Commit Graph

8900 Commits

Author SHA1 Message Date
Wes 80a3942245 Rename RITA pipelines 2024-01-22 20:15:48 +00:00
Wes 7118cc8dee Add additional integration SOC configuration 2024-01-19 22:04:07 +00:00
Wes 05aa8b013a Add additional integration to templates 2024-01-19 22:02:39 +00:00
Wes d0457cb61e Add additional integrations to defaults 2024-01-19 22:00:38 +00:00
Jorge Reyes c2b44985c7 Merge pull request #12220 from Security-Onion-Solutions/reyesj2-patch-sl
Disable stigs setting/verifying umask is set to 077. Known issue with …
2024-01-19 16:06:10 -05:00
reyesj2 8f8c250ed3 Disable stigs setting/verifing umask is set to 077. Known issue with running SOUP
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
2024-01-19 16:04:21 -05:00
Mike Reeves efe8cfda95 Update suricata.common 2024-01-19 13:39:28 -05:00
Mike Reeves 08486e279c Update suricata.common 2024-01-19 13:36:43 -05:00
reyesj2 2b6927da82 Add stig pillar dir during soup
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
2024-01-19 09:55:23 -05:00
reyesj2 ca4f2f1dd6 Add creation of additional pillars to soup for stig state
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
2024-01-19 08:31:20 -05:00
reyesj2 07602076f1 Update telegraf script
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
2024-01-18 16:48:16 -05:00
reyesj2 caf4036dbf Update features check
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
2024-01-18 16:06:53 -05:00
reyesj2 65d46ea27d Merge remote-tracking branch 'remotes/origin/2.4/dev' into reyesj2-patch-sl 2024-01-18 12:24:35 -05:00
reyesj2 67445de4ee Remove need for stig script
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
2024-01-18 12:24:01 -05:00
Jorge Reyes 6a8bf0b953 Merge pull request #12202 from Security-Onion-Solutions/reyesj2-patch-sl
Add stig state
2024-01-18 09:25:21 -05:00
weslambert 33d74098bd Merge pull request #12201 from Security-Onion-Solutions/fix/suricata_ike
Add Suricata IKE pipeline
2024-01-17 16:50:19 -05:00
reyesj2 df921892a3 Remove post scan from remediate log.
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
2024-01-17 16:23:20 -05:00
reyesj2 739feb25a4 Add telegraf script to import featuresdetected
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
2024-01-17 15:55:00 -05:00
reyesj2 4e6924610d Add additional status checks to so-common-status-check for telegraf
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
2024-01-17 15:37:52 -05:00
Wes e70ce50912 Change description 2024-01-17 14:06:16 +00:00
m0duspwnens eeb249e00d look for needs_restarted file 2024-01-16 17:22:09 -05:00
m0duspwnens dff06cb085 changes for telegraf os.sh 2024-01-16 17:03:36 -05:00
m0duspwnens 8c1d1c95db check needs_restarting rework 2024-01-16 17:02:27 -05:00
Wes f6590ac0bf Remove Suricata IKEv2 pipeline 2024-01-16 18:10:00 +00:00
Wes ea64ce92d3 Add Suricata IKE pipeline 2024-01-16 18:09:46 +00:00
Wes 8a92b023b2 Add interface name 2024-01-16 18:09:16 +00:00
reyesj2 6cf0b365e6 Modify yum.conf.jinja to include localpkg_gpgcheck rather than modifying it with so-stig
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
2024-01-15 21:30:31 -05:00
reyesj2 4bffd8e27c Merge remote-tracking branch 'remotes/origin/2.4/dev' into reyesj2-patch-sl 2024-01-15 21:19:37 -05:00
reyesj2 a73d78300a Add initial stig state
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
2024-01-15 21:17:17 -05:00
weslambert 252c51dafb Change order of names 2024-01-12 16:45:18 -05:00
weslambert a07e6e1058 OTX pulses 2024-01-12 16:43:33 -05:00
weslambert 3f9678056d OTX pulses template 2024-01-12 16:42:32 -05:00
Wes 418f41c7e4 Add SOC configuration for metrics 2024-01-12 15:03:18 +00:00
weslambert 05679e79fc Merge pull request #12171 from Security-Onion-Solutions/2.4/dev
Merge 2.4 dev
2024-01-12 08:50:15 -05:00
Wes 5eae349938 Add endpoint metrics templates 2024-01-12 13:47:35 +00:00
Josh Brower 2f8ce33cf7 formatting 2024-01-12 08:47:09 -05:00
Josh Brower 61b2a76a09 Remove old nav layers-rev2 2024-01-12 08:46:23 -05:00
Josh Brower b89b7cab59 Remove old nav layers 2024-01-12 08:37:32 -05:00
weslambert 880300d644 Move ELASTICFLEETMERGED import under allowed states 2024-01-11 14:58:21 -05:00
weslambert f5b59cacec Move ELASTICFLEETMERGED import 2024-01-11 14:56:01 -05:00
weslambert ea5097f1b4 Add back curly brace 2024-01-11 14:51:01 -05:00
weslambert cc66daba1a Make sure optional integration pillar values are merged with defaults 2024-01-11 14:49:39 -05:00
Josh Brower ea54aafa86 Merge pull request #12161 from Security-Onion-Solutions/fix/kibana-restart
Check Kibana API not Web
2024-01-11 12:32:19 -05:00
Josh Brower 03f140161c Check Kibana API not Web 2024-01-11 12:30:23 -05:00
Wes c89d674a92 Add settings for integrations 2024-01-11 14:18:06 +00:00
Wes 9b1ddcacb4 Add additional templates for integrations 2024-01-11 14:00:09 +00:00
Wes 5703023008 Add additional packages 2024-01-11 13:59:38 +00:00
Josh Brower b8e555e913 Upgrade Navigator and fix Playbook layer 2024-01-10 21:16:59 -05:00
Mike Reeves 3e13ea5c7a Update soup 2024-01-10 14:36:49 -05:00
Josh Brower 9159eab9fd Merge pull request #12151 from Security-Onion-Solutions/fix/so-playbook-reset
Fix reinstall & reset stability
2024-01-10 14:23:53 -05:00