Commit graph

1457 commits

Author SHA1 Message Date
listbot
47dca8b835 continue pin / prep images ghcr 2020-09-04 12:37:28 +00:00
listbot
1ac79d6be7 begin prep for move to GitHub Container Registry
Start pinning Dockerfiles to specific releases / commits
2020-09-02 15:18:32 +00:00
Marco Ochse
9a7f55bb52
Merge pull request #687 from shaderecker/terraform-otc
Update Terraform config for 0.13
2020-08-26 12:14:17 +02:00
Sebastian Haderecker
42852a85ea Update README.md 2020-08-26 11:46:16 +02:00
Sebastian Haderecker
c33229b53a Fix variable typo 2020-08-26 11:45:17 +02:00
Sebastian Haderecker
840662da48 Update OTC Debian 10 base image id 2020-08-26 11:21:55 +02:00
Sebastian Haderecker
d8f14d9c9f AWS: Update required_providers for Terraform 0.13 2020-08-26 11:04:34 +02:00
Sebastian Haderecker
72e4134c86 OTC: Update required_providers for Terraform 0.13 2020-08-26 10:59:39 +02:00
t3chn0m4g3
5b1e07b9c8 finalize objects for ipphoney 2020-08-25 16:12:29 +00:00
t3chn0m4g3
2be185a371 add kibana objects for ipphoney 2020-08-25 15:08:28 +00:00
t3chn0m4g3
54a6a944aa prep for ipphoney 2020-08-25 12:25:59 +00:00
t3chn0m4g3
b86d2c715b prep for ipphoney 2020-08-24 21:36:08 +00:00
t3chn0m4g3
8f06b5b499 start prepping for ipphoney 2020-08-24 15:55:50 +00:00
t3chn0m4g3
6ec5a04802 fix deps issue with conpot 2020-08-24 15:55:10 +00:00
t3chn0m4g3
5080151b7c prep for elk 7.9 2020-08-24 10:35:46 +00:00
t3chn0m4g3
c1f7146800 prep elk stack for 7.9.0 2020-08-20 15:03:16 +00:00
t3chn0m4g3
743616fa09 update conpot to latest working master 2020-08-13 16:30:37 +00:00
t3chn0m4g3
6e18b6f660 bump elasticpot to latest master 2020-08-13 10:37:03 +00:00
t3chn0m4g3
50d67fc286 bump spiderfoot to 3.1 final
Fix Spiderfoot issue not showing current scan
2020-08-13 09:06:49 +00:00
t3chn0m4g3
c28642932a bump elk stack to 7.8.1 2020-08-13 08:34:44 +00:00
t3chn0m4g3
969e269bd1 improve cowrie dashboard, fixes #664 2020-07-09 15:11:32 +00:00
t3chn0m4g3
8af45c9440 prevent cowrie from unwanted log rotation 2020-07-07 00:00:57 +00:00
t3chn0m4g3
6d29f504df provide fix for #669 2020-07-06 23:30:11 +00:00
Marco Ochse
9b7f100f74
Add testimonial from @robcowart 2020-07-01 11:53:38 +02:00
Marco Ochse
e1485bfd04
Merge pull request #663 from dtag-dev-sec/dev
fix crontab
2020-06-30 18:34:34 +02:00
t3chn0m4g3
31c6bc6f96 fix crontab 2020-06-30 16:31:22 +00:00
Marco Ochse
3badae587c
Release T-Pot 20.06.0
# Release Notes

## Upgrade from 19.03.x
- If you are running T-Pot 19.x you can upgrade to T-Pot 20.06.0 by running `/opt/tpot/update.sh`. Please be aware upgrades can break things, so please backup all of your data or take snapshot of your machine **before** you run the update procedure.
- To protect possible changes of your Kibana objects you need to manually [export](https://github.com/dtag-dev-sec/tpotce/wiki/Import---Export-Kibana-Objects) (backup) your objects and manually [import](https://github.com/dtag-dev-sec/tpotce/wiki/Import---Export-Kibana-Objects) (overwrite) the provided T-Pot Kibana Objects after upgrading.

