Commit Graph

  • 1be8de7acb must use null check reyesj2 2025-02-18 11:16:57 -06:00
  • 564d8c2868 Merge branch '2.4/dev' into jertel/wip Jason Ertel 2025-02-18 11:50:21 -05:00
  • 8033cdbc89 Merge pull request #14253 from Security-Onion-Solutions/dougburks-patch-1 Doug Burks 2025-02-18 11:49:22 -05:00
  • 7dd64380cc Enable TLSv1.3 and use consistent ciphers across listeners Jason Ertel 2025-02-18 11:48:00 -05:00
  • 5c3e28535a FIX: Add TLSv1.3 to nginx config #14252 #14253 Doug Burks 2025-02-18 11:46:45 -05:00
  • 21ed1439e2 update udp integration policy reyesj2 2025-02-18 10:40:18 -06:00
  • c1c72ddd9b update global@custom pipeline ignore null/empty string values reyesj2 2025-02-18 10:39:54 -06:00
  • 235a8e3934 update index templates for endpoint integration reyesj2 2025-02-17 18:30:51 -06:00
  • 3530bff320 always update package components state file to ensure index templates are created with any available integration components reyesj2 2025-02-17 12:29:27 -06:00
  • 12f0195f29 pfsense integration - keep suricata events reyesj2 2025-02-17 12:28:23 -06:00
  • 85dcfbf368 update kibana default space reyesj2 2025-02-17 12:27:36 -06:00
  • 8568c372f6 disable fleet apm reyesj2 2025-02-17 12:21:31 -06:00
  • 8ffd4fc664 new examples Josh Patterson 2025-02-16 02:31:52 -05:00
  • f46548ed88 remove free hw from description Josh Patterson 2025-02-16 02:25:18 -05:00
  • 0d335e3056 free and totals in labels Josh Patterson 2025-02-16 02:23:11 -05:00
  • 6ff701bd5c soc ui improvements for hypervisor layout. show free hardware for a hypervisor in the description Josh Patterson 2025-02-16 01:33:50 -05:00
  • c34be5313d hardware logging. vm state file logging Josh Patterson 2025-02-15 21:41:01 -05:00
  • ec2fc0a5f2 change locking method Josh Patterson 2025-02-15 18:56:04 -05:00
  • ad54afe39a ensure socore:socore ownership Josh Patterson 2025-02-15 12:11:23 -05:00
  • eb4cd75218 virtual_node_manager lookup hardware from defaults. allocate hw in vm file Josh Patterson 2025-02-15 11:29:47 -05:00
  • a84f5a1e32 updated logging added returns Josh Patterson 2025-02-15 11:14:39 -05:00
  • e193347fb4 add hypervisor to host keys first connection. cleaner qcow2 logging. Josh Patterson 2025-02-15 10:54:49 -05:00
  • ad27c8674b no longer need add_* nodes Josh Patterson 2025-02-15 10:50:09 -05:00
  • 810abba83e Merge pull request #14229 from Security-Onion-Solutions/reyesj2/rel Jorge Reyes 2025-02-13 08:54:06 -06:00
  • 03b76cbcf5 remove state files #14229 reyesj2 2025-02-13 08:51:50 -06:00
  • c711ffe6c5 keep pipeline "managed" metadata reyesj2 2025-02-13 08:44:56 -06:00
  • 8094bf9c7c Merge pull request #14225 from Security-Onion-Solutions/reyesj2/rel Jorge Reyes 2025-02-12 16:37:25 -06:00
  • 09c7b31918 update pfsense pipeline version. Remove unused component templates #14225 reyesj2 2025-02-12 16:33:56 -06:00
  • d1e98d0849 Merge pull request #14224 from Security-Onion-Solutions/reyesj2/rel Jorge Reyes 2025-02-12 13:18:39 -06:00
  • 40cb3a53ae Revert ES 8.17.2 upgrade -> 8.17.1 #14224 reyesj2 2025-02-12 13:18:08 -06:00
  • 5123a86062 start of dynamic annotations for hypervisor Josh Patterson 2025-02-12 13:21:39 -05:00
  • e9e7434c69 Merge pull request #14222 from Security-Onion-Solutions/TOoSmOotH-patch-2 Mike Reeves 2025-02-12 11:30:38 -05:00
  • d2ac6ec10f Update 2-4.yml #14222 Mike Reeves 2025-02-12 11:29:07 -05:00
  • 4f19884c8d Merge pull request #14221 from Security-Onion-Solutions/TOoSmOotH-patch-1 Mike Reeves 2025-02-12 11:28:11 -05:00
