Andrea De Pasquale
87a27e4f2b
Suricata: use suricata-update for rule management
...
As a bonus we can now run "suricata-update" using docker-exec,
triggering both a rule update and a Suricata rule reload.
2020-11-30 17:56:14 +01:00
Marco Ochse
2ecef8c607
enable MQTT
...
as eagle eyed by @adepasquale
2020-11-27 19:07:12 +01:00
Marco Ochse
d992a25a0a
Merge pull request #726 from adepasquale/suricata-yaml-6.0.x
...
Suricata: update suricata.yaml config to 6.0.x
2020-11-27 18:55:57 +01:00
Andrea De Pasquale
73a5847753
Suricata: update suricata.yaml config to 6.0.x
...
Merge in the latest updates from suricata-6.0.x while at the same time
keeping the custom T-Pot configuration.
https://github.com/OISF/suricata/blob/suricata-6.0.0/suricata.yaml.in
2020-11-26 19:16:01 +01:00
Marco Ochse
c976aea73e
Merge pull request #725 from adepasquale/suricata-yaml-5.x
...
Suricata: update suricata.yaml config to 5.x
2020-11-26 16:23:50 +01:00
t3chn0m4g3
4ada38988c
bump cowrie to 2.2.0
2020-11-26 08:17:09 +00:00
Andrea De Pasquale
0010f99662
Suricata: disable eve.stats since it's unused
...
Prevent the error below by disabling stats globally and in eve-log:
<Error> - [ERRCODE: SC_ERR_STATS_LOG_GENERIC(278)] - eve.stats: stats are disabled globally: set stats.enabled to true.
2020-11-25 17:07:49 +01:00
Andrea De Pasquale
e2f76c44cb
Suricata: update suricata.yaml config to 5.x
...
Merge in the latest updates from suricata-5.x while at the same time
keeping the custom T-Pot configuration.
https://github.com/OISF/suricata/blob/master-5.0.x/suricata.yaml.in
2020-11-25 15:51:41 +01:00
t3chn0m4g3
e26853c7fa
bump suricata to 5.0.4
2020-10-28 17:53:23 +00:00
t3chn0m4g3
d64cbe6741
bump ipphoney to latest master
2020-10-28 17:34:28 +00:00
t3chn0m4g3
c3809b5a98
bump heralding to latest master
2020-10-28 17:27:09 +00:00
t3chn0m4g3
a3d40cc57c
bump spiderfoot to 3.2.1
2020-10-28 17:08:55 +00:00
t3chn0m4g3
e3fda4d464
bump dionaea to 0.9.2
2020-10-28 16:45:53 +00:00
t3chn0m4g3
4bf245d13b
bump conpot to latest master
2020-10-28 13:56:52 +00:00
t3chn0m4g3
92925cecbd
bump dicompot to latest master
2020-10-27 21:30:33 +00:00
t3chn0m4g3
f204cdf9b8
bump elk to 7.3
2020-10-27 19:43:32 +00:00
t3chn0m4g3
ff4a394e3b
reverting elk to 7.9.1
2020-10-15 12:24:46 +00:00
Marco Ochse
ce7b79b71a
Merge pull request #707 from brianlechthaler/patch-3
...
Bump Elastic dependencies to 7.9.2
2020-10-15 13:37:11 +02:00
t3chn0m4g3
b28cc2edd0
prepare for new ewsposter
2020-10-15 09:14:30 +00:00
Brian Lechthaler
84a741ec64
IMPORTANT: Fix Node Version
...
Bump node version to `10.22.1-alpine`
**KIBANA WILL NOT WORK WITHOUT THIS**
2020-10-07 13:53:21 -07:00
Marco Ochse
6b37578d8d
Merge pull request #706 from brianlechthaler/patch-2
...
Debian 10.6 AMI + Add AWS Regions
2020-10-07 14:28:19 +02:00
Brian Lechthaler
d351a89096
Bump Kibana version to 7.9.2
2020-10-04 18:05:16 -07:00
Brian Lechthaler
488da48df7
Bump Logstash version to 7.9.2
2020-10-04 18:04:15 -07:00
Brian Lechthaler
85da099cd0
Bump Elasticsearch to 7.9.2
2020-10-04 18:03:00 -07:00
Brian Lechthaler
bd8a9ca92d
Debian 10.6 AMI + Add AWS Regions
...