## Changelog
- **Release T-Pot 20.06.0**
  - After 4 months of public testing with the NextGen edition T-Pot 20.06 can finally be released.
- **Debian Buster**
  - With the release of Debian Buster T-Pot now has access to all packages required right out of the box.
- **Add new honeypots**
  - [Dicompot](https://github.com/nsmfoo/dicompot) by @nsmfoo is a low interaction honeypot for the Dicom protocol which is the international standard to process medical imaging information. Together with Medpot which supports the HL7 protocol T-Pot is now offering a Medical Installation type.
  - [Honeysap](https://github.com/SecureAuthCorp/HoneySAP) by SecureAuthCorp is a low interaction honeypot for the SAP services, in case of T-Pot configured for the SAP router.
  - [Elasticpot](https://gitlab.com/bontchev/elasticpot) by Vesselin Bontchev replaces ElasticpotPY as a low interaction honeypot for Elasticsearch with more features, plugins and scripted responses.
- **Rebuild Images**
  - All docker images were rebuilt based on the latest (and stable running) versions of the tools and honeypots. Mostly the images now run on Alpine 3.12 / Debian Buster. However some honeypots / tools still reuire Alpine 3.11 / 3.10 to run properly.
- **Install Types**
  - All docker-compose files (`/opt/tpot/etc/compose`) were remixed and most of the NextGen honeypots are now available in Standard.
  - There is now a **Medical** Installation Type with Dicompot and Medpot which will be of most interest for medical institutions to get started with T-Pot.
- **Update Tools**
  - Connecting to T-Pot via `https://<ip>:64297` brings you to the T-Pot Landing Page now which is based on Heimdall and the latest NGINX enforcing TLS 1.3.
  - The ELK stack was updated to 7.8.0 and stripped down to the necessary core functions (where possible) for T-Pot while keeping ELK RAM requirements to a minimum (8GB of RAM is recommended now). The number of index pattern fields was reduced to **697** which increases performance significantly. There are **22** Kibana Dashboards, **397** Kibana Visualizations and **24** Kibana Searches readily available to cover all your needs to get started and familiar with T-Pot.
  - Cyberchef was updated to 9.21.0.
  - Elasticsearch Head was updated to the latest version available on GitHub.
  - Spiderfoot was updated to latest 3.1 dev.
- **Landing Page**
  - After logging into T-Pot via web you are now greeted with a beautifully designed landing page.
- **Countless Tweaks and improvements**
  - Under the hood lots of tiny tweaks, improvements and a few bugfixes will increase your overall experience with T-Pot.
2020-06-30 17:27:07 +02:00
t3chn0m4g3
530564fb3f stage updater 2020-06-30 15:21:09 +00:00
t3chn0m4g3
7f0a191530 stage 2020-06-30 13:04:15 +00:00
t3chn0m4g3
3c32c9ca88 fix install error 2020-06-30 12:04:12 +00:00
t3chn0m4g3
04e3748781 add medical to installer, remove git clone from iso image 2020-06-30 11:22:21 +00:00
t3chn0m4g3
77d21d9e65 update changelog 2020-06-30 09:48:05 +00:00
t3chn0m4g3
47c5a7bcef fix link 2020-06-30 07:56:22 +00:00
t3chn0m4g3
3873b8d6e4 Add Medical Edition to README, cleanup 2020-06-30 07:32:08 +00:00
t3chn0m4g3
1d0e502b78 fix link 2020-06-29 15:18:13 +00:00
t3chn0m4g3
e4ef35f3f7 tweaking, update docs
remix sensor installation type
update docs, README and screenshots
2020-06-29 15:14:36 +00:00
t3chn0m4g3
6c8acb36fb preinstall cockpit-docker again 2020-06-29 12:01:08 +00:00
t3chn0m4g3
8bfc64a945 add medical edition
add compose file for medical edition
2020-06-29 11:36:49 +00:00
t3chn0m4g3
618ee3c6e9 tweaking
add kibana export / import config function
ewsposter remove transmitting old elasticpot data (need update)
final export of all objects
2020-06-29 10:45:33 +00:00
t3chn0m4g3
3a418534d8 tweaking
random reboot times for crontab
remix compose files
some tweaking
2020-06-28 20:03:14 +00:00
t3chn0m4g3
4e6510b5c7 dicompot tweaking 2020-06-27 00:37:12 +00:00
t3chn0m4g3
16a7cdb975 tweaking
Update logstash config for new Dicompot fields
Revert Dionaea back to 0.8.0, latest master was unstable
2020-06-26 23:48:48 +00:00
t3chn0m4g3
6419f4d521 restrict dionaea to networks local again 2020-06-26 16:34:40 +00:00
t3chn0m4g3
0031980416 cleanup and prepare for docker image rebuilds 2020-06-26 14:34:05 +00:00
t3chn0m4g3
6a98496e8c cleanup and prepare for docker image rebuilds 2020-06-25 22:58:23 +00:00
t3chn0m4g3
ec8f5d9b66 cleanup and prepare for docker image rebuilds 2020-06-25 16:14:37 +00:00
t3chn0m4g3
da7d095d6f tweaking
finish dashboards
optimize mappings
create viz for dicompot, honeysap
create searches for dicompot, honeysap
some clean up
2020-06-24 18:20:13 +00:00
t3chn0m4g3
238a08b055 tweaking
cleanup index-pattern
add dicompot log to logstash
2020-06-24 13:21:29 +00:00
t3chn0m4g3
99d8cf9b32 fix for query fields 2020-06-24 10:22:09 +00:00
t3chn0m4g3
81c6351cf1 fix for keeping daily index 2020-06-23 21:40:38 +00:00