t3chn0m4g3
53afb1ba10
incl. XFF for qhoneypots, some tweaking
2022-02-11 10:32:31 +00:00
t3chn0m4g3
2a4fe20b88
work in progress (map, wordpot)
2022-02-09 19:13:18 +00:00
t3chn0m4g3
278c7aa61a
bump elastic stack to 7.17.0
2022-02-02 22:57:50 +00:00
t3chn0m4g3
12a413b4cb
replace es-head with elasticvue, tweaking
...
es-head does not support building with ARM64 and had to be replaced with the even better elasticvue
elasticvue will now run within the nginx container, freeing some RAM :) on the way
2022-01-27 02:39:23 +00:00
t3chn0m4g3
cfcf870da3
elasticsearch, kibana: prep for multiarch, move to ubuntu
...
heade: alpine 3.15
2022-01-23 21:12:34 +00:00
t3chn0m4g3
a507bc5f39
logstash cleanup, prep for multiarch, move to ubuntu
...
log4pot tweaking
2022-01-23 14:49:07 +00:00
t3chn0m4g3
3524bafda2
Cleanup, Tweaking
...
Remove old Sensor Edition and replace with Pot Edition
Rename Pot Edition to new Sensor Edition
POT is now called SENSOR
2022-01-20 18:26:43 +00:00
t3chn0m4g3
602d1cc673
bump Elastic Stack to 7.16.3, change deprecated fields
2022-01-20 10:32:10 +00:00
t3chn0m4g3
d301cf0447
tweaking, remove honeypy => deprecated
2022-01-17 17:45:03 +00:00
t3chn0m4g3
c611101987
improve nginx logging
2022-01-17 17:15:04 +00:00
t3chn0m4g3
68d6aa4180
fix data fields with regard to the request field, log4pot, nginx
2022-01-17 14:50:50 +00:00
t3chn0m4g3
0e5986d2df
Tweaking
...
Remove Elasticsearch-Curator in packages, configs and references (BREAKING CHANGE)
Add Index Lifecycle Management in favor of elasticsearch-curator
Point all images to 2203 tags
2022-01-14 15:52:08 +00:00
t3chn0m4g3
e7e521edba
tweaking
2022-01-12 01:28:06 +00:00
t3chn0m4g3
7d012726b7
tweaking
2022-01-11 15:43:45 +00:00
t3chn0m4g3
d6ea4cdde2
prep for elk 8.x, pave way for next t-pot release
2022-01-07 18:03:00 +00:00
t3chn0m4g3
fb49a77180
tweaking, json_batch transfer to hive
2022-01-07 15:41:57 +00:00
t3chn0m4g3
467dfae320
cleanup, move to correct folders
2022-01-04 18:35:44 +00:00
t3chn0m4g3
788a4c4f98
prepare for new attack map feature
...
tweaking, cleanup
2022-01-04 16:16:27 +00:00
t3chn0m4g3
68b080a3a8
Work in progress!
...
This is the foundation for the distributed T-Pot feature,
highly work in progress, only works with local docker image builds,
will be available for prod for upcoming T-Pot 22xx.
2022-01-03 18:24:17 +00:00
t3chn0m4g3
ef1a1fa057
Merge branch 'master' of https://github.com/telekom-security/tpotce
2021-12-21 11:37:18 +00:00
t3chn0m4g3
daf41b4b71
tweaking
2021-12-21 11:36:38 +00:00
t3chn0m4g3
aaccb43471
bump elk stack to 7.16.2
...
ELK 7.16.2 includes log4j 2.17.0 to address latest issues
2021-12-20 11:17:18 +00:00
t3chn0m4g3
b0339610a2
Prep for Log4Pot integration
2021-12-16 20:25:40 +00:00
t3chn0m4g3
a98b447556
ELK 7.16.1 fixes log4j vulns.
2021-12-13 15:59:48 +00:00
t3chn0m4g3
b4c1805551
disable log4j lookups
2021-12-13 10:54:07 +00:00
t3chn0m4g3
0ef2e89cac
remove log4j JndiLookup Class
2021-12-13 10:35:22 +00:00
t3chn0m4g3
5f29516197
tweaking
2021-12-08 23:55:13 +00:00
t3chn0m4g3
ce39e1bd4f
logstash logging for honeypots
2021-11-19 23:20:13 +00:00
t3chn0m4g3
c9b909e51d
finetune new honeypots logging
2021-11-02 19:13:28 +00:00
t3chn0m4g3
ea624351b5
finetuning logstash.conf for new honeypots
2021-10-29 16:28:16 +00:00
t3chn0m4g3
c1eb9f7216
logstash parsing for ddospot, hellpot
2021-10-28 18:57:55 +00:00
t3chn0m4g3
1a844d13ba
start integrating new honeypots into ELK
2021-10-27 16:14:52 +00:00
t3chn0m4g3
348a5d572b
bump elastic stack to 7.15.1
2021-10-26 13:56:38 +00:00
t3chn0m4g3
eefd38a335
bump elastic stack to 7.15.0
...
no image upgrade before 7.15.1
2021-09-30 20:40:42 +00:00
t3chn0m4g3
ed0c5aa89f
add logstash-output-gelf, fixes #861
2021-09-15 17:39:04 +00:00
t3chn0m4g3
9de1bdd0b5
tweaking, bump elastic stack to 7.14.1, rebuild dashboards
2021-09-15 15:58:44 +00:00
t3chn0m4g3
06ef8850fe
prep for ELK 7.13.4, start full integration of new honeypots
2021-08-25 15:04:27 +00:00
t3chn0m4g3
4cb84166c5
bump ewsposter to 1.2.0, elk stack to 7.13.2
2021-06-28 16:30:40 +00:00
t3chn0m4g3
f51ab7ec0f
prepare to bump elastic stack to 7.13.1
2021-06-10 17:03:22 +00:00
t3chn0m4g3
de38e5e86f
Rebuild Logstash, Elasticsearch
...
Setting static limits for Elasticsearch / Logstash on Xms, Xmx and Container RAM results in unwanted side effects for some installations. With Elastic supporting dynamic heap management for Java 14+ we now use OpenJDK 16 JRE and as such remove limitations. This should improve stability for T-Pot, provided the minimum requirements will be met.
2021-05-26 11:00:49 +00:00
t3chn0m4g3
0c5ab33b8a
bump elastic stack to 7.12.1
2021-05-17 16:32:03 +00:00
t3chn0m4g3
d5f0ceb15b
push elastic stack to 7.11.1
2021-02-19 10:17:30 +00:00
t3chn0m4g3
80d9efa729
bump elk stack images to alpine 3.13
2021-02-12 13:54:42 +00:00
t3chn0m4g3
e5f29f3c90
bump elk stack to 7.11.0
2021-02-12 13:21:35 +00:00
t3chn0m4g3
af6ce8854d
bump elastic stack to 7.10.1
2020-12-10 15:20:18 +00:00
t3chn0m4g3
f3f9f6ae72
cleanup
2020-12-03 00:01:38 +00:00
t3chn0m4g3
8a7e81815e
prep for Elastic Stack 7.10.0
2020-12-02 22:36:17 +00:00
t3chn0m4g3
e3fda4d464
bump dionaea to 0.9.2
2020-10-28 16:45:53 +00:00
t3chn0m4g3
92925cecbd
bump dicompot to latest master
2020-10-27 21:30:33 +00:00
t3chn0m4g3
f204cdf9b8
bump elk to 7.3
2020-10-27 19:43:32 +00:00