Commit graph

122 commits

Author SHA1 Message Date
t3chn0m4g3
f6a30dd973 update ews.cfg 2018-08-08 11:58:26 +00:00
t3chn0m4g3
3d259bbc34 tanner finetuning 2018-08-08 11:49:32 +00:00
t3chn0m4g3
00e909ea24 bump tanner to 0.6.0 2018-08-07 09:33:38 +00:00
t3chn0m4g3
78adc5a0e1 bump snare to 0.3.0 2018-08-02 22:17:03 +00:00
t3chn0m4g3
a6d996d016 fix kibana ci color for highlighted elements 2018-08-02 17:36:11 +00:00
t3chn0m4g3
a5f027e896 update glutton 2018-08-02 14:52:50 +00:00
t3chn0m4g3
67d5c5a26c get FQDN for ES head from open window 2018-08-01 20:09:05 +00:00
t3chn0m4g3
7945961cee Bump ELK to 6.3.2 2018-07-31 14:31:49 +00:00
t3chn0m4g3
0373d7145d Update Dionaea to version 0.8.0
Thanks to @Dbof for noticing and supplying #222
2018-07-31 13:31:50 +00:00
listbot
d91714cdf2 add cyberchef as tool 2018-07-12 09:03:33 +00:00
t3chn0m4g3
38112755ce Fix ci logo 2018-06-28 12:30:27 +00:00
t3chn0m4g3
00482df95b Bump ELK Stack to 6.3.0 2018-06-26 17:34:14 +00:00
Marco Ochse
b8a650002e
Update favicon 2018-06-26 12:09:23 +02:00
Marco Ochse
804f47f7ab
Fix IPv6 error
fix an error where upstream site is not found while trying to connect with both IPv4 and IPv6. Setting `localhost` to `127.0.0.1` fixes it.
2018-06-26 10:19:35 +02:00
Marco Ochse
b19aa6d5c8
update favicon 2018-06-26 10:09:33 +02:00
Marco Ochse
cd55b3c51f update logfile for tanner in ews 2018-06-24 23:16:19 +02:00
Marco Ochse
1dd57d8022 NGINX logs are in /data/nginx/log/
Syslog should be viewed in Cockpit now, storing events of Syslog in ELK
is ineffective
2018-06-24 03:24:51 +02:00
t3chn0m4g3
a13f06f33d update ews for tanner 2018-06-23 22:10:55 +00:00
t3chn0m4g3
d6077792b9 continue working on installer
remove portainer
remove wetty
remove netdata
add cockpit
tweak fail2ban for cockpit, sshd, nginx
update logo to 18.10
remove configs with regard to portainer, wetty, netdata
adjust packages for install.sh, preseed
2018-06-23 21:23:33 +00:00
Marco Ochse
d047d1edbb
disable 3rd party plugins
At least one of them was corrupt on Github which seems unlikely, hence not trustworthy
2018-06-13 19:20:52 +02:00
Marco Ochse
eb6e877ae4
Clone Dionaea 0.7.0 instead master 2018-06-13 18:51:27 +02:00
Marco Ochse
42577b6016 Editions
start work on new editions
2018-06-07 16:39:13 +02:00
Marco Ochse
09ad1941b7 just a push 2018-06-07 12:38:46 +00:00
Marco Ochse
e901334748 change repo 2018-06-05 13:50:37 +00:00
Marco Ochse
bf6fd94ea9 merge hpfeeds changes from vorband 2018-06-05 14:14:41 +02:00
Marco Ochse
52ecc767f8 performance tweak template 2018-06-04 16:05:22 +00:00
Marco Ochse
650b4a9b51 clean up 2018-06-04 13:45:09 +00:00
Marco Ochse
e8621fbba1 tweaking 2018-06-04 13:43:59 +00:00
Marco Ochse
e211a19c37 change ports, add emu_scripts.yaml, tweaking 2018-06-04 11:29:25 +00:00
Marco Ochse
fbc11fa12c add hpfeeds broker for testing 2018-05-30 15:46:18 +00:00
Marco Ochse
62b02a7500 add hpfeeds support 2018-05-30 11:20:55 +00:00
Marco Ochse
37424eb541 cleanup 2018-05-29 12:06:20 +00:00
Marco Ochse
72313a600d include tanner patterns, tweaking 2018-05-29 12:05:07 +00:00
Marco Ochse
428ee43c18 prepare for tanner 2018-05-28 21:46:51 +00:00
Marco Ochse
cabd5a3941 cleanup 2018-05-28 21:46:26 +00:00
Marco Ochse
a4bfa08393 tweaking 2018-05-28 21:45:43 +00:00
Marco Ochse
5b11952899 cleanup 2018-05-28 16:43:32 +00:00
Marco Ochse
1b0d11177b prepare for snare, tanner 2018-05-28 16:42:39 +00:00
Marco Ochse
4bbc63fd02 begin with hardening, tweaking 2018-05-28 16:36:02 +00:00
Marco Ochse
88e252fbfb tanner, snare, deps 2018-05-26 23:09:31 +00:00
Marco Ochse
1b5e39e448 tweaking 2018-05-25 16:19:15 +00:00
Marco Ochse
b406c9b4e0 include hpfeeds support
thank you @vorband
2018-05-25 16:18:05 +00:00
Marco Ochse
35221f56c9 tweaking 2018-05-23 14:18:46 +00:00
Marco Ochse
2f8cbcb2d1 tweaking 2018-05-23 14:16:37 +00:00
Marco Ochse
e1c806ebe8 tweaking 2018-05-23 14:16:13 +00:00
Marco Ochse
2128c6a2b0 tweaking 2018-05-23 13:30:26 +00:00
Marco Ochse
38fce345cf tweaking
fix condition when no internet connection is available
check internet connection before download of rules and avoid errors
check internet connection before setting up capture filters (with FQDNs, resulted in endless restart of suricata) and unset capture filters if no internet connection is available
2018-05-23 13:02:19 +00:00
Marco Ochse
fbe1fff088 let mailoney run on tcp/25 within container 2018-05-23 07:58:01 +00:00
Marco Ochse
4e8d629b63 tweaking, fix build error 2018-05-19 22:01:03 +00:00
Marco Ochse
a07776d16c tweaking 2018-05-19 21:35:24 +00:00