t3chn0m4g3
fa0fdbb579
prepare for ELK migration to 7.x
2020-01-29 14:21:40 +00:00
t3chn0m4g3
33222a92b6
finish heimdall integration
2020-01-27 17:03:44 +00:00
t3chn0m4g3
62b519999e
tweaking
2020-01-24 15:38:00 +00:00
t3chn0m4g3
8b19228d99
tweaking heimdall, read only for now
2020-01-24 15:16:25 +00:00
t3chn0m4g3
2d16a9c9f6
tweaking new landing page
2020-01-24 14:14:09 +00:00
t3chn0m4g3
95a075e764
start working on new landing page
2020-01-24 02:21:33 +00:00
pisces-period
dc75b5567a
make Dockerfile compatible with any Python version
...
adding a temporary variable to store the current (updated) version of Python, thus fixing the situation where the version is != 3.7 (e.g. Alpine python package at version 3.8.1-r1), causing lines 39-41 to break in the original code (install path is hard-coded at 3.7).
2020-01-23 17:42:48 +01:00
t3chn0m4g3
f110eb08b0
prepare for mailoney json logging
2020-01-22 12:17:30 +00:00
t3chn0m4g3
1d0aad3b34
tweak logstash.conf for citrixhoneypot
2020-01-16 18:04:29 +00:00
t3chn0m4g3
a6ed6613a5
prepare citrixhoneypot for ELK integration
2020-01-16 15:13:58 +00:00
t3chn0m4g3
a953542f8f
rebase citrixhoneypot
2020-01-16 10:29:58 +00:00
t3chn0m4g3
be3e998a92
prepare citrixhoneypot for JSON logging
2020-01-15 13:59:11 +00:00
t3chn0m4g3
8a844e6dd3
prepare for CitrixHoneypot
2020-01-15 12:14:23 +00:00
t3chn0m4g3
755cbb77db
prepare for citrixhoneypot
2020-01-15 10:37:48 +00:00
t3chn0m4g3
2ed0f939d1
rebuild, tweak spiderfoot
2020-01-03 17:04:18 +00:00
t3chn0m4g3
af3ef271d4
rebuild cyberchef
2020-01-03 16:25:33 +00:00
t3chn0m4g3
3713139fc6
rebuild snare, tanner
2020-01-03 14:06:29 +00:00
t3chn0m4g3
0928e37326
rebuild Dionaea, Heralding
2020-01-02 17:37:08 +00:00
t3chn0m4g3
7c5fc000c0
rebuild fatt
2019-12-27 20:52:23 +00:00
t3chn0m4g3
64628c1293
rebuild rdpy
2019-12-27 20:09:15 +00:00
t3chn0m4g3
29d223865f
tweaking, rebuild honeypy
2019-12-27 19:58:22 +00:00
t3chn0m4g3
1442a257e5
conpot tweaking
2019-12-27 18:34:13 +00:00
t3chn0m4g3
a1d903db01
bump conpot to latest master
2019-12-27 16:21:12 +00:00
t3chn0m4g3
02bdc8194a
bump adbhoney to latest master with py3 support
2019-11-21 13:56:38 +00:00
t3chn0m4g3
78135df9e7
Bump Suricata to 5.0.0
2019-10-22 15:20:23 +00:00
t3chn0m4g3
3d85ca94f1
bump cowrie to v2.0.0
2019-10-21 20:59:36 +00:00
t3chn0m4g3
6921857573
bump heralding to latest master
2019-10-16 14:46:58 +00:00
t3chn0m4g3
42c19e4d81
bump glutton, tune down noisy log
2019-10-15 14:50:39 +00:00
t3chn0m4g3
b9fb3d4695
tune down noisy log
2019-10-15 07:49:30 +00:00
t3chn0m4g3
487ce4bed5
bump ewsposter to latest master
2019-09-21 12:09:17 +00:00
t3chn0m4g3
24ac6d203f
bump medpot to latest master
2019-08-28 14:52:25 +00:00
t3chn0m4g3
08ff1377fd
prep mailoney rebuild
2019-08-28 14:41:35 +00:00
t3chn0m4g3
42c57636b9
prep honeytrap rebuild
2019-08-28 14:34:20 +00:00
t3chn0m4g3
c86d6f15af
prep rebuild for elasticpot
2019-08-28 14:12:52 +00:00
t3chn0m4g3
670dddfea0
bump nginx to 1.16.1
2019-08-28 14:09:16 +00:00
t3chn0m4g3
2132f80988
prep rebuild for ciscoasa
2019-08-28 13:59:41 +00:00
t3chn0m4g3
cae95ebe20
bump adbhoney to latest master
2019-08-28 12:46:19 +00:00
t3chn0m4g3
66bb9443f9
bump elk stack to 6.8.2
2019-08-28 11:49:03 +00:00
t3chn0m4g3
bc6e94d329
spiderfoot, head bump to latest master
2019-08-16 17:29:41 +00:00
t3chn0m4g3
78d9d1f7c7
bump cyberchef to latest master
2019-08-16 17:14:58 +00:00
t3chn0m4g3
f1275e5b07
fix
2019-08-16 16:55:36 +00:00
Marco Ochse
4164b75bea
Fixed
...
