t3chn0m4g3
fb49a77180
tweaking, json_batch transfer to hive
2022-01-07 15:41:57 +00:00
t3chn0m4g3
788a4c4f98
prepare for new attack map feature
...
tweaking, cleanup
2022-01-04 16:16:27 +00:00
t3chn0m4g3
68b080a3a8
Work in progress!
...
This is the foundation for the distributed T-Pot feature,
highly work in progress, only works with local docker image builds,
will be available for prod for upcoming T-Pot 22xx.
2022-01-03 18:24:17 +00:00
t3chn0m4g3
ef1a1fa057
Merge branch 'master' of https://github.com/telekom-security/tpotce
2021-12-21 11:37:18 +00:00
t3chn0m4g3
daf41b4b71
tweaking
2021-12-21 11:36:38 +00:00
t3chn0m4g3
aaccb43471
bump elk stack to 7.16.2
...
ELK 7.16.2 includes log4j 2.17.0 to address latest issues
2021-12-20 11:17:18 +00:00
t3chn0m4g3
b0339610a2
Prep for Log4Pot integration
2021-12-16 20:25:40 +00:00
t3chn0m4g3
a98b447556
ELK 7.16.1 fixes log4j vulns.
2021-12-13 15:59:48 +00:00
t3chn0m4g3
5f29516197
tweaking
2021-12-08 23:55:13 +00:00
t3chn0m4g3
ce39e1bd4f
logstash logging for honeypots
2021-11-19 23:20:13 +00:00
t3chn0m4g3
c9b909e51d
finetune new honeypots logging
2021-11-02 19:13:28 +00:00
t3chn0m4g3
ea624351b5
finetuning logstash.conf for new honeypots
2021-10-29 16:28:16 +00:00
t3chn0m4g3
c1eb9f7216
logstash parsing for ddospot, hellpot
2021-10-28 18:57:55 +00:00
t3chn0m4g3
1a844d13ba
start integrating new honeypots into ELK
2021-10-27 16:14:52 +00:00
t3chn0m4g3
348a5d572b
bump elastic stack to 7.15.1
2021-10-26 13:56:38 +00:00
t3chn0m4g3
9de1bdd0b5
tweaking, bump elastic stack to 7.14.1, rebuild dashboards
2021-09-15 15:58:44 +00:00
t3chn0m4g3
06ef8850fe
prep for ELK 7.13.4, start full integration of new honeypots
2021-08-25 15:04:27 +00:00
t3chn0m4g3
4cb84166c5
bump ewsposter to 1.2.0, elk stack to 7.13.2
2021-06-28 16:30:40 +00:00
t3chn0m4g3
f51ab7ec0f
prepare to bump elastic stack to 7.13.1
2021-06-10 17:03:22 +00:00
t3chn0m4g3
0c5ab33b8a
bump elastic stack to 7.12.1
2021-05-17 16:32:03 +00:00
t3chn0m4g3
92925cecbd
bump dicompot to latest master
2020-10-27 21:30:33 +00:00
t3chn0m4g3
54a6a944aa
prep for ipphoney
2020-08-25 12:25:59 +00:00
t3chn0m4g3
b86d2c715b
prep for ipphoney
2020-08-24 21:36:08 +00:00
t3chn0m4g3
5080151b7c
prep for elk 7.9
2020-08-24 10:35:46 +00:00
t3chn0m4g3
16a7cdb975
tweaking
...
Update logstash config for new Dicompot fields
Revert Dionaea back to 0.8.0, latest master was unstable
2020-06-26 23:48:48 +00:00
t3chn0m4g3
238a08b055
tweaking
...
cleanup index-pattern
add dicompot log to logstash
2020-06-24 13:21:29 +00:00
t3chn0m4g3
99d8cf9b32
fix for query fields
2020-06-24 10:22:09 +00:00
t3chn0m4g3
81c6351cf1
fix for keeping daily index
2020-06-23 21:40:38 +00:00
t3chn0m4g3
a396356785
add honeysap logstash config
2020-06-19 22:53:56 +00:00
t3chn0m4g3
2882668826
Add a new elasticsearch honeypot
...
adjust installer
adjust elasticpot configs to T-Pot's environment
create Dockerfile
adjust logstash config
update Readme
2020-06-17 18:09:59 +00:00
t3chn0m4g3
680194adf7
prep for new listbot FQDN
2020-05-12 09:19:09 +00:00
Marco Ochse
ed73d83317
Update update.sh
2020-04-22 17:48:32 +02:00
Marco Ochse
1a7b3b3795
Load listbot data from OTC
2020-04-22 16:50:41 +02:00
t3chn0m4g3
73e1842c16
offload listbot from netlify CDN
2020-04-02 13:12:11 +00:00
t3chn0m4g3
b9da9f04af
adjust default field
2020-02-03 12:18:43 +00:00
t3chn0m4g3
984ba958fb
logstash template not upgraded
...
with daily index enabled logstash will not be able to put new events into ES
simple solution, just deleting logstash template upon logstash start and leave it to logstash to upload the latest template
.
2020-02-01 14:08:23 +00:00
t3chn0m4g3
5a4724bcba
elk 7.x dev test
2020-01-31 14:21:55 +00:00
t3chn0m4g3
f110eb08b0
prepare for mailoney json logging
2020-01-22 12:17:30 +00:00
t3chn0m4g3
1d0aad3b34
tweak logstash.conf for citrixhoneypot
2020-01-16 18:04:29 +00:00
t3chn0m4g3
a6ed6613a5
prepare citrixhoneypot for ELK integration
2020-01-16 15:13:58 +00:00
t3chn0m4g3
bf39c0f5b2
bump elastic stack to 6.7.2
2019-08-15 15:38:12 +00:00
t3chn0m4g3
31d7707d19
download instead of git pull
...
download translation maps rather than running a git pull
translation maps will now be bzip2 compressed to reduce traffic to a minimum
fixes #432
2019-08-14 14:43:47 +00:00
t3chn0m4g3
bbf226aeda
remove glastopf
2019-06-03 19:57:50 +00:00
t3chn0m4g3
a7e553efe9
still working on fatt
2019-06-03 16:13:58 +00:00
t3chn0m4g3
f870c8e885
continue working on fatt
2019-06-03 10:22:07 +00:00
listbot
867bda6ad7
increase number of fields limit
...
#382
2019-05-31 15:34:29 +00:00
listbot
c09547e3a4
adjust group and permissions for /data
2019-05-08 11:16:48 +00:00
t3chn0m4g3
e8d8773863
tweaking
2019-03-19 11:08:23 +00:00
t3chn0m4g3
6f30322ad5
prepare for honeypy
2019-03-10 18:15:59 +00:00
listbot
e1fe025dd7
remove fallback
2019-02-28 21:03:07 +00:00