# Changes:
1) 🇿🇦 Add AWS Capetown, South Africa Region (`af-south-1`)
2) 🇮🇹 Add AWS Milan, Italy Region (`eu-south-1`)
3) Bump all AMIs to Debian Buster 10.6
# References:
1) Debian 10 (Buster) Wiki Article on Official EC2 Images: https://wiki.debian.org/Cloud/AmazonEC2Image/Buster?action=recall&rev=16
2) For information on Debian 10.6, see: https://www.debian.org/News/2020/20200926
3) Official AWS Documentation on Regions and Zones can be found here: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-regions-availability-zones.html
2020-10-03 22:22:57 -07:00
Marco Ochse
1afbb89ef4
Merge pull request #691 from brianlechthaler/patch-1
...
Update Suricata Capture Filter for New Docker Repo
2020-09-08 20:08:28 +02:00
Brian Lechthaler
b1d8e293de
add DockerHub back in cap filter
...
see https://github.com/telekom-security/tpotce/pull/691#issuecomment-688648225
2020-09-08 10:45:58 -07:00
Brian Lechthaler
7fdf9edb60
Update Suricata Capture Filter for New Docker Repo
2020-09-07 19:57:15 -07:00
t3chn0m4g3
0e7abb8d2c
restore mibfix for conpot
2020-09-07 15:46:52 +00:00
Marco Ochse
2bac239763
fix version string for update check
2020-09-04 18:59:15 +02:00
Marco Ochse
a90f135f06
Merge pull request #690 from telekom-security/ghcr
...
Move to GitHub Container Registry, Cleanup, Bump ELK stack to 7.9.1
2020-09-04 18:55:54 +02:00
Marco Ochse
adee659baa
Add files via upload
2020-09-04 18:54:40 +02:00
t3chn0m4g3
1e8f6305c9
adjust changelog
2020-09-04 16:40:51 +00:00
t3chn0m4g3
38b792a06e
prepare ghcr for merge
2020-09-04 16:27:05 +00:00
t3chn0m4g3
1ee9c29805
set new container registry, point installer to branch
2020-09-04 13:29:14 +00:00
t3chn0m4g3
2e5639a50b
fix links
2020-09-04 13:01:21 +00:00
listbot
47dca8b835
continue pin / prep images ghcr
2020-09-04 12:37:28 +00:00
listbot
1ac79d6be7
begin prep for move to GitHub Container Registry
...
Start pinning Dockerfiles to specific releases / commits
2020-09-02 15:18:32 +00:00
Marco Ochse
9a7f55bb52
Merge pull request #687 from shaderecker/terraform-otc
...
Update Terraform config for 0.13
2020-08-26 12:14:17 +02:00
Sebastian Haderecker
42852a85ea
Update README.md
2020-08-26 11:46:16 +02:00
Sebastian Haderecker
c33229b53a
Fix variable typo
2020-08-26 11:45:17 +02:00
Sebastian Haderecker
840662da48
Update OTC Debian 10 base image id
2020-08-26 11:21:55 +02:00
Sebastian Haderecker
d8f14d9c9f
AWS: Update required_providers for Terraform 0.13
2020-08-26 11:04:34 +02:00
Sebastian Haderecker
72e4134c86
OTC: Update required_providers for Terraform 0.13
2020-08-26 10:59:39 +02:00
t3chn0m4g3
5b1e07b9c8
finalize objects for ipphoney
2020-08-25 16:12:29 +00:00
t3chn0m4g3
2be185a371
add kibana objects for ipphoney
2020-08-25 15:08:28 +00:00
t3chn0m4g3
54a6a944aa
prep for ipphoney
2020-08-25 12:25:59 +00:00
t3chn0m4g3
b86d2c715b
prep for ipphoney
2020-08-24 21:36:08 +00:00
t3chn0m4g3
8f06b5b499
start prepping for ipphoney
2020-08-24 15:55:50 +00:00
t3chn0m4g3
6ec5a04802
fix deps issue with conpot
2020-08-24 15:55:10 +00:00
