Commit graph

184 commits

Author SHA1 Message Date
t3chn0m4g3
0aa1a05c92 enable smtps for heralding 2021-02-16 17:14:56 +00:00
t3chn0m4g3
e5f29f3c90 bump elk stack to 7.11.0 2021-02-12 13:21:35 +00:00
t3chn0m4g3
020cbb5355 avoid ghcr.io because of slow transfers 2020-12-28 20:37:47 +00:00
t3chn0m4g3
ba87ebfdaa update objects for Elastic Stack 7.10.0 2020-12-02 22:54:54 +00:00
t3chn0m4g3
1ee9c29805 set new container registry, point installer to branch 2020-09-04 13:29:14 +00:00
t3chn0m4g3
5b1e07b9c8 finalize objects for ipphoney 2020-08-25 16:12:29 +00:00
t3chn0m4g3
2be185a371 add kibana objects for ipphoney 2020-08-25 15:08:28 +00:00
t3chn0m4g3
b86d2c715b prep for ipphoney 2020-08-24 21:36:08 +00:00
t3chn0m4g3
969e269bd1 improve cowrie dashboard, fixes #664 2020-07-09 15:11:32 +00:00
t3chn0m4g3
6d29f504df provide fix for #669 2020-07-06 23:30:11 +00:00
t3chn0m4g3
e4ef35f3f7 tweaking, update docs
remix sensor installation type
update docs, README and screenshots
2020-06-29 15:14:36 +00:00
t3chn0m4g3
8bfc64a945 add medical edition
add compose file for medical edition
2020-06-29 11:36:49 +00:00
t3chn0m4g3
618ee3c6e9 tweaking
add kibana export / import config function
ewsposter remove transmitting old elasticpot data (need update)
final export of all objects
2020-06-29 10:45:33 +00:00
t3chn0m4g3
3a418534d8 tweaking
random reboot times for crontab
remix compose files
some tweaking
2020-06-28 20:03:14 +00:00
t3chn0m4g3
4e6510b5c7 dicompot tweaking 2020-06-27 00:37:12 +00:00
t3chn0m4g3
6419f4d521 restrict dionaea to networks local again 2020-06-26 16:34:40 +00:00
t3chn0m4g3
da7d095d6f tweaking
finish dashboards
optimize mappings
create viz for dicompot, honeysap
create searches for dicompot, honeysap
some clean up
2020-06-24 18:20:13 +00:00
t3chn0m4g3
238a08b055 tweaking
cleanup index-pattern
add dicompot log to logstash
2020-06-24 13:21:29 +00:00
t3chn0m4g3
39c0abb92e add dicompot to logrotate 2020-06-21 21:12:15 +00:00
t3chn0m4g3
a7c653e7fe start integrating honeysap 2020-06-19 11:54:50 +00:00
t3chn0m4g3
697c5cb3f6 begin integration of dicompot 2020-06-18 16:38:43 +00:00
t3chn0m4g3
2882668826 Add a new elasticsearch honeypot
adjust installer
adjust elasticpot configs to T-Pot's environment
create Dockerfile
adjust logstash config
update Readme
2020-06-17 18:09:59 +00:00
t3chn0m4g3
66d9005c61 establish base for kibana objects 2020-06-16 15:46:06 +00:00
t3chn0m4g3
d1dd805f80 rebuild compose files 2020-06-16 12:55:45 +00:00
t3chn0m4g3
77ddb68413 begin integration for 20.06
change version string
change compose files
clone from dev for testing
2020-06-16 09:43:33 +00:00
t3chn0m4g3
5d7a6f3270 tweaking 2020-03-02 15:23:05 +00:00
t3chn0m4g3
ee1342ce2a remove tanner_web from nextgen 2020-02-27 11:29:42 +00:00
t3chn0m4g3
21c68f75e2 tweaking 2020-02-26 14:43:02 +00:00
t3chn0m4g3
70dca02ce4 tweaking 2020-02-25 16:59:22 +00:00
t3chn0m4g3
bd0e6936eb bump heralding to latest master
fixed by https://github.com/johnnykv/heralding/issues/129#event-3058184614
2020-02-21 11:38:29 +00:00
t3chn0m4g3
faa5667246 bump adbhoney, cowrie, honeytrap to 20.06 2020-02-14 17:22:30 +00:00
