Commit Graph

1698 Commits

Author SHA1 Message Date
Doug Burks
e41c1b6755 fix typo 2020-05-14 16:57:34 -04:00
m0duspwnens
9667f8b853 rename so-aptcacherng for so-status 2020-05-14 14:11:06 -04:00
Doug Burks
34d9882987 fix Wazuh and Sysmon queries 2020-05-14 13:47:01 -04:00
m0duspwnens
7f464af5fa run so-elasticsearch-pipelines only on changes - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/682 2020-05-14 13:39:19 -04:00
Mike Reeves
dbef2e2832 Update soc.json 2020-05-14 11:56:18 -04:00
Mike Reeves
6991900ceb Update Query for geo 2020-05-14 11:34:10 -04:00
Doug Burks
5c3e7acc6d change resp_mime_types to file.resp_mime_types 2020-05-14 11:21:32 -04:00
Doug Burks
6112322bce change file.path to smb.path 2020-05-14 11:20:11 -04:00
Josh Brower
554612d25f Navigator top.sls fix 2020-05-14 11:19:07 -04:00
Doug Burks
c7b4ab116f fix rfb typo 2020-05-14 10:57:44 -04:00
Josh Brower
3db67de27a osquery packages fix 2020-05-13 20:39:56 -04:00
Josh Brower
8a68e6adb3 Playbook hivealert fixes 2020-05-13 19:27:14 -04:00
Josh Brower
c3627c38e3 Elastalert - NIDS fix 2020-05-13 17:03:14 -04:00
Josh Brower
6e4ee26a58 Elastalert --> TheHive fixes 2020-05-13 16:34:35 -04:00
Josh Brower
23b4870ee6 Playbook - update plays 2020-05-13 12:19:37 -04:00
Jason Ertel
db51ab9d45 Adjust elastalert salt setup to match new so-elastalert image 2020-05-13 12:14:18 -04:00
Josh Patterson
e9cf0f8599 Merge pull request #665 from Security-Onion-Solutions/issue/227
Issue/227
2020-05-13 12:11:43 -04:00
m0duspwnens
d94a76a2c7 fix docker_container_cpu calculations for grafana 2020-05-13 12:06:02 -04:00
m0duspwnens
581000b920 add grafana dashboard for mastersearch node - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/227 2020-05-13 11:52:10 -04:00
Mike Reeves
50fc9a4713 Merge pull request #664 from Security-Onion-Solutions/feature/defaultsearch
Remove Keyword
2020-05-12 17:55:32 -04:00
Mike Reeves
0b0c8d8471 Remove Keyword 2020-05-12 17:54:25 -04:00
Josh Brower
bc4b4385bf Merge pull request #662 from Security-Onion-Solutions/bugfix/soctopus-config
soctopus config fix
2020-05-12 17:04:22 -04:00
Josh Brower
d270c8f32d soctopus config fix 2020-05-12 16:59:35 -04:00
m0duspwnens
d5b2a6f059 move statedir and salttmp from salt state to common state 2020-05-12 16:58:26 -04:00
m0duspwnens
56b92afb6b fix telegraf.conf for different roles 2020-05-12 16:54:38 -04:00
Josh Brower
4d3d7dc60e salt bug workarounds 2020-05-12 16:24:24 -04:00
Josh Brower
abd907fee1 Merge pull request #659 from Security-Onion-Solutions/bugfix/nids-parsing-alerting
suricata parsing
2020-05-12 14:07:51 -04:00
Josh Brower
62bec93190 suricata parsing 2020-05-12 14:04:02 -04:00
Mike Reeves
0b7568e08f Update soc.json with default search info 2020-05-12 13:57:40 -04:00
Josh Brower
d1eac195d8 Enable Navigator 2020-05-11 22:41:54 -04:00
Josh Brower
4bd8e136be Enabled playbook 2020-05-11 22:41:02 -04:00
Josh Brower
09ce3e088a playbook mysql fixes 2020-05-11 22:39:13 -04:00
Josh Brower
b658f7133b Update top.sls 2020-05-11 09:48:24 -04:00
Mike Reeves
09e2413695 Remove version hardcode 2020-05-10 17:31:50 -04:00
Josh Brower
20e7331bb9 navigator fixes 2020-05-10 11:57:20 -04:00
Josh Brower
4977a8b17c Merge pull request #648 from Security-Onion-Solutions/bugfix/playbook-mysql
Fix playbook mysql errors
2020-05-10 07:58:39 -04:00
Josh Brower
02160b12ee Fix playbook mysql errors 2020-05-10 07:57:45 -04:00
Josh Brower
170d799470 Merge pull request #647 from Security-Onion-Solutions/bugfix/playbook-mysql
feature/playbook mysql
2020-05-09 16:30:50 -04:00
Jason Ertel
47295d42f5 Initial iteration of new SOC Event search module 2020-05-08 17:00:06 -04:00
Josh Brower
e3a3a01ee1 Merge remote-tracking branch 'remotes/origin/dev' into bugfix/playbook-mysql 2020-05-08 16:49:38 -04:00
Josh Brower
9b54a432fc mysql playbook 2020-05-08 16:36:59 -04:00
m0duspwnens
2e6e474a54 require with onchanges is redundant 2020-05-06 16:48:27 -04:00
m0duspwnens
0662245590 fix for https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/632 2020-05-06 16:38:39 -04:00
Josh Brower
bc34c67f47 Merge remote-tracking branch 'remotes/origin/dev' into bugfix/playbook-mysql 2020-05-06 08:30:45 -04:00
Josh Brower
2e3bcf600f Playbook mysql 2020-05-06 08:29:14 -04:00
Josh Patterson
d9dff52104 Merge pull request #627 from Security-Onion-Solutions/issue/623
nginx portion of https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/623
2020-05-04 15:45:23 -04:00
m0duspwnens
9adf08522c nginx portion of https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/623 2020-05-04 15:43:09 -04:00
William Wernert
c42c22dc66 [fix] Correct require in fleet sls 2020-05-04 13:49:27 -04:00
William Wernert
80aee06a67 [fix] Remove files that are no longer in dev 2020-05-04 10:57:46 -04:00
William Wernert
5805d68b58 [fix] Fix dev merge issues 2020-05-04 10:55:00 -04:00