a548 Update so-image-common 2020-12-15 16:06:21 -05:00
Jason Ertel
e58ca93896 Add logging for strelka configuration during setup 2020-12-15 15:46:59 -05:00
William Wernert
15347d1209 [fix] More condition changes for Helix 2020-12-15 15:08:33 -05:00
William Wernert
c7c3d004ca [fix] More helix -> helixsensor 2020-12-15 14:01:19 -05:00
William Wernert
1825776271 [fix] helix -> helixsensor 2020-12-15 13:58:36 -05:00
William Wernert
951556902c [fix] Accept salt key on Helix Sensor install 2020-12-15 13:41:00 -05:00
William Wernert
7ba10ee698 [fix] Add HELIXSENSOR to case for Ubuntu 2020-12-15 13:38:00 -05:00
William Wernert
343e9f8b2c [fix] Only try to stop/remove containers if at least one exists 2020-12-15 13:37:46 -05:00
William Wernert
e89c06f71b [fix] Add backslash for newline 2020-12-15 13:37:21 -05:00
William Wernert
f7d02763e8 [fix] Move FEATURESCHECK var assignment, fix indentation 2020-12-15 13:07:21 -05:00
William Wernert
f70d828aa6 [fix] Create array correctly 2020-12-15 13:04:09 -05:00
Jason Ertel
3da7a26e88 Remove jinja whitespace trimming to avoid syntax error in bash 2020-12-15 12:37:05 -05:00
Mike Reeves
922534a5da Merge pull request #2352 from Security-Onion-Solutions/soup2320
SOUP Features
2020-12-15 12:07:19 -05:00
TOoSmOotH
80a61d3316 SOUP Features 2020-12-15 12:06:30 -05:00
Mike Reeves
bf1f00d2fe Merge pull request #2348 from Security-Onion-Solutions/soup2320
SOUP Changes
2020-12-14 21:19:45 -05:00
TOoSmOotH
cbd59ed86a SOUP Changes 2020-12-14 20:46:31 -05:00
Josh Brower
efe44323cb Merge pull request #2346 from Security-Onion-Solutions/bugfix/fleet-patch
Swap localhost for 127.0.0.1
2020-12-14 15:49:58 -05:00
William Wernert
aa281f849f [feat] Add message about dropping to command line when setting up ssh key 2020-12-14 15:31:25 -05:00
William Wernert
f4c4a16f54 Merge pull request #2343 from Security-Onion-Solutions/experimental
Experimental
2020-12-14 14:27:52 -05:00
Jason Ertel
aa479b9c8e Move node address/desc into the minion pillar 2020-12-14 12:42:16 -05:00
William Wernert
3e2a9cc884 Merge branch 'dev' into experimental 2020-12-14 12:32:53 -05:00
William Wernert
a533e6fa35 [fix] Always set INSTALLUSERNAME var 2020-12-14 11:42:34 -05:00
m0duspwnens
3a66af0b16 Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into dev 2020-12-14 11:36:03 -05:00
Josh Patterson
de3f86724a Merge pull request #2335 from Security-Onion-Solutions/issue/1586
remove old firewall ports pillar file
2020-12-14 11:15:34 -05:00
m0duspwnens
4e04f31b8e remove old firewall ports pillar file https://github.com/Security-Onion-Solutions/securityonion/issues/1586 2020-12-14 10:24:49 -05:00
m0duspwnens
32482710db Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into dev 2020-12-14 10:14:44 -05:00
Doug Burks
7a314b5935 Prevent Wazuh "last -n 20" logs from going to Alerts queue #2321 2020-12-12 11:35:29 -05:00
Doug Burks
61ae187d03 revert previous commit #2321 2020-12-12 10:12:23 -05:00
Josh Brower
73d23e6d17 Revert "Initial support - Playbook Overrides"
This reverts commit 8915e49288.
2020-12-12 10:07:30 -05:00
Josh Brower
8faf80a03b Revert "Playbook db updates"
This reverts commit 35be785f7a.
2020-12-12 10:07:23 -05:00
Mike Reeves
b5ed973abd Merge pull request #2138 from OmerTirosh/OmerTirosh-fix-win.eventlog
Fix Error: SO elasticsearch ingest failed to convert 'winlog.event_data.SubjectUserName' to 'user.name'
2020-12-12 10:00:27 -05:00
Doug Burks
85aac4ad75 Prevent Wazuh "last -n 20" logs from going to Alerts queue #2321 2020-12-12 09:22:08 -05:00
Jason Ertel
fd7fe72b2a Correct default address pool base value 2020-12-11 23:29:59 -05:00
Jason Ertel
c5a3597564 Swap AWS interfaces 2020-12-11 21:57:56 -05:00
Josh Brower
66495e6bae Swap localhost for 127.0.0.1 2020-12-11 17:38:42 -05:00
Jason Ertel
42c8f1e325 Use eth0/eth1 instead of ens5/ens6 in AWS 2020-12-11 15:34:16 -05:00
Jason Ertel
bb61c1f745 Cleanup bash imports/sources, function definitions, and variables 2020-12-11 15:33:31 -05:00
Josh Patterson
e4eea6a616 Merge pull request #2320 from Security-Onion-Solutions/issue/2319
zeek file extraction can now be manipulated with zeek pillar
2020-12-11 14:38:10 -05:00
m0duspwnens
09b3a4a0dd merge pillar with the defaults https://github.com/Security-Onion-Solutions/securityonion/issues/2319 2020-12-11 14:35:06 -05:00
m0duspwnens
b8e8510dd2 merge pillar with the defaults https://github.com/Security-Onion-Solutions/securityonion/issues/2319 2020-12-11 14:26:32 -05:00
m0duspwnens
95c068a37f Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into dev 2020-12-11 14:13:48 -05:00
Jason Ertel
eb735c7289 Replace duplicate random generator with common function 2020-12-11 13:22:13 -05:00
Josh Patterson
2f2867804a Merge pull request #2318 from Security-Onion-Solutions/issue/1175
pillarize grafana and allow for grafana alerts to be created
2020-12-11 12:36:06 -05:00
m0duspwnens
d877fac786 add null for max graph value https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-11 12:28:43 -05:00
m0duspwnens
c88a1a943d update search and sensor node dashboard panaels from guage to graph https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-11 12:21:16 -05:00
m0duspwnens
e3335a3106 update managersearch dashboard panaels from guage to graph https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-11 12:00:02 -05:00
m0duspwnens
0a77a28e06 guage to graph cor cpu on manager and eval https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-11 11:51:42 -05:00