DockerHub already uses 3.7
2019-08-16 17:59:05 +02:00
Marco Ochse
c2afdc0f1f
Fix for DockerHub
...
Works just fine on local build.
2019-08-16 17:46:17 +02:00
t3chn0m4g3
e0427cfc21
bump tanner to latest master
2019-08-16 14:43:10 +00:00
t3chn0m4g3
786ab5c082
adjust dionaea, fixes #435
2019-08-16 12:18:28 +00:00
t3chn0m4g3
bf39c0f5b2
bump elastic stack to 6.7.2
2019-08-15 15:38:12 +00:00
t3chn0m4g3
364831ae58
fix cd
2019-08-15 08:32:04 +00:00
t3chn0m4g3
31d7707d19
download instead of git pull
...
download translation maps rather than running a git pull
translation maps will now be bzip2 compressed to reduce traffic to a minimum
fixes #432
2019-08-14 14:43:47 +00:00
t3chn0m4g3
28f5491977
bump suricata to 4.1.4
2019-06-07 13:00:20 +00:00
t3chn0m4g3
5e22afd10b
finalize fatt support
2019-06-04 14:21:35 +00:00
t3chn0m4g3
8b03fb8f28
remove glastopf
2019-06-03 20:04:50 +00:00
t3chn0m4g3
bbf226aeda
remove glastopf
2019-06-03 19:57:50 +00:00
t3chn0m4g3
a7e553efe9
still working on fatt
2019-06-03 16:13:58 +00:00
t3chn0m4g3
f870c8e885
continue working on fatt
2019-06-03 10:22:07 +00:00
t3chn0m4g3
4e902b6560
add fatt to nextgen
2019-06-01 17:47:14 +00:00
t3chn0m4g3
d3239b78c4
start working on fatt
2019-05-31 17:52:39 +00:00
listbot
867bda6ad7
increase number of fields limit
...
#382
2019-05-31 15:34:29 +00:00
listbot
b658a01637
fixes #381
2019-05-26 09:47:20 +00:00
Marco Ochse
efdd2fc11d
optimize build
2019-05-25 19:35:03 +02:00
listbot
c09547e3a4
adjust group and permissions for /data
2019-05-08 11:16:48 +00:00
t3chn0m4g3
d4654f2bbc
prepare for hpfeeds opt in
2019-04-01 07:42:24 +00:00
t3chn0m4g3
c0d0e016e6
tweaking
...
Update Heralding to support SOCKS5
Correct Readme
Resize tped.sh
2019-03-27 13:39:23 +00:00
t3chn0m4g3
20711cb633
clean up
2019-03-26 16:30:14 +00:00
t3chn0m4g3
c7e9015a5a
Bump Suricata to 4.1.3
...
Build with Rust
Enable JA3
Enable more protocols
Improve payload logging
... and more.