  • 16c332ad2e Update VERSION #14221 Mike Reeves 2025-02-12 11:27:43 -05:00
  • d430dd2b73 Merge pull request #14219 from Security-Onion-Solutions/2.4/dev 2.4.120-20250212 Mike Reeves 2025-02-12 11:14:56 -05:00
  • 43a0020a9e Merge pull request #14220 from Security-Onion-Solutions/fixeroni #14219 Mike Reeves 2025-02-12 09:37:04 -05:00
  • b0e82cd59b Fix Conflict #14220 Mike Reeves 2025-02-12 09:35:52 -05:00
  • 237370f0c7 Merge pull request #14218 from Security-Onion-Solutions/2.4.120 Mike Reeves 2025-02-12 09:20:40 -05:00
  • 69be367acf 2.4.120 #14218 Mike Reeves 2025-02-12 09:09:38 -05:00
  • cdf8943f24 Merge pull request #14214 from Security-Onion-Solutions/reyesj2/rel Jorge Reyes 2025-02-11 11:24:18 -06:00
  • fb0cd436d3 ES 8.17.2 TODO: Check import-evtx-logs.json for updated pipeline versions #14214 reyesj2 2025-02-11 11:23:04 -06:00
  • 33f145a40b ensure network packet capture integration data has event.module:network_traffic reyesj2 2025-02-04 08:58:36 -06:00
  • 3b69ff9fc9 integration policy update reyesj2 2025-01-29 14:02:45 -06:00
  • 66bc0d487c Merge pull request #14206 from Security-Onion-Solutions/reyesj2-patch-00 Jorge Reyes 2025-02-07 15:27:52 -06:00
  • 9bde70a8e2 zeek.software typo #14206 reyesj2 2025-02-07 15:19:40 -06:00
  • 010c205eec configure bond and monitor nics m0duspwnens 2025-02-07 14:45:06 -05:00
  • 322941f29a Merge pull request #14203 from Security-Onion-Solutions/reyesj2-patch-00 Jorge Reyes 2025-02-07 07:52:11 -06:00
  • dd17ee7665 fix defining custom logstash pipelines when kafka is enabled #14203 reyesj2 2025-02-06 22:04:25 -06:00
  • 160c84ec1a Merge pull request #14200 from Security-Onion-Solutions/2.4/dev Josh Patterson 2025-02-06 17:41:22 -05:00
  • 924c0b63bd put vnm engine in place m0duspwnens 2025-02-06 16:05:56 -05:00
  • 9b8dce0c77 only wait and make predicable when virt-install runs m0duspwnens 2025-02-06 15:44:28 -05:00
  • 7159678385 create predicatble interfaces m0duspwnens 2025-02-06 15:30:46 -05:00
  • 4b51066327 Merge pull request #14191 from Security-Onion-Solutions/jertel/wip #14200 Jason Ertel 2025-02-05 15:09:57 -05:00
  • bf19c6e730 ca download; ignore shard errors on startup; clarify oidc id #14191 Jason Ertel 2025-02-05 15:04:04 -05:00
  • 12a2b491c3 Merge pull request #14190 from Security-Onion-Solutions/2.4/fixmsi Josh Brower 2025-02-05 10:22:17 -05:00
  • 4636a8d9b1 Refresh Agent installers #14190 Joshua Brower 2025-02-05 09:38:33 -05:00
  • abbb0db1ff Merge pull request #14189 from Security-Onion-Solutions/2.4/fixmsi Josh Brower 2025-02-05 09:35:37 -05:00
  • 95fe212202 Rework for MSI #14189 Joshua Brower 2025-02-05 09:29:45 -05:00
  • fbb9bf14e9 Merge pull request #14183 from Security-Onion-Solutions/cogburn/escalate-limit coreyogburn 2025-02-04 15:24:53 -07:00
  • 23ebe966e0 Added Large Values Warning #14183 Corey Ogburn 2025-02-04 10:33:04 -07:00
  • d0fa6eaf83 New Limit on Bulk Creating Related Events Corey Ogburn 2025-01-29 15:48:48 -07:00
  • c8e232c598 cloudinit network config out of user-data. default 220G disk m0duspwnens 2025-02-03 12:20:34 -05:00
  • 7a0309cdf4 Merge pull request #14179 from Security-Onion-Solutions/2.4/fixilmpolicy Josh Brower 2025-02-03 09:35:55 -05:00
  • b874619f0d Fix ip-mappings ILM #14179 Joshua Brower 2025-02-03 09:31:08 -05:00
  • a3013ff85b simplify the LVM deactivation process by removing unnecessary VG removal attempts m0duspwnens 2025-01-31 16:36:51 -05:00
  • 65c5abfa88 add note regarding possible missing devices m0duspwnens 2025-01-31 16:15:46 -05:00
