mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 09:12:45 +01:00
Compare commits
11 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
8b76b30266 | ||
|
|
a0c79f1a4a | ||
|
|
fe2f1f9aa3 | ||
|
|
eaf54781e8 | ||
|
|
c024bdf427 | ||
|
|
f271fadfec | ||
|
|
af1a44f479 | ||
|
|
acf9c29c83 | ||
|
|
ea7dd0763f | ||
|
|
eebc75d245 | ||
|
|
997cb8f9ae |
26
README.md
26
README.md
@@ -31,15 +31,6 @@
|
|||||||
- Due to the move to ECS, the current Playbook plays may not alert correctly at this time.
|
- Due to the move to ECS, the current Playbook plays may not alert correctly at this time.
|
||||||
- The osquery MacOS package does not install correctly.
|
- The osquery MacOS package does not install correctly.
|
||||||
|
|
||||||
|
|
||||||
## Version 1.2.1 Beta 1 ISO Download
|
|
||||||
|
|
||||||
[HH1.2.1-6.ISO](https://download.securityonion.net/file/Hybrid-Hunter/HH-1.2.1-6.iso)
|
|
||||||
|
|
||||||
MD5: D7E66CA8AAC37E70E2A2F7BB12EB3C23
|
|
||||||
SHA1: D91D921896F9ADA600EBA0ADAA548D8630B5341F
|
|
||||||
SHA256: D69E327597AB429DCE13C1177BCE6C1FAD934E78A09F73D14778C2CAE616557B
|
|
||||||
|
|
||||||
### Warnings and Disclaimers
|
### Warnings and Disclaimers
|
||||||
|
|
||||||
- This BETA release is BLEEDING EDGE and TOTALLY UNSUPPORTED!
|
- This BETA release is BLEEDING EDGE and TOTALLY UNSUPPORTED!
|
||||||
@@ -55,33 +46,36 @@ SHA256: D69E327597AB429DCE13C1177BCE6C1FAD934E78A09F73D14778C2CAE616557B
|
|||||||
|
|
||||||
Evaluation Mode:
|
Evaluation Mode:
|
||||||
|
|
||||||
- ISO or a Single VM running Ubuntu 16.04 or CentOS 7
|
- ISO or a Single VM running Ubuntu 18.04 or CentOS 7
|
||||||
- Minimum 12GB of RAM
|
- Minimum 12GB of RAM
|
||||||
- Minimum 4 CPU cores
|
- Minimum 4 CPU cores
|
||||||
- Minimum 2 NICs
|
- Minimum 2 NICs
|
||||||
|
|
||||||
Distributed:
|
Distributed:
|
||||||
|
|
||||||
- 3 VMs running the ISO or Ubuntu 16.04 or CentOS 7 (You can mix and match)
|
- 3 VMs running the ISO or Ubuntu 18.04 or CentOS 7 (You can mix and match)
|
||||||
- Minimum 8GB of RAM per VM
|
- Minimum 8GB of RAM per VM
|
||||||
- Minimum 4 CPU cores per VM
|
- Minimum 4 CPU cores per VM
|
||||||
- Minimum 2 NICs for forward nodes
|
- Minimum 2 NICs for forward nodes
|
||||||
|
|
||||||
### Prerequisites for Network Based Install
|
### Installation
|
||||||
|
|
||||||
Install git if using a Centos 7 Minimal install:
|
For most users, we recommend installing using [our ISO image](https://github.com/Security-Onion-Solutions/securityonion-saltstack/wiki/ISO).
|
||||||
|
|
||||||
|
If instead you would like to try a manual installation (not using our ISO), you can build from CentOS 7 or Ubuntu 18.04.
|
||||||
|
|
||||||
|
If using CentOS 7 Minimal, you will need to install git:
|
||||||
|
|
||||||
```sudo yum -y install git```
|
```sudo yum -y install git```
|
||||||
|
|
||||||
### Installation
|
Once you have git, then do the following:
|
||||||
|
|
||||||
Once you resolve those requirements or are using Ubuntu 16.04 do the following:
|
|
||||||
|
|
||||||
```
|
```
|
||||||
git clone https://github.com/Security-Onion-Solutions/securityonion-saltstack
|
git clone https://github.com/Security-Onion-Solutions/securityonion-saltstack
|
||||||
cd securityonion-saltstack
|
cd securityonion-saltstack
|
||||||
sudo bash so-setup-network
|
sudo bash so-setup-network
|
||||||
```
|
```
|
||||||
|
|
||||||
Follow the prompts and reboot if asked to do so.
|
Follow the prompts and reboot if asked to do so.
|
||||||
|
|
||||||
Then proceed to the [Hybrid Hunter Quick Start Guide](https://github.com/Security-Onion-Solutions/securityonion-saltstack/wiki/Hybrid-Hunter-Quick-Start-Guide).
|
Then proceed to the [Hybrid Hunter Quick Start Guide](https://github.com/Security-Onion-Solutions/securityonion-saltstack/wiki/Hybrid-Hunter-Quick-Start-Guide).
|
||||||
|
|||||||
@@ -19,5 +19,4 @@ health:
|
|||||||
enabled: true
|
enabled: true
|
||||||
interval: 10s
|
interval: 10s
|
||||||
threshold: 3
|
threshold: 3
|
||||||
proxy:
|
|
||||||
remoteurl: https://registry-1.docker.io
|
|
||||||
|
|||||||
@@ -603,9 +603,9 @@ docker_seed_registry() {
|
|||||||
"so-soctopus:$VERSION" \
|
"so-soctopus:$VERSION" \
|
||||||
"so-steno:$VERSION" \
|
"so-steno:$VERSION" \
|
||||||
"so-strelka-frontend:$VERSION" \
|
"so-strelka-frontend:$VERSION" \
|
||||||
"so-strelka-manager:$VERSION" \
|
"so-strelka-manager:$VERSION" \
|
||||||
"so-strelka-backend:$VERSION" \
|
"so-strelka-backend:$VERSION" \
|
||||||
"so-strelka-filestream:$VERSION" \
|
"so-strelka-filestream:$VERSION" \
|
||||||
"so-suricata:$VERSION" \
|
"so-suricata:$VERSION" \
|
||||||
"so-telegraf:$VERSION" \
|
"so-telegraf:$VERSION" \
|
||||||
"so-thehive:$VERSION" \
|
"so-thehive:$VERSION" \
|
||||||
@@ -645,6 +645,8 @@ docker_seed_registry() {
|
|||||||
done
|
done
|
||||||
else
|
else
|
||||||
# We already have the goods son
|
# We already have the goods son
|
||||||
|
cd /nsm/docker-registry/docker
|
||||||
|
tar xvf so-dockers-$VERSION.tar
|
||||||
rm /nsm/docker-registry/docker/so-dockers-$VERSION.tar
|
rm /nsm/docker-registry/docker/so-dockers-$VERSION.tar
|
||||||
fi
|
fi
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user