trinitor/DetectionLab
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Merge branch 'master' into fix_fleet

Browse Source
This commit is contained in:
Chris Long
2021-06-12 20:45:58 -07:00
committed by GitHub
parent aee40d43f5 8f4d26b744
commit 1ccbb6cdff
2 changed files with 5 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
Vagrant/Exchange/Vagrantfile vendored
View File

@@ -23,10 +23,9 @@ Vagrant.configure("2") do |config|
cfg.vm.provision "shell", path: "scripts/install-osquery.ps1", privileged: false cfg.vm.provision "shell", path: "scripts/install-osquery.ps1", privileged: false
cfg.vm.provision "shell", path: "scripts/install-sysinternals.ps1", privileged: false cfg.vm.provision "shell", path: "scripts/install-sysinternals.ps1", privileged: false
cfg.vm.provision "shell", path: "scripts/install-velociraptor.ps1", privileged: false cfg.vm.provision "shell", path: "scripts/install-velociraptor.ps1", privileged: false
cfg.vm.provision "shell", path: "scripts/install-exchange.ps1", privileged: false cfg.vm.provision "shell", path: "scripts/install-exchange.ps1", privileged: true
cfg.vm.provision "reload" cfg.vm.provision "reload"
# Uncomment the line below once the commands in install-exchange.ps1 have been properly worked out cfg.vm.provision "shell", path: "scripts/install-exchange.ps1", privileged: false
#cfg.vm.provision "shell", path: "scripts/install-exchange.ps1", privileged: false
cfg.vm.provision "shell", inline: "Set-SmbServerConfiguration -AuditSmb1Access $true -Force", privileged: false cfg.vm.provision "shell", inline: "Set-SmbServerConfiguration -AuditSmb1Access $true -Force", privileged: false
cfg.vm.provision "shell", inline: 'cscript c:\windows\system32\slmgr.vbs /dlv', privileged: false cfg.vm.provision "shell", inline: 'cscript c:\windows\system32\slmgr.vbs /dlv', privileged: false

3
Vagrant/logger_bootstrap.sh
View File

@@ -372,6 +372,9 @@ install_zeek() {
redef Intel::read_files += { redef Intel::read_files += {
"/opt/zeek/etc/intel.dat" "/opt/zeek/etc/intel.dat"
}; };
redef ignore_checksums = T;
' >>/opt/zeek/share/zeek/site/local.zeek ' >>/opt/zeek/share/zeek/site/local.zeek
# Configure Zeek # Configure Zeek