  • 0114e36cfa set lvm = system uuid and only sanitize new nvme if doesnt belong to current vm m0duspwnens 2025-01-31 15:17:54 -05:00
  • 5c56e0f498 already configured not failure state m0duspwnens 2025-01-31 11:18:11 -05:00
  • 61992ae787 verify script work with 1 or more nvme m0duspwnens 2025-01-30 13:28:08 -05:00
  • 08bbeedbd7 add automatic NVMe device mounting for VMs with LVM support m0duspwnens 2025-01-30 09:55:26 -05:00
  • a5f2db8c80 add preflight check to ensure repo connectivity prior to installing salt-minion with salt-cloud m0duspwnens 2025-01-29 18:17:29 -05:00
  • 8d1ce0460f remove possible race condition caused by vm init cron for setup.virt.init. setup.virt and mine updated during salt-cloud call with init_script m0duspwnens 2025-01-29 14:23:10 -05:00
  • 028c73fd3a Merge pull request #14162 from Security-Onion-Solutions/TOoSmOotH-patch-2 Jason Ertel 2025-01-29 10:12:20 -05:00
  • 27e9773782 Update so-functions #14162 Mike Reeves 2025-01-29 10:07:52 -05:00
  • 7ae128dec6 Merge pull request #14161 from Security-Onion-Solutions/esdtsn Josh Patterson 2025-01-29 09:29:04 -05:00
  • fe4129c8e0 env discovery.type single-node change #14161 Josh Patterson 2025-01-29 09:11:52 -05:00
  • 3c85b48291 manage with contents to simplify salt cloud profile file_map m0duspwnens 2025-01-29 08:12:50 -05:00
  • ea2e026c56 only manager nodes or heavynodes should ever be single-node m0duspwnens 2025-01-29 08:10:05 -05:00
  • 8b3f310212 install python3-dnf-plugin-versionlock on vm before first highstate m0duspwnens 2025-01-29 04:08:30 -05:00
  • 87136e9e2b restart salt-minion to trigger highstate m0duspwnens 2025-01-28 16:38:20 -05:00
  • 5a6a9d6ec2 round ES_HEAP_SIZE m0duspwnens 2025-01-28 16:01:49 -05:00
  • d3b3a0eb8a wrap salt-cloud -yd. start implementing vm/minion cleanup with ip removal m0duspwnens 2025-01-28 14:04:58 -05:00
  • 91fc59cffc add removehost option to so-firewall. add logging to console and so-firewall.log m0duspwnens 2025-01-28 14:04:02 -05:00
  • e32dbad0d0 fix monitoring for add_ files m0duspwnens 2025-01-28 11:22:26 -05:00
  • 8828a3049d Merge pull request #14155 from Security-Onion-Solutions/reyesj2/es-integ-tmp Jorge Reyes 2025-01-27 16:36:17 -06:00
  • d74b69d84d add additional weird_integration #14155 reyesj2 2025-01-27 16:34:33 -06:00
  • b66aafd168 fix claiming for cpu/mem m0duspwnens 2025-01-27 17:24:04 -05:00
  • 2cd0f69069 watch and build m0duspwnens 2025-01-27 16:40:10 -05:00
  • 0177f641c8 watch for files and create a vm m0duspwnens 2025-01-27 15:09:42 -05:00
  • abcfe638c9 Merge pull request #14153 from Security-Onion-Solutions/reyesj2/es-integ-tmp Jorge Reyes 2025-01-27 14:07:32 -06:00
  • 49ab0751c0 Remove uneeded import Joshua Brower 2025-01-27 15:01:21 -05:00
  • e994f3a220 Fix commits Joshua Brower 2025-01-27 14:48:50 -05:00
  • 38b0276458 remove reference to deleted file #14153 reyesj2 2025-01-27 13:45:18 -06:00
  • a373d96c3c run managed_soc_annotations.sls from manager state reyesj2 2025-01-27 13:45:03 -06:00
  • b3969a6ce0 fix hardware passthrough for pci devices m0duspwnens 2025-01-24 17:19:41 -05:00
  • ab97d3b8b7 ensure 64962 patch applies to manager for salt-cloud m0duspwnens 2025-01-24 11:26:34 -05:00
  • 97a3f130c8 Update Elastic Josh Brower 2025-01-23 15:32:39 -05:00
  • 5b8f8fb62f add/remove es annotations/defaults automagically #14145 reyesj2 2025-01-23 12:47:22 -06:00
  • 213df68d04 merge with 120 dev and fix conflicts m0duspwnens 2025-01-23 10:56:48 -05:00