2019-03-26 16:26:47 +00:00
t3chn0m4g3
349982baf7
update ewsposter
2019-03-20 14:43:21 +00:00
t3chn0m4g3
e8d8773863
tweaking
2019-03-19 11:08:23 +00:00
t3chn0m4g3
573ceb98a1
bump elk stack to 6.6.2, replace wget with aria2 to speed up d/l
2019-03-15 22:23:30 +00:00
t3chn0m4g3
5dae44b5e9
prepare for sissden opt-in
2019-03-15 15:59:02 +00:00
Marco Ochse
86715ccf7c
hpfeeds ca cert sissden
2019-03-15 13:38:19 +01:00
t3chn0m4g3
2b7d8ee01e
update ewsposter
2019-03-13 22:04:07 +00:00
t3chn0m4g3
0b92b56c55
store data as ascii, adjust config
2019-03-13 21:13:36 +00:00
t3chn0m4g3
6f30322ad5
prepare for honeypy
2019-03-10 18:15:59 +00:00
t3chn0m4g3
d9e5331a84
fix #313
2019-03-09 21:25:58 +00:00
t3chn0m4g3
bfa54853ab
add honeypy docker
2019-03-08 21:32:09 +00:00
t3chn0m4g3
869f05ca8b
cleanup
2019-03-01 21:08:36 +00:00
t3chn0m4g3
8d59602a75
tweaking
2019-03-01 13:57:21 +00:00
listbot
e1fe025dd7
remove fallback
2019-02-28 21:03:07 +00:00
listbot
6467a03d19
fix suricata ref location
2019-02-28 20:59:20 +00:00
listbot
65f242d322
cleanup
2019-02-28 15:01:12 +00:00
listbot
728607a2da
bump elk stack to 6.6.1
2019-02-28 14:52:42 +00:00
t3chn0m4g3
06ccf17c5f
add openssl
2019-02-26 13:25:06 +00:00
t3chn0m4g3
32043158bf
bump cowrie to 1.5.3
2019-02-26 13:07:07 +00:00
t3chn0m4g3
00f068980e
pin nginx to tls v1.3
2019-02-26 07:55:42 +00:00
t3chn0m4g3
9664d7b6c3
kibana pin to alpine 3.8
2019-02-25 15:49:26 +00:00
t3chn0m4g3
4e34e5c77d
cyberchef pin to alpine 3.8
2019-02-25 15:28:54 +00:00
t3chn0m4g3
28d6487ff5
rdpy fix dockerfile alpine 3.9
2019-02-25 15:12:48 +00:00
t3chn0m4g3
238fc05854
glastopf fix dockerfile alpine 3.9
2019-02-25 14:48:43 +00:00
t3chn0m4g3
fd150699f2
heralding fix dockerfile alpine 3.9
2019-02-25 13:55:46 +00:00
Marco Ochse
ec30cf89b9
Update Dockerfile
2019-02-06 17:11:08 +01:00
Marco Ochse
a0fcc62bf1
Fix names for Suricata daemons
2019-02-06 16:15:51 +01:00
t3chn0m4g3
4754526884
bump elk stack to 6.5.4
2019-01-14 20:41:08 +00:00
Marco Ochse
2fa03671e2
Bump to 8.20.0
2019-01-10 10:33:24 +01:00
t3chn0m4g3
526674b5e0
fix build for tanner testing
2018-12-12 08:48:45 +00:00
t3chn0m4g3
c4bae5f715
bump elk stack to 6.5.2
2018-12-10 17:25:46 +00:00
t3chn0m4g3
9f905f70de
prepare for new release
...
fix for installer, now always pointing to master repo
include adbhoney and dashboard
2018-12-07 17:50:39 +01:00
t3chn0m4g3
c7873554c3
prepare for adbhoney
2018-12-05 16:59:08 +00:00
t3chn0m4g3
223aed6676
bump cyberchef to 8.12.3
2018-12-03 10:58:44 +00:00
Marco Ochse
e939bb3545
Update README.md
2018-11-24 01:13:26 +01:00
t3chn0m4g3
1c8074bce3
update docs, screenshots
2018-11-24 01:05:21 +01:00
t3chn0m4g3
aa17604a7a
change defaults for kibana.yml
2018-11-23 22:32:11 +00:00
t3chn0m4g3
5e8345695f
bump elk stack to 6.5.1
...
fix docker hub build
2018-11-22 23:18:59 +00:00
t3chn0m4g3
d6a700d2b2
fix conpot
2018-11-21 12:36:13 +00:00
t3chn0m4g3
b978065a43
fix ewsposter deps
2018-11-21 10:29:03 +00:00
t3chn0m4g3
9a834c5607
avoid error on docker hub
2018-11-21 10:06:30 +00:00
t3chn0m4g3
ece169dd76
update docker-compose files
2018-11-21 09:26:31 +00:00
t3chn0m4g3
ed921d31f8
cleaning up
2018-11-19 12:34:07 +00:00
t3chn0m4g3
53383f7313
rename fields
2018-11-19 11:33:00 +00:00
listbot
7d7bdd27c1
open links in new window or tab
2018-11-15 10:17:29 +00:00
t3chn0m4g3
5754c79086
clean up log sources
2018-11-13 15:46:57 +00:00
t3chn0m4g3
106193fac5
fix for CVE-2018-17244
2018-11-09 14:36:54 +00:00
t3chn0m4g3
89a1553429
add trailing slash
2018-10-30 09:06:59 +00:00
t3chn0m4g3
fb012ae683
tls v1.3 testing
2018-10-29 15:39:22 +00:00
t3chn0m4g3
c46d3e4f6f
bump elk to 6.4.2
2018-10-12 16:07:20 +00:00
t3chn0m4g3
0c86bd9a5a
tweaking
2018-09-11 12:19:26 +00:00
t3chn0m4g3
992d453b9a
medpot tweaking
2018-09-11 07:59:14 +00:00
t3chn0m4g3
f0f6981f34
add medpot to ELK
2018-09-10 01:15:21 +00:00
t3chn0m4g3
39fb972589
add medpot
...
great work by @schmalle, thank you!