t3chn0m4g3
aa4a93684d bump more images to 20.06 2020-02-14 15:30:55 +00:00
t3chn0m4g3
a49d560809 up java mem limit 2020-02-05 15:24:32 +00:00
t3chn0m4g3
ad861200de update mailoney 2020-02-03 14:46:43 +00:00
t3chn0m4g3
5a4724bcba elk 7.x dev test 2020-01-31 14:21:55 +00:00
t3chn0m4g3
a3e0c51493 switch to new nginx, heimdall, landing page in nextgen 2020-01-28 16:11:05 +00:00
t3chn0m4g3
d643ca7a01 logrotate all mailoney log files 2020-01-22 12:23:21 +00:00
t3chn0m4g3
20d6c6ab7f include citrixhoneypot dashboards
for fresh installs of NextGen
2020-01-16 19:56:05 +00:00
Marco Ochse
b033d515c6
dashboard files with citrixhoneypot support
for manual kibana import
2020-01-16 20:49:32 +01:00
t3chn0m4g3
8a844e6dd3 prepare for CitrixHoneypot 2020-01-15 12:14:23 +00:00
t3chn0m4g3
a370e2b414 introduce pigz to logrotate
pigz will now handle compression of t-pot logfiles
logrotate will only rotate archives instead of packing them again
should improve #501 #494 #489 #482 and others with regard to a volume of logs
2019-12-24 10:55:39 +00:00
t3chn0m4g3
6921857573 bump heralding to latest master 2019-10-16 14:46:58 +00:00
Marco Ochse
221f75be33
bump elk stack to 6.8.2 2019-08-28 13:53:43 +02:00
t3chn0m4g3
66bb9443f9 bump elk stack to 6.8.2 2019-08-28 11:49:03 +00:00
Marco Ochse
a59fc19133
bump elastic stack to 6.7.2 2019-08-15 17:40:01 +02:00
t3chn0m4g3
bf39c0f5b2 bump elastic stack to 6.7.2 2019-08-15 15:38:12 +00:00
t3chn0m4g3
5e22afd10b finalize fatt support 2019-06-04 14:21:35 +00:00
Marco Ochse
a87af2ce6a
update objects 2019-06-04 16:10:33 +02:00
Marco Ochse
a8b7cc4e9a
update some objects 2019-06-03 23:02:10 +02:00
t3chn0m4g3
f18c5586bf update some objects 2019-06-03 20:57:03 +00:00
t3chn0m4g3
8b03fb8f28 remove glastopf 2019-06-03 20:04:50 +00:00
t3chn0m4g3
4e902b6560 add fatt to nextgen 2019-06-01 17:47:14 +00:00
Marco Ochse
018630aabe
Adjust permissions 2019-05-20 19:08:05 +02:00
listbot
72c98ac811 Fix for KVP name changes in Cowrie 2019-05-02 13:25:22 +00:00
Marco Ochse
44385fb9b7
Fix for KVP name changes in Cowrie 2019-05-02 15:14:38 +02:00
t3chn0m4g3
d4654f2bbc prepare for hpfeeds opt in 2019-04-01 07:42:24 +00:00
t3chn0m4g3
0d1b7d56a2 tweaking 2019-03-28 11:27:50 +00:00
Marco Ochse
e9f19a33d9
Add files via upload 2019-03-28 09:21:42 +01:00
Marco Ochse
f94c00eba1
include kibana objects export 2019-03-27 15:49:40 +01:00
t3chn0m4g3
a452b9bd9d update dashboards
Cowrie - Add HASSH visulization
Suricata - Add JA3 visualization
Account for HASSH, JA3 in Cowrie / Suricata overview
Thanks for chatting about JA3/HASSH @0x4d31-sfdc
2019-03-27 14:46:27 +00:00
t3chn0m4g3
c0d0e016e6 tweaking
Update Heralding to support SOCKS5
Correct Readme
Resize tped.sh
2019-03-27 13:39:23 +00:00
Marco Ochse
249b9318b6
dashboard adjustments 2019-03-20 15:53:36 +01:00
t3chn0m4g3
58ce021c27 dashboard adjustments 2019-03-20 14:48:52 +00:00
t3chn0m4g3
da6299e6a1 tweaking 2019-03-20 10:09:07 +00:00
t3chn0m4g3
5b710d5b28 add honeypy dashboard, viz and search 2019-03-15 22:31:21 +00:00
t3chn0m4g3
