Corey Ogburn 0f50a265cf Update SOC Config with State File Paths ...

Each detection engine is getting a state file to help manage the timer over restarts. By default, the files will go in soc's config folder inside a fingerprints folder.

2024-04-03 13:12:18 -06:00

..

_beacons

…

_modules

Update needs_restarting.py

2023-07-20 08:36:27 -04:00

backup

add identifiers for all cron.present

2023-04-13 16:25:47 -04:00

bpf

FIX: Annotations for BPF and Suricata PCAP #12626

2024-03-20 15:49:46 -04:00

ca

Update signing_policies.conf

2023-11-17 16:38:50 -05:00

common

Merge pull request #12731 from Security-Onion-Solutions/jertel/ana

2024-04-03 14:51:41 -04:00

cron

…

curator

only run the file.absent state if there are files to delete

2023-12-21 09:36:47 -05:00

desktop

add putty to sod packages.sls

2024-02-08 22:05:37 -05:00

docker

Initial cut to remove Playbook and deps

2024-03-25 19:42:31 -04:00

docker_clean

allow states for desktop. give all nodes docker_clean, order it last

2023-09-01 09:39:39 -04:00

elastalert

Tag at top level

2023-07-11 08:35:47 -04:00

elastic-fleet-package-registry

Allow additional docker parameters

2023-05-18 16:52:38 -04:00

elasticagent

Add tcp and udp integration

2023-08-30 13:04:32 +00:00

elasticfleet

Add journald integration

2024-03-05 09:49:55 -05:00

elasticsearch

Add cef

2024-04-03 14:40:41 +00:00

firewall

Initial cut to remove Playbook and deps

2024-03-25 19:42:31 -04:00

global

Improve wording for Airgap annotation

2024-04-03 08:21:30 -04:00

healthcheck

…

host

…

idh

add description for http_x_skin

2023-12-06 15:44:36 -05:00

idstools

fix oinkcodes with leading zeros

2024-03-05 16:42:20 -05:00

influxdb

Specify config.yaml in config_path. Otherwise when no influxd.bolt exists influxdb will fail to read the config file and won't create a new db.

2023-10-26 13:15:40 -04:00

kibana

Check Kibana API not Web

2024-01-11 12:30:23 -05:00

kratos

lks/fps

2024-01-24 11:17:32 -05:00

logrotate

Remove Curator

2023-12-08 19:37:06 +00:00

logstash

Change numbers for Logstash

2024-02-01 14:01:55 +00:00

manager

Merge pull request #12731 from Security-Onion-Solutions/jertel/ana

2024-04-03 14:51:41 -04:00

motd

Update so_motd.jinja

2023-06-15 09:54:23 -04:00

nginx

Initial cut to remove Playbook and deps

2024-03-25 19:42:31 -04:00

ntp

Initial Oracle support

2023-07-13 10:54:04 -04:00

patch

add description for soc_patch.yaml

2023-12-06 15:51:00 -05:00

pcap

Merge pull request #12544 from Security-Onion-Solutions/jertel/status

2024-03-11 10:29:33 -04:00

pipeline

…

podman

docker ips changes

2023-07-21 16:06:52 -04:00

reactor

…

redis

avoid volume sprawl

2023-09-18 11:19:21 -04:00

registry

upgrade registry version

2023-07-19 09:51:07 -04:00

repo/client

Modify yum.conf.jinja to include localpkg_gpgcheck rather than modifying it with so-stig

2024-01-15 21:30:31 -05:00

salt

Update init.sls

2024-03-13 11:24:26 -04:00

sensor

Update verbiage and links in soc_sensor.yaml

2023-08-01 12:45:09 -04:00

sensoroni

removed unused property

2024-03-13 13:49:44 -04:00

setup

change post setup highstate cron to 5 minutes since accepting minion runs a highstate

2023-10-20 13:46:24 -04:00

soc

Update SOC Config with State File Paths

2024-04-03 13:12:18 -06:00

ssl

also remove intca symlink

2024-01-31 09:01:56 -05:00

stig

Run stig post remediate scan against default ol9 scap-security-guide.

2024-03-06 17:19:01 -05:00

strelka

Remove Strelka rules watch

2024-03-21 10:09:36 -04:00

suricata

Fix regex to allow ipv6 in bpfs

2024-03-27 09:36:42 -04:00

systemd

…

tcpreplay

…

telegraf

add agentstatus to telegraf

2024-04-03 10:06:08 -04:00

utility

…

vars

add GLOBALS.is_sensor

2024-03-05 09:53:35 -05:00

zeek

Fix regex to allow ipv6 in bpfs

2024-03-27 09:36:42 -04:00

allowed_states.map.jinja

Initial cut to remove Playbook and deps

2024-03-25 19:42:31 -04:00

schedule.sls

rename highstate schedule

2023-04-24 09:31:32 -04:00

top.sls

Initial cut to remove Playbook and deps

2024-03-25 19:42:31 -04:00