Commit Graph

1419 Commits

Author SHA1 Message Date
Doug Burks aa2e18fca9 Update soup for 2.3.230 2023-03-24 12:31:51 -04:00
Doug Burks 69f889dbd9 Update soup for 2.3.220 2023-02-14 08:42:35 -05:00
Josh Brower 4dd54cea6c Use correct variable name 2023-02-08 16:58:47 -05:00
Josh Brower e07f4bd0ed Workaround for FleetDM PW Req 2023-02-08 13:03:33 -05:00
Doug Burks a96825f43e Update soup for 2.3.210 2023-01-30 09:16:00 -05:00
Doug Burks 672cab858e Continue even if thehive errors 2023-01-12 12:48:16 -05:00
Doug Burks a4bae77973 Merge pull request #9271 from Njinx/dev
so-status runs some code before checking for root privileges
2023-01-04 16:05:34 -05:00
doug 7dcdcc18a5 fix so-common references 2023-01-04 14:28:47 -05:00
doug 3482df5ee1 fix jinja whitespace 2023-01-04 13:33:51 -05:00
doug a67a254edc update Copyright year 2023-01-04 12:44:18 -05:00
Jason Ertel 87cebedc85 Backup the new Kratos location 2022-12-14 14:12:47 -05:00
Jason Ertel a7a15117f0 Improve soup wording when the script itself needs updated 2022-12-14 12:03:47 -05:00
Jason Ertel 865ba4264b Stop backing up kratos since it now lives in /nsm. Ensure kratos is removed when re-installing. 2022-12-14 10:57:24 -05:00
Jason Ertel 6985b0ab27 Move kratos DB to /nsm 2022-12-14 10:50:24 -05:00
Doug Burks aa08803f03 FIX: so-import utilities should hyperlink to dashboards #9373 2022-12-13 13:23:27 -05:00
Doug Burks bb346d531d FIX: so-import utilities should hyperlink to dashboards #9373 2022-12-13 13:22:53 -05:00
Doug Burks 6c057d0b0a FIX: so-import utilities should hyperlink to dashboards #9373 2022-12-13 12:43:54 -05:00
Doug Burks 47e43e53d9 FIX: so-import utilities should hyperlink to dashboards #9373 2022-12-13 12:43:10 -05:00
Ben Allen a1b2c28a42 Check privileges much earlier 2022-12-02 14:08:22 -05:00
Doug Burks 7184b9cb25 disable ecat_arp_info by default in so-zeek-logs 2022-12-01 07:18:05 -05:00
Mike Reeves 571ac4edec Update soup 2022-11-29 18:36:47 -05:00
Wes 16cd1080be Add dnp3_control reference in various places 2022-11-29 17:23:37 +00:00
Doug Burks b06e9e8477 add new zeek opcua logs to so-zeek-logs 2022-11-26 18:44:28 -05:00
Doug Burks ec0cf71c3f add opcua_binary_opensecure_channel to so-zeek-logs 2022-11-26 17:00:32 -05:00
Doug Burks 33a478ff59 fix zeek ics logs in so-zeek-logs 2022-11-25 09:40:48 -05:00
Doug Burks 2ada4712bc fix zeek ics logs in so-zeek-logs 2022-11-25 09:37:52 -05:00
Doug Burks fad6c46e7c fix zeek ics logs in so-zeek-logs 2022-11-25 09:35:00 -05:00
Doug Burks 9f5e75b302 add software to so-zeek-logs 2022-11-25 07:27:50 -05:00
Doug Burks 0536d174fe Fix opcua_binary reference in so-zeek-logs 2022-11-21 14:03:22 -05:00
Doug Burks a54bb2bad4 Remove descriptions from so-zeek-logs 2022-11-21 13:23:53 -05:00
lock-wire f80c8b89e4 Shorten Log Descriptions 2022-11-21 09:49:31 -07:00
lock-wire 1b8e546045 Add s7comm,tds,stun,profinet,wireguard 2022-11-16 21:41:02 -06:00
lock-wire 8dc08f66fd Merge branch 'foxtrot' of https://github.com/Security-Onion-Solutions/securityonion into foxtrot
merge remote
2022-11-11 12:18:02 -08:00
lock-wire 73b1e5949b Add ecat, enip, cip, and opcua 2022-11-11 12:15:54 -08:00
Jason Ertel 595a95fdf5 merge conflicts 2022-11-10 16:47:52 -05:00
Mike Reeves 4acd9f8816 Update soup 2022-11-09 10:10:52 -05:00
Mike Reeves a7417a7242 Update soup 2022-11-08 14:48:48 -05:00
Mike Reeves 16d8e9e5a0 Fix soup and perms updates 2022-11-01 09:05:26 -04:00
Mike Reeves ee1f55361e Add soup and perms updates 2022-10-31 16:33:38 -04:00
Mike Reeves bd7e12f682 Merge pull request #8952 from Njinx/dev
FEATURE: so-pcap-export can run without needing to be attached to a TTY
2022-10-25 14:38:48 -04:00
Jason Ertel 05e271af47 update soup for 2.3.181 2022-10-21 11:52:54 -04:00
Ben Allen f13f05eb94 Run without needing to be attached to a TTY 2022-10-19 14:11:11 -04:00
Doug Burks 7401008523 Update soup for 2.3.180 2022-10-11 12:58:37 -04:00
Mike Reeves b8355b3a03 Update soup 2022-09-22 09:10:12 -04:00
Mike Reeves e62bebeafe Update soup 2022-08-29 09:39:41 -04:00
Mike Reeves 30b9868de1 Update soup 2022-08-29 09:32:46 -04:00
weslambert f00d9074ff Allow local modification acceptance prompt to be skipped when passing 'skip-prompt' as a parameter value to check_local_mods() function 2022-08-19 16:07:14 -04:00
weslambert fbf0803906 Update verbiage around major Elasticsearch version and not requiring Elastalert index maintenance 2022-08-18 09:16:22 -04:00
weslambert 5deda45b66 Update elastalert_indices_check() function to only delete Elastalert indices if major Elasticsearch version is less than 8
Update elastalert_indices_check() function to only delete Elastalert indices if major Elasticsearch version is less than 8. Also clean up the output to only emit one notification regarding index deletion, and additional verbiage around function operation.
2022-08-18 09:11:38 -04:00
weslambert fd7a118664 Invoke check_local_mods() function earlier so we don't have to wait for Docker image downloads or OS updates before checking and potentially exiting SOUP 2022-08-08 08:58:19 -04:00