CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-22 08:53:06 +01:00
Code Issues Packages Projects Releases Wiki Activity
5,968 Commits 18 Branches 120 Tags
eef1f49d09c49a28f94113c100cbd749e15e75c8
Commit Graph

3411 Commits

Author SHA1 Message Date
Jason Ertel
eef1f49d09 Corrected cortex_init process which was incorrectly attempting to access ES via the external URL; Removing 1-2 minute sleeps during init to see if those are no longer needed 2020-12-22 22:56:01 -05:00
Jason Ertel
cfe5019f51 Add firewall listhogroups and listportgroups commands; Change AMI test defaults to use a custom hostname for cypress access 2020-12-22 17:59:59 -05:00
Wes Lambert
ac96ded2dc Support setting rule repos via pillar 2020-12-22 15:36:15 +00:00
weslambert
def08895d5 Merge pull request #2393 from Security-Onion-Solutions/fix/strelka_filestream 
Fix/strelka filestream
 2020-12-18 15:48:54 -05:00
weslambert
2fee2ca143 Change identifier name to be more descriptive 2020-12-18 15:40:54 -05:00
weslambert
7453626b06 Add identifier 2020-12-18 15:39:52 -05:00
m0duspwnens
ad45779978 fix duplicate state name for fw 2020-12-18 15:01:55 -05:00
m0duspwnens
66f62b912e Merge remote-tracking branch 'remotes/origin/dev' into fix/sensoroni_fw 2020-12-18 14:14:55 -05:00
m0duspwnens
4bbedfa027 put portgroup name in statename 2020-12-18 14:14:45 -05:00
m0duspwnens
e756bbc430 limit sensor uptime in grafana dash to 2 decimal 2020-12-18 13:40:55 -05:00
Mike Reeves
dea88e4c68 Update soup 2020-12-18 13:27:08 -05:00
m0duspwnens
dbf82a891f add sensoroni port to minions for manager nodes 2020-12-18 13:06:14 -05:00
Mike Reeves
96bd1e72a7 Update soup 2020-12-18 11:55:24 -05:00
weslambert
1a463bccaf Add cron.absent to remove old cron job if present 2020-12-18 11:25:14 -05:00
m0duspwnens
90dcad7e6f make sure timestamp on steno log line has changed so we dont snapshot the drop% 2020-12-18 11:00:24 -05:00
weslambert
9493aad1a5 Read from dedicated unprocessed dir 2020-12-18 10:53:17 -05:00
weslambert
bf76c1b58c Create unprocessed dir and move Zeek extracted files there 2020-12-18 10:52:14 -05:00
Mike Reeves
575098e368 Update init.sls 2020-12-17 20:23:38 -05:00
Mike Reeves
39425c1ba8 Fix extra extrahosts 2020-12-17 20:15:56 -05:00
TOoSmOotH
6448ddc31a Allow SNs to resolve the ES master 2020-12-17 20:08:21 -05:00
m0duspwnens
412e8eeccb tell dc to use 4 decimal spot for suriloss calc 2020-12-17 18:05:25 -05:00
Mike Reeves
6ccbe47f10 Fix Jinja 2020-12-17 16:34:49 -05:00
Jason Ertel
370a2cdb81 Update change.json for 2.3.20 2020-12-17 15:49:09 -05:00
TOoSmOotH
d99596ad06 Fix Docker Settings on new installs 2020-12-17 15:21:29 -05:00
William Wernert
1f523deaea [fix] Playbook setup bug fixes 
* Increase timeout for port check
* Exit with non-zero code in user create script if timeout exceeded or error occurs
 2020-12-17 12:23:06 -05:00
Josh Brower
73ad89f4ba Fix so-suricata-testrule 2020-12-17 11:05:57 -05:00
Josh Patterson
011dc48d96 Merge pull request #2363 from Security-Onion-Solutions/fix/grafana-eval 
Fix/grafana eval
 2020-12-16 18:05:02 -05:00
m0duspwnens
027929bb6d fix eval grafana dashboard 2020-12-16 17:59:54 -05:00
TOoSmOotH
345710a48d Make sure thehive is up then soup by hitting api 2020-12-16 17:41:38 -05:00
m0duspwnens
90e499f6e9 fix eval grafana dashboard 2020-12-16 17:25:56 -05:00
TOoSmOotH
23110d3b33 Make sure thehive is up then soup 2020-12-16 17:23:51 -05:00
William Wernert
384456a991 [fix] Make repo directory during soup if it doesn't exist 2020-12-16 16:18:17 -05:00
TOoSmOotH
6e84227525 Add DB migration for thehive 2020-12-16 16:06:05 -05:00
Josh Patterson
3ff99da302 Merge pull request #2359 from Security-Onion-Solutions/fix/so-status-import-node 
Fix/so status import node
 2020-12-16 14:22:08 -05:00
m0duspwnens
2d497cb724 change to just Hunt 2020-12-16 14:15:57 -05:00
Mike Reeves
eecb323459 remove extra state.apply common 2020-12-16 13:12:38 -05:00
m0duspwnens
2e278586f2 disable steno in so-status for import node 2020-12-16 13:03:24 -05:00
m0duspwnens
81e2b4d572 Merge remote-tracking branch 'remotes/origin/dev' into fix/so-status-import-node 2020-12-16 12:02:39 -05:00
m0duspwnens
96b72d46be show steno,zeek,suricata as disabled in so-status on import node 2020-12-16 12:01:48 -05:00
Mike Reeves
09b5e6d227 Fix SSL issue 2020-12-16 11:57:27 -05:00
William Wernert
d670f96dc0 [fix] Exit on command failure in so-catrust 2020-12-16 11:07:00 -05:00
William Wernert
a959b4b2cd [fix] Helix sensor needs so-soc and so-elasticsearch images downloaded 2020-12-16 11:00:48 -05:00
William Wernert
142649b396 [fix] Fix comparator 2020-12-16 10:38:34 -05:00
William Wernert
e464117e8a [fix] Run so-catrust in ES state on Helix sensor install 2020-12-16 10:19:44 -05:00
William Wernert
aa0d43b1db [fix] Always define ismanager var 2020-12-16 09:55:09 -05:00
Josh Patterson
bdbb466d69 Merge pull request #2357 from Security-Onion-Solutions/fix/sensoroni_steno_pillar 
Fix/sensoroni steno pillar
 2020-12-16 09:40:06 -05:00
TOoSmOotH
8889c79afd Run a common state first to fix docker race condition 2020-12-16 09:39:41 -05:00
m0duspwnens
448d0e079e add whitespace removal to the front 2020-12-16 09:39:25 -05:00
m0duspwnens
f0999abd8e add missing % 2020-12-16 09:38:21 -05:00
m0duspwnens
c68b87db56 set steno running default based on sensor role or not 2020-12-16 09:33:44 -05:00