t3chn0m4g3
2a4fe20b88
work in progress (map, wordpot)
2022-02-09 19:13:18 +00:00
t3chn0m4g3
278c7aa61a
bump elastic stack to 7.17.0
2022-02-02 22:57:50 +00:00
t3chn0m4g3
b37178ba98
tweaking honeysap, rdpy, editions, installer
...
move honeysap, rdpy to deprecated as currently no Py3 version available
remove honeysap, rdpy from editions
adjust installer for running on ARM64 (post-install)
2022-01-31 16:59:36 +00:00
t3chn0m4g3
778c6c6a70
tweak cyberchef size by removing zip
2022-01-30 01:07:12 +00:00
t3chn0m4g3
72289e07d6
tweaking for nginx, cyberchef, elasticvue
...
create builder for cyberchef and elasticvue based on respective masters
builders will build webapps and copy output to nginx html folder as tgz
some tweaking for elasticvue to properly load original favicon
with cyberchef now run as nginx webapp we gain another 40MB of RAM
while webapps will be built on AMD64 all final docker images can now be built as multi arch images for AMD64 and ARM64
2022-01-30 00:48:10 +00:00
t3chn0m4g3
a51744988f
adjust editions for new nginx
2022-01-29 00:45:41 +00:00
t3chn0m4g3
e6f392a098
Tweaking
...
Finalize qhoneypots config, thanks to @giga-a for native JSON logging!
Completely rework T-Pot Landing Page based on Bento (https://github.com/migueravila/Bento ).
New NGINX image is down by 100MB and only uses 3.3 MB of RAM at runtime.
Keep legacy Sensor option (without logstash).
2022-01-29 00:00:29 +00:00
t3chn0m4g3
12a413b4cb
replace es-head with elasticvue, tweaking
...
es-head does not support building with ARM64 and had to be replaced with the even better elasticvue
elasticvue will now run within the nginx container, freeing some RAM :) on the way
2022-01-27 02:39:23 +00:00
t3chn0m4g3
6a277fd1e9
dionaea: adjust for multiarch builds
2022-01-24 01:31:31 +00:00
t3chn0m4g3
cfcf870da3
elasticsearch, kibana: prep for multiarch, move to ubuntu
...
heade: alpine 3.15
2022-01-23 21:12:34 +00:00
t3chn0m4g3
a507bc5f39
logstash cleanup, prep for multiarch, move to ubuntu
...
log4pot tweaking
2022-01-23 14:49:07 +00:00
t3chn0m4g3
ae18cb592e
tweaking, prep for docker buildx
2022-01-22 01:04:21 +00:00
t3chn0m4g3
ef31fc155b
re-add FROMURL example for Suricata in compose files
2022-01-20 18:34:51 +00:00
t3chn0m4g3
3524bafda2
Cleanup, Tweaking
...
Remove old Sensor Edition and replace with Pot Edition
Rename Pot Edition to new Sensor Edition
POT is now called SENSOR
2022-01-20 18:26:43 +00:00
t3chn0m4g3
66b4ef047a
bump tanner to latest master, alpine 3.15
2022-01-20 17:47:29 +00:00
t3chn0m4g3
2586e10285
Bump Mailoney to Alpine 3.15, reduced to Mailoney Code, no PyPi
2022-01-20 16:31:40 +00:00
t3chn0m4g3
602d1cc673
bump Elastic Stack to 7.16.3, change deprecated fields
2022-01-20 10:32:10 +00:00
t3chn0m4g3
22acb6fa84
bump to Alpine 3.15
2022-01-19 00:46:04 +00:00
t3chn0m4g3
2a7ff7b3cb
update Dockerfiles
2022-01-18 01:10:20 +00:00
t3chn0m4g3
889c85e248
update Dockerfiles
2022-01-18 00:50:23 +00:00
t3chn0m4g3
d301cf0447
tweaking, remove honeypy => deprecated
2022-01-17 17:45:03 +00:00
t3chn0m4g3
c611101987
improve nginx logging
2022-01-17 17:15:04 +00:00
t3chn0m4g3
a07918d149
update log4pot to the latest master
2022-01-17 14:52:32 +00:00
t3chn0m4g3
68d6aa4180
fix data fields with regard to the request field, log4pot, nginx
2022-01-17 14:50:50 +00:00
t3chn0m4g3
0e5986d2df
Tweaking
...
