Andrea De Pasquale
87a27e4f2b
Suricata: use suricata-update for rule management
...
As a bonus we can now run "suricata-update" using docker-exec,
triggering both a rule update and a Suricata rule reload.
2020-11-30 17:56:14 +01:00
Marco Ochse
2ecef8c607
enable MQTT
...
as eagle eyed by @adepasquale
2020-11-27 19:07:12 +01:00
Andrea De Pasquale
73a5847753
Suricata: update suricata.yaml config to 6.0.x
...
Merge in the latest updates from suricata-6.0.x while at the same time
keeping the custom T-Pot configuration.
https://github.com/OISF/suricata/blob/suricata-6.0.0/suricata.yaml.in
2020-11-26 19:16:01 +01:00
Marco Ochse
c976aea73e
Merge pull request #725 from adepasquale/suricata-yaml-5.x
...
Suricata: update suricata.yaml config to 5.x
2020-11-26 16:23:50 +01:00
t3chn0m4g3
4ada38988c
bump cowrie to 2.2.0
2020-11-26 08:17:09 +00:00
Andrea De Pasquale
0010f99662
Suricata: disable eve.stats since it's unused
...
Prevent the error below by disabling stats globally and in eve-log:
<Error> - [ERRCODE: SC_ERR_STATS_LOG_GENERIC(278)] - eve.stats: stats are disabled globally: set stats.enabled to true.
2020-11-25 17:07:49 +01:00
Andrea De Pasquale
e2f76c44cb
Suricata: update suricata.yaml config to 5.x
...
Merge in the latest updates from suricata-5.x while at the same time
keeping the custom T-Pot configuration.
https://github.com/OISF/suricata/blob/master-5.0.x/suricata.yaml.in
2020-11-25 15:51:41 +01:00
t3chn0m4g3
e26853c7fa
bump suricata to 5.0.4
2020-10-28 17:53:23 +00:00
t3chn0m4g3
d64cbe6741
bump ipphoney to latest master
2020-10-28 17:34:28 +00:00
t3chn0m4g3
c3809b5a98
bump heralding to latest master
2020-10-28 17:27:09 +00:00
t3chn0m4g3
a3d40cc57c
bump spiderfoot to 3.2.1
2020-10-28 17:08:55 +00:00
t3chn0m4g3
e3fda4d464
bump dionaea to 0.9.2
2020-10-28 16:45:53 +00:00
t3chn0m4g3
4bf245d13b
bump conpot to latest master
2020-10-28 13:56:52 +00:00
t3chn0m4g3
92925cecbd
bump dicompot to latest master
2020-10-27 21:30:33 +00:00
t3chn0m4g3
f204cdf9b8
bump elk to 7.3
2020-10-27 19:43:32 +00:00
t3chn0m4g3
ff4a394e3b
reverting elk to 7.9.1
2020-10-15 12:24:46 +00:00
Marco Ochse
ce7b79b71a
Merge pull request #707 from brianlechthaler/patch-3
...
Bump Elastic dependencies to 7.9.2
2020-10-15 13:37:11 +02:00
t3chn0m4g3
b28cc2edd0
prepare for new ewsposter
2020-10-15 09:14:30 +00:00
Brian Lechthaler
84a741ec64
IMPORTANT: Fix Node Version
...
Bump node version to `10.22.1-alpine`
**KIBANA WILL NOT WORK WITHOUT THIS**
2020-10-07 13:53:21 -07:00
Brian Lechthaler
d351a89096
Bump Kibana version to 7.9.2
2020-10-04 18:05:16 -07:00
Brian Lechthaler
488da48df7
Bump Logstash version to 7.9.2
2020-10-04 18:04:15 -07:00
Brian Lechthaler
85da099cd0
Bump Elasticsearch to 7.9.2
2020-10-04 18:03:00 -07:00
Brian Lechthaler
b1d8e293de
add DockerHub back in cap filter
...
see https://github.com/telekom-security/tpotce/pull/691#issuecomment-688648225
2020-09-08 10:45:58 -07:00
Brian Lechthaler
7fdf9edb60
Update Suricata Capture Filter for New Docker Repo
2020-09-07 19:57:15 -07:00
t3chn0m4g3
0e7abb8d2c
restore mibfix for conpot
2020-09-07 15:46:52 +00:00
t3chn0m4g3
1ee9c29805
set new container registry, point installer to branch
2020-09-04 13:29:14 +00:00
t3chn0m4g3
2e5639a50b
fix links
2020-09-04 13:01:21 +00:00
listbot
47dca8b835
continue pin / prep images ghcr
2020-09-04 12:37:28 +00:00
listbot
1ac79d6be7
begin prep for move to GitHub Container Registry
...
Start pinning Dockerfiles to specific releases / commits
2020-09-02 15:18:32 +00:00
t3chn0m4g3
54a6a944aa
prep for ipphoney
2020-08-25 12:25:59 +00:00
t3chn0m4g3
b86d2c715b
prep for ipphoney
2020-08-24 21:36:08 +00:00
t3chn0m4g3
8f06b5b499
start prepping for ipphoney
2020-08-24 15:55:50 +00:00
t3chn0m4g3
6ec5a04802
fix deps issue with conpot
2020-08-24 15:55:10 +00:00
t3chn0m4g3
5080151b7c
prep for elk 7.9
2020-08-24 10:35:46 +00:00
t3chn0m4g3
c1f7146800
prep elk stack for 7.9.0
2020-08-20 15:03:16 +00:00
t3chn0m4g3
743616fa09
update conpot to latest working master
2020-08-13 16:30:37 +00:00
t3chn0m4g3
6e18b6f660
bump elasticpot to latest master
2020-08-13 10:37:03 +00:00
t3chn0m4g3
50d67fc286
bump spiderfoot to 3.1 final
...
Fix Spiderfoot issue not showing current scan
2020-08-13 09:06:49 +00:00
t3chn0m4g3
c28642932a
bump elk stack to 7.8.1
2020-08-13 08:34:44 +00:00
t3chn0m4g3
8af45c9440
prevent cowrie from unwanted log rotation
2020-07-07 00:00:57 +00:00
t3chn0m4g3
6d29f504df
provide fix for #669
2020-07-06 23:30:11 +00:00
t3chn0m4g3
618ee3c6e9
tweaking
...
add kibana export / import config function
ewsposter remove transmitting old elasticpot data (need update)
final export of all objects
2020-06-29 10:45:33 +00:00
t3chn0m4g3
3a418534d8
tweaking
...
random reboot times for crontab
remix compose files
some tweaking
2020-06-28 20:03:14 +00:00
t3chn0m4g3
4e6510b5c7
dicompot tweaking
2020-06-27 00:37:12 +00:00
t3chn0m4g3
16a7cdb975
tweaking
...
Update logstash config for new Dicompot fields
Revert Dionaea back to 0.8.0, latest master was unstable
2020-06-26 23:48:48 +00:00
t3chn0m4g3
0031980416
cleanup and prepare for docker image rebuilds
2020-06-26 14:34:05 +00:00
t3chn0m4g3
6a98496e8c
cleanup and prepare for docker image rebuilds
2020-06-25 22:58:23 +00:00
t3chn0m4g3
ec8f5d9b66
cleanup and prepare for docker image rebuilds
2020-06-25 16:14:37 +00:00
t3chn0m4g3
238a08b055
tweaking
...
cleanup index-pattern
add dicompot log to logstash
2020-06-24 13:21:29 +00:00
t3chn0m4g3
99d8cf9b32
fix for query fields
2020-06-24 10:22:09 +00:00