Alex-Devera/tpotce
1
0
Fork 0
mirror of https://github.com/telekom-security/tpotce.git synced 2025-10-31 04:22:52 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2
2117 commits 9 branches 18 tags 393 MiB
Commit graph

110 commits

Author SHA1 Message Date
t3chn0m4g3
b221a9d96e Disable Scalable Vector Engine (XX:UseSVE=0) to fix issues on macOS and other ARM platforms 
https://github.com/elastic/elasticsearch/issues/118583
 2025-01-06 15:50:08 +01:00
t3chn0m4g3
663b509e90 go-pot: 
- remove conflicting field ("type")
- ranme duration => session_duration
 2024-12-09 19:44:15 +01:00
t3chn0m4g3
ef8e71007c update go-pot to latest master 
tweaking
 2024-11-29 14:44:23 +01:00
t3chn0m4g3
817fac6b45 add h0neytr4p honeypot 2024-11-12 21:51:39 +01:00
t3chn0m4g3
05461d6925 Begin integration of honeyaml 2024-10-18 21:59:29 +02:00
t3chn0m4g3
c7e6f5a66f Finalize Miniprint integration, tweaking 2024-10-16 14:14:22 +02:00
t3chn0m4g3
9b46b0120a Add go-pot honeypot 2024-10-11 20:43:08 +02:00
t3chn0m4g3
b66e482837 Continue working on Galah 2024-09-24 16:13:16 +02:00
t3chn0m4g3
429d74472c Add Beelzebub 2024-09-04 21:45:00 +02:00
Marco Ochse
a510e28ef1 Include config option to disable SSL verification 
Adjust README accordingly
Fixes #1543
 2024-06-04 15:33:28 +02:00
t3chn0m4g3
540d5574d1 cleanup, tweaking, updating 
make tpotinit aware of sigterm events to unload blackhole routes, firewall rules
fixes #1204 where citrixhoneypot logs use logs instead of log folder
bump ELK stack to 8.12.2
add wordpot logs to logstash pipeline
bump t-pot attackmap to 2.2.0, alpine 3.19
 2024-03-12 17:03:43 +01:00
t3chn0m4g3
1da37b5f85 re-implement distributed feature, without ssh 
add sensor compose file
add distributed option to tpot config
housekeeping / cleanup
 2024-01-05 20:19:50 +01:00
t3chn0m4g3
c1808161e4 fixes #1346 2023-06-07 05:54:17 +00:00
t3chn0m4g3
f438be7e27 Allow for automatic geoip db downloads 2023-05-07 18:10:23 +02:00
t3chn0m4g3
efd5f4c54c fixes #1320 2023-05-03 22:01:36 +00:00
t3chn0m4g3
35188ef28e add option to retrieve ENVs from file 2023-05-02 13:11:05 +02:00
t3chn0m4g3
2641d1e743 bump elastic stack to 8.4.3 2022-11-02 16:37:01 +00:00
t3chn0m4g3
f13d08287f prep for elk 8.1.2 2022-04-15 13:11:25 +00:00
Marco Ochse
c2aa0af2f3
Merge branch 'master' into 22.x 2022-04-11 16:47:44 +02:00
t3chn0m4g3
5f18f7f17f finetune logstash image and compose settings 2022-03-31 14:46:56 +00:00
t3chn0m4g3
9705538dba fix typo 2022-03-30 18:00:15 +00:00
t3chn0m4g3
22276d1cc6 fix permissions for distributed setup 2022-03-30 15:53:08 +00:00
t3chn0m4g3
e2752458d4 bump elk to 7.17.0 to support 8.0.1 in 22.x 2022-03-18 16:23:27 +00:00
t3chn0m4g3
5237215bf0 tweaking, add sentrypeer to logstash config 2022-02-24 17:39:57 +00:00
t3chn0m4g3
656c99446e fix template 2022-02-20 16:38:15 +00:00
t3chn0m4g3
a73c4b67d9 reduce index refresh to 1s 2022-02-18 19:55:31 +00:00
t3chn0m4g3
7ee263e8e8 bump elastic stack to 8.0.0 2022-02-16 02:55:20 +00:00
t3chn0m4g3
278c7aa61a bump elastic stack to 7.17.0 2022-02-02 22:57:50 +00:00
t3chn0m4g3
a507bc5f39 logstash cleanup, prep for multiarch, move to ubuntu 
log4pot tweaking
 2022-01-23 14:49:07 +00:00
t3chn0m4g3
3524bafda2 Cleanup, Tweaking 
Remove old Sensor Edition and replace with Pot Edition
Rename Pot Edition to new Sensor Edition
POT is now called SENSOR
 2022-01-20 18:26:43 +00:00
t3chn0m4g3
602d1cc673 bump Elastic Stack to 7.16.3, change deprecated fields 2022-01-20 10:32:10 +00:00
t3chn0m4g3
d301cf0447 tweaking, remove honeypy => deprecated 2022-01-17 17:45:03 +00:00
t3chn0m4g3
c611101987 improve nginx logging 2022-01-17 17:15:04 +00:00
Marco Ochse
cac7cdcec6 fix data fields with regard to the request field, log4pot, nginx 2022-01-17 17:10:48 +01:00
t3chn0m4g3
68d6aa4180 fix data fields with regard to the request field, log4pot, nginx 2022-01-17 14:50:50 +00:00
t3chn0m4g3
0e5986d2df Tweaking 
Remove Elasticsearch-Curator in packages, configs and references (BREAKING CHANGE)
Add Index Lifecycle Management in favor of elasticsearch-curator
Point all images to 2203 tags
 2022-01-14 15:52:08 +00:00
t3chn0m4g3
fb49a77180 tweaking, json_batch transfer to hive 2022-01-07 15:41:57 +00:00
t3chn0m4g3
788a4c4f98 prepare for new attack map feature 
tweaking, cleanup
 2022-01-04 16:16:27 +00:00
t3chn0m4g3
68b080a3a8 Work in progress! 
This is the foundation for the distributed T-Pot feature,
highly work in progress, only works with local docker image builds,
will be available for prod for upcoming T-Pot 22xx.
 2022-01-03 18:24:17 +00:00
t3chn0m4g3
ef1a1fa057 Merge branch 'master' of https://github.com/telekom-security/tpotce 2021-12-21 11:37:18 +00:00
t3chn0m4g3
daf41b4b71 tweaking 2021-12-21 11:36:38 +00:00
t3chn0m4g3
aaccb43471 bump elk stack to 7.16.2 
ELK 7.16.2 includes log4j 2.17.0 to address latest issues
 2021-12-20 11:17:18 +00:00
t3chn0m4g3
b0339610a2 Prep for Log4Pot integration 2021-12-16 20:25:40 +00:00
t3chn0m4g3
a98b447556 ELK 7.16.1 fixes log4j vulns. 2021-12-13 15:59:48 +00:00
t3chn0m4g3
5f29516197 tweaking 2021-12-08 23:55:13 +00:00
t3chn0m4g3
ce39e1bd4f logstash logging for honeypots 2021-11-19 23:20:13 +00:00
t3chn0m4g3
c9b909e51d finetune new honeypots logging 2021-11-02 19:13:28 +00:00
t3chn0m4g3
ea624351b5 finetuning logstash.conf for new honeypots 2021-10-29 16:28:16 +00:00
t3chn0m4g3
c1eb9f7216 logstash parsing for ddospot, hellpot 2021-10-28 18:57:55 +00:00
t3chn0m4g3
1a844d13ba start integrating new honeypots into ELK 2021-10-27 16:14:52 +00:00