Remove Elasticsearch-Curator in packages, configs and references (BREAKING CHANGE)
Add Index Lifecycle Management in favor of elasticsearch-curator
Point all images to 2203 tags
2022-01-14 15:52:08 +00:00
t3chn0m4g3
86479db8af
fix packaging
2022-01-14 13:05:05 +00:00
t3chn0m4g3
eca395a770
fix packaging
2022-01-14 12:54:53 +00:00
t3chn0m4g3
3792a5f6a1
fix packaging
2022-01-14 12:51:15 +00:00
t3chn0m4g3
e7e521edba
tweaking
2022-01-12 01:28:06 +00:00
t3chn0m4g3
7d012726b7
tweaking
2022-01-11 15:43:45 +00:00
t3chn0m4g3
d6ea4cdde2
prep for elk 8.x, pave way for next t-pot release
2022-01-07 18:03:00 +00:00
t3chn0m4g3
fb49a77180
tweaking, json_batch transfer to hive
2022-01-07 15:41:57 +00:00
t3chn0m4g3
467dfae320
cleanup, move to correct folders
2022-01-04 18:35:44 +00:00
t3chn0m4g3
788a4c4f98
prepare for new attack map feature
...
tweaking, cleanup
2022-01-04 16:16:27 +00:00
t3chn0m4g3
68b080a3a8
Work in progress!
...
This is the foundation for the distributed T-Pot feature,
highly work in progress, only works with local docker image builds,
will be available for prod for upcoming T-Pot 22xx.
2022-01-03 18:24:17 +00:00
t3chn0m4g3
ef1a1fa057
Merge branch 'master' of https://github.com/telekom-security/tpotce
2021-12-21 11:37:18 +00:00
t3chn0m4g3
daf41b4b71
tweaking
2021-12-21 11:36:38 +00:00
t3chn0m4g3
0bca794fe7
bump log4pot to latest master
...
rebuild on ubuntu for payload download support
2021-12-20 18:40:38 +00:00
t3chn0m4g3
aaccb43471
bump elk stack to 7.16.2
...
ELK 7.16.2 includes log4j 2.17.0 to address latest issues
2021-12-20 11:17:18 +00:00
t3chn0m4g3
b0339610a2
Prep for Log4Pot integration
2021-12-16 20:25:40 +00:00
t3chn0m4g3
a98b447556
ELK 7.16.1 fixes log4j vulns.
2021-12-13 15:59:48 +00:00
t3chn0m4g3
b4c1805551
disable log4j lookups
2021-12-13 10:54:07 +00:00
t3chn0m4g3
0ef2e89cac
remove log4j JndiLookup Class
2021-12-13 10:35:22 +00:00
t3chn0m4g3
5f29516197
tweaking
2021-12-08 23:55:13 +00:00
Marco Ochse
ff1c12e848
Disable FATT submissions for now
2021-11-30 16:04:58 +01:00
t3chn0m4g3
ce39e1bd4f
logstash logging for honeypots
2021-11-19 23:20:13 +00:00
t3chn0m4g3
6c155ad87f
add qeeqbox honeypots
2021-11-18 19:55:44 +00:00
t3chn0m4g3
81b8242c68
bump ewsposter to latest master
2021-11-18 13:48:02 +00:00
t3chn0m4g3
d2cbf6ebbc
build fix for tanner
2021-11-18 13:39:05 +00:00
Marco Ochse
591be0791b
Fixes #939
...
https://stackoverflow.com/questions/28785383/how-to-disable-persistence-with-redis
2021-11-18 13:05:01 +01:00