Commit graph

484 commits

Author SHA1 Message Date
t3chn0m4g3
12a413b4cb replace es-head with elasticvue, tweaking
es-head does not support building with ARM64 and had to be replaced with the even better elasticvue
elasticvue will now run within the nginx container, freeing some RAM :) on the way
2022-01-27 02:39:23 +00:00
t3chn0m4g3
6a277fd1e9 dionaea: adjust for multiarch builds 2022-01-24 01:31:31 +00:00
t3chn0m4g3
cfcf870da3 elasticsearch, kibana: prep for multiarch, move to ubuntu
heade: alpine 3.15
2022-01-23 21:12:34 +00:00
t3chn0m4g3
a507bc5f39 logstash cleanup, prep for multiarch, move to ubuntu
log4pot tweaking
2022-01-23 14:49:07 +00:00
t3chn0m4g3
ae18cb592e tweaking, prep for docker buildx 2022-01-22 01:04:21 +00:00
t3chn0m4g3
ef31fc155b re-add FROMURL example for Suricata in compose files 2022-01-20 18:34:51 +00:00
t3chn0m4g3
3524bafda2 Cleanup, Tweaking
Remove old Sensor Edition and replace with Pot Edition
Rename Pot Edition to new Sensor Edition
POT is now called SENSOR
2022-01-20 18:26:43 +00:00
t3chn0m4g3
66b4ef047a bump tanner to latest master, alpine 3.15 2022-01-20 17:47:29 +00:00
t3chn0m4g3
2586e10285 Bump Mailoney to Alpine 3.15, reduced to Mailoney Code, no PyPi 2022-01-20 16:31:40 +00:00
t3chn0m4g3
602d1cc673 bump Elastic Stack to 7.16.3, change deprecated fields 2022-01-20 10:32:10 +00:00
t3chn0m4g3
22acb6fa84 bump to Alpine 3.15 2022-01-19 00:46:04 +00:00
t3chn0m4g3
2a7ff7b3cb update Dockerfiles 2022-01-18 01:10:20 +00:00
t3chn0m4g3
889c85e248 update Dockerfiles 2022-01-18 00:50:23 +00:00
t3chn0m4g3
d301cf0447 tweaking, remove honeypy => deprecated 2022-01-17 17:45:03 +00:00
t3chn0m4g3
c611101987 improve nginx logging 2022-01-17 17:15:04 +00:00
t3chn0m4g3
a07918d149 update log4pot to the latest master 2022-01-17 14:52:32 +00:00
t3chn0m4g3
68d6aa4180 fix data fields with regard to the request field, log4pot, nginx 2022-01-17 14:50:50 +00:00
t3chn0m4g3
0e5986d2df Tweaking
Remove Elasticsearch-Curator in packages, configs and references (BREAKING CHANGE)
Add Index Lifecycle Management in favor of elasticsearch-curator
Point all images to 2203 tags
2022-01-14 15:52:08 +00:00
t3chn0m4g3
86479db8af fix packaging 2022-01-14 13:05:05 +00:00
t3chn0m4g3
eca395a770 fix packaging 2022-01-14 12:54:53 +00:00
t3chn0m4g3
3792a5f6a1 fix packaging 2022-01-14 12:51:15 +00:00
t3chn0m4g3
e7e521edba tweaking 2022-01-12 01:28:06 +00:00
t3chn0m4g3
7d012726b7 tweaking 2022-01-11 15:43:45 +00:00
t3chn0m4g3
d6ea4cdde2 prep for elk 8.x, pave way for next t-pot release 2022-01-07 18:03:00 +00:00
t3chn0m4g3
fb49a77180 tweaking, json_batch transfer to hive 2022-01-07 15:41:57 +00:00
t3chn0m4g3
467dfae320 cleanup, move to correct folders 2022-01-04 18:35:44 +00:00
t3chn0m4g3
788a4c4f98 prepare for new attack map feature
tweaking, cleanup
2022-01-04 16:16:27 +00:00
t3chn0m4g3
68b080a3a8 Work in progress!
This is the foundation for the distributed T-Pot feature,
highly work in progress, only works with local docker image builds,
will be available for prod for upcoming T-Pot 22xx.
2022-01-03 18:24:17 +00:00
t3chn0m4g3
ef1a1fa057 Merge branch 'master' of https://github.com/telekom-security/tpotce 2021-12-21 11:37:18 +00:00
t3chn0m4g3
daf41b4b71 tweaking 2021-12-21 11:36:38 +00:00
t3chn0m4g3
0bca794fe7 bump log4pot to latest master
rebuild on ubuntu for payload download support
2021-12-20 18:40:38 +00:00
t3chn0m4g3
aaccb43471 bump elk stack to 7.16.2
ELK 7.16.2 includes log4j 2.17.0 to address latest issues
2021-12-20 11:17:18 +00:00
t3chn0m4g3
b0339610a2 Prep for Log4Pot integration 2021-12-16 20:25:40 +00:00
t3chn0m4g3
a98b447556 ELK 7.16.1 fixes log4j vulns. 2021-12-13 15:59:48 +00:00
t3chn0m4g3
b4c1805551 disable log4j lookups 2021-12-13 10:54:07 +00:00
t3chn0m4g3
0ef2e89cac remove log4j JndiLookup Class 2021-12-13 10:35:22 +00:00
t3chn0m4g3
5f29516197 tweaking 2021-12-08 23:55:13 +00:00
Marco Ochse
ff1c12e848
Disable FATT submissions for now 2021-11-30 16:04:58 +01:00
t3chn0m4g3
ce39e1bd4f logstash logging for honeypots 2021-11-19 23:20:13 +00:00
t3chn0m4g3
6c155ad87f add qeeqbox honeypots 2021-11-18 19:55:44 +00:00
t3chn0m4g3
81b8242c68 bump ewsposter to latest master 2021-11-18 13:48:02 +00:00
t3chn0m4g3
d2cbf6ebbc build fix for tanner 2021-11-18 13:39:05 +00:00
Marco Ochse
591be0791b
Fixes
https://stackoverflow.com/questions/28785383/how-to-disable-persistence-with-redis
2021-11-18 13:05:01 +01:00
t3chn0m4g3
adee51bee5 bump heralding to latest master 2021-11-16 18:23:25 +00:00
t3chn0m4g3
b214db6e9d bump cowrie to 2.3.0, ewsposter to 1.21 2021-11-05 17:43:47 +00:00
t3chn0m4g3
c9b909e51d finetune new honeypots logging 2021-11-02 19:13:28 +00:00
t3chn0m4g3
db74c610ad bump hellpot to 0.3 and train config for CVE-2021-39341 2021-11-01 13:36:44 +00:00
t3chn0m4g3
ea624351b5 finetuning logstash.conf for new honeypots 2021-10-29 16:28:16 +00:00
t3chn0m4g3
c1eb9f7216 logstash parsing for ddospot, hellpot 2021-10-28 18:57:55 +00:00
t3chn0m4g3
1a844d13ba start integrating new honeypots into ELK 2021-10-27 16:14:52 +00:00