5dae44b5e9 prepare for sissden opt-in 2019-03-15 15:59:02 +00:00
t3chn0m4g3
7ed3530130 remove volume 2019-03-10 18:22:31 +00:00
t3chn0m4g3
522da73710 add honeypy to nextgen flavor 2019-03-10 18:20:12 +00:00
t3chn0m4g3
6f30322ad5 prepare for honeypy 2019-03-10 18:15:59 +00:00
t3chn0m4g3
2cc8c9eba1 account for .kibana alias 2019-03-01 21:27:53 +00:00
t3chn0m4g3
85e5f8d7aa add objects, fix for #298 2019-03-01 20:29:47 +00:00
t3chn0m4g3
89b249d228 add new elkbase, prevent mailutils from installation 2019-03-01 14:27:42 +00:00
t3chn0m4g3
2b8a82d0f5 move to 1903 images 2019-02-25 18:59:40 +00:00
t3chn0m4g3
9f905f70de prepare for new release
fix for installer, now always pointing to master repo
include adbhoney and dashboard
2018-12-07 17:50:39 +01:00
t3chn0m4g3
c7873554c3 prepare for adbhoney 2018-12-05 16:59:08 +00:00
t3chn0m4g3
bc7f9ad2fd Update docs, installer, tweaking 2018-11-23 23:30:25 +01:00
t3chn0m4g3
c85f921fd2 tweaking 2018-11-23 17:12:12 +00:00
Marco Ochse
d14205bb36
dashboard tuning after bump to elk 6.5.1 2018-11-23 17:08:02 +01:00
Marco Ochse
2562533727
Add files via upload 2018-11-21 15:42:37 +01:00
t3chn0m4g3
d0aae74e18 tweaking 2018-11-21 14:38:44 +00:00
t3chn0m4g3
2620b94863 tweaking
update kibana objects
point docker images to 1811 tags
2018-11-20 17:19:49 +00:00
Marco Ochse
4ca50f5c63
Add files via upload 2018-11-20 18:09:29 +01:00
t3chn0m4g3
870c640a5b tweaking
include the latest dashboards
include the latest viz, searches, index pattern
fixes #255 by updating import and export scripts
some cleaning up
2018-11-19 21:58:03 +00:00
Marco Ochse
4cda722cc7
Add files via upload 2018-11-19 21:48:37 +01:00
Marco Ochse
bf1bfcd773
Add files via upload 2018-11-19 20:38:36 +01:00
t3chn0m4g3
14c9585b7e cleaning up 2018-09-11 13:51:47 +00:00
t3chn0m4g3
7591b349e0 remove vnclowpot from 18.10 editions 2018-09-11 13:11:27 +00:00
t3chn0m4g3
0c86bd9a5a tweaking 2018-09-11 12:19:26 +00:00
t3chn0m4g3
992d453b9a medpot tweaking 2018-09-11 07:59:14 +00:00
t3chn0m4g3
8b4a233b7a prepare installer for medpot 2018-09-09 18:38:47 +00:00
t3chn0m4g3
7c66579baa fix port 2018-09-03 09:29:42 +00:00
listbot
ec1f6664b9 add ftp, ftfp to industrial compose file 2018-08-22 13:54:03 +00:00
t3chn0m4g3
5ce77c6f60 snare tweaking, change ports 2018-08-21 18:30:37 +00:00
t3chn0m4g3
78adc5a0e1 bump snare to 0.3.0 2018-08-02 22:17:03 +00:00
t3chn0m4g3
a5f027e896 update glutton 2018-08-02 14:52:50 +00:00
t3chn0m4g3
1978414ccf Add cyberchef to docker-compose configs / T-Pot flavors 2018-07-31 14:05:57 +00:00
Marco Ochse
9002447181 clean up 2018-06-24 03:41:24 +02:00
Marco Ochse
1dd57d8022 NGINX logs are in /data/nginx/log/
Syslog should be viewed in Cockpit now, storing events of Syslog in ELK
is ineffective
2018-06-24 03:24:51 +02:00
t3chn0m4g3
d6077792b9 continue working on installer
remove portainer
remove wetty
remove netdata
add cockpit
tweak fail2ban for cockpit, sshd, nginx
update logo to 18.10
remove configs with regard to portainer, wetty, netdata
adjust packages for install.sh, preseed
2018-06-23 21:23:33 +00:00
t3chn0m4g3
6b0d07c6bd tweaking 2018-06-14 11:59:07 +00:00