2018-09-09 18:00:59 +00:00
Marco Ochse
6869ceb548
Update Dockerfile
2018-09-04 22:51:41 +02:00
t3chn0m4g3
47ab206f68
clean up dockerfile, prepare for s
2018-09-04 15:28:46 +00:00
t3chn0m4g3
660a046bcc
tweaking
2018-09-03 20:13:29 +00:00
t3chn0m4g3
0abb518177
update glutton
2018-09-03 13:33:54 +00:00
t3chn0m4g3
28fd8532b5
upstream changes
2018-08-30 16:26:53 +00:00
t3chn0m4g3
a4ead73672
cleanup
2018-08-30 16:20:03 +00:00
t3chn0m4g3
5fcb7ed4ce
glutton structured json logging
2018-08-30 16:19:11 +00:00
t3chn0m4g3
64fed3d15b
tweaking
2018-08-29 10:54:30 +00:00
listbot
775c7aeb95
conpot cleanup
2018-08-28 13:47:20 +00:00
Marco Ochse
79bb324a4a
rename conpot fields to match index pattern
2018-08-28 13:30:58 +02:00
Marco Ochse
d19d3823f6
prevent status field from being indexed as string
2018-08-28 12:41:11 +02:00
listbot
59c8c5b34c
bump ELK to 6.4.0
...
YES! Index patterns can finally exported through Kibana! A joy to the ELK world :-)
2018-08-24 17:07:00 +00:00
listbot
ea1bf604c8
tweaking conpot
2018-08-24 16:01:27 +00:00
listbot
d02e34764e
bump conpot to 0.6.x
2018-08-22 13:43:27 +00:00
t3chn0m4g3
5ce77c6f60
snare tweaking, change ports
2018-08-21 18:30:37 +00:00
listbot
6b77e64ff4
tweaking updater, conpot
2018-08-20 15:06:10 +00:00
t3chn0m4g3
e2613e7d17
add 10 personas for snare
2018-08-14 14:20:55 +00:00
t3chn0m4g3
f6a30dd973
update ews.cfg
2018-08-08 11:58:26 +00:00
t3chn0m4g3
3d259bbc34
tanner finetuning
2018-08-08 11:49:32 +00:00
t3chn0m4g3
00e909ea24
bump tanner to 0.6.0
2018-08-07 09:33:38 +00:00
t3chn0m4g3
78adc5a0e1
bump snare to 0.3.0
2018-08-02 22:17:03 +00:00
t3chn0m4g3
a6d996d016
fix kibana ci color for highlighted elements
2018-08-02 17:36:11 +00:00
t3chn0m4g3
a5f027e896
update glutton
2018-08-02 14:52:50 +00:00
t3chn0m4g3
67d5c5a26c
get FQDN for ES head from open window
2018-08-01 20:09:05 +00:00
t3chn0m4g3
7945961cee
Bump ELK to 6.3.2
2018-07-31 14:31:49 +00:00
t3chn0m4g3
0373d7145d
Update Dionaea to version 0.8.0
...
Thanks to @Dbof for noticing and supplying #222
2018-07-31 13:31:50 +00:00
listbot
d91714cdf2
add cyberchef as tool
2018-07-12 09:03:33 +00:00
t3chn0m4g3
38112755ce
Fix ci logo
2018-06-28 12:30:27 +00:00
t3chn0m4g3
00482df95b
Bump ELK Stack to 6.3.0
2018-06-26 17:34:14 +00:00
Marco Ochse
b8a650002e
Update favicon
2018-06-26 12:09:23 +02:00
Marco Ochse
804f47f7ab
Fix IPv6 error
...
fix an error where upstream site is not found while trying to connect with both IPv4 and IPv6. Setting `localhost` to `127.0.0.1` fixes it.
2018-06-26 10:19:35 +02:00
Marco Ochse
b19aa6d5c8
update favicon
2018-06-26 10:09:33 +02:00
Marco Ochse
cd55b3c51f
update logfile for tanner in ews
2018-06-24 23:16:19 +02:00