trinitor/DetectionLab
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Small logger bugfixes

Browse Source
This commit is contained in:
Chris Long
2020-04-14 13:29:58 -07:00
parent f38e45e608
commit 3fde431699
5 changed files with 19 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
Vagrant/bootstrap.sh
View File

@@ -129,7 +129,15 @@ install_splunk() {
# Download Hardcoded Splunk # Download Hardcoded Splunk
wget --progress=bar:force -O /opt/splunk-8.0.2-a7f645ddaf91-linux-2.6-amd64.deb 'https://download.splunk.com/products/splunk/releases/8.0.2/linux/splunk-8.0.2-a7f645ddaf91-linux-2.6-amd64.deb&wget=true' wget --progress=bar:force -O /opt/splunk-8.0.2-a7f645ddaf91-linux-2.6-amd64.deb 'https://download.splunk.com/products/splunk/releases/8.0.2/linux/splunk-8.0.2-a7f645ddaf91-linux-2.6-amd64.deb&wget=true'
fi fi
dpkg -i /opt/splunk*.deb if ! ls /opt/splunk*.deb 1> /dev/null 2>&1; then
echo "Something went wrong while trying to download Splunk. This script cannot continue. Exiting."
exit 1
fi
if ! dpkg -i /opt/splunk*.deb > /dev/null; then
echo "Something went wrong while trying to install Splunk. This script cannot continue. Exiting."
exit 1
fi
/opt/splunk/bin/splunk start --accept-license --answer-yes --no-prompt --seed-passwd changeme /opt/splunk/bin/splunk start --accept-license --answer-yes --no-prompt --seed-passwd changeme
/opt/splunk/bin/splunk add index wineventlog -auth 'admin:changeme' /opt/splunk/bin/splunk add index wineventlog -auth 'admin:changeme'
/opt/splunk/bin/splunk add index osquery -auth 'admin:changeme' /opt/splunk/bin/splunk add index osquery -auth 'admin:changeme'

4
Vagrant/resources/windows/MenuStyle_Default_Win7.reg Normal file
View File

@@ -0,0 +1,4 @@
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\IvoSoft\ClassicStartMenu]
"MenuStyle_Default"="Win7"

2
Vagrant/scripts/MakeWindows10GreatAgain.ps1
View File

@@ -1,7 +1,7 @@
# Import the registry keys # Import the registry keys
Write-Host "$('[{0:HH:mm}]' -f (Get-Date)) Making Windows 10 Great again" Write-Host "$('[{0:HH:mm}]' -f (Get-Date)) Making Windows 10 Great again"
Write-Host "$('[{0:HH:mm}]' -f (Get-Date)) Importing registry keys..." Write-Host "$('[{0:HH:mm}]' -f (Get-Date)) Importing registry keys..."
regedit /s a:\MakeWindows10GreatAgain.reg regedit /s c:\vagrant\scripts\MakeWindows10GreatAgain.reg
# Remove OneDrive from the System # Remove OneDrive from the System
Write-Host "$('[{0:HH:mm}]' -f (Get-Date)) Removing OneDrive..." Write-Host "$('[{0:HH:mm}]' -f (Get-Date)) Removing OneDrive..."

1
Vagrant/scripts/install-utilities.ps1
View File

@@ -13,6 +13,7 @@ If ($(hostname) -eq "win10") {
# Because the Windows10 start menu sucks # Because the Windows10 start menu sucks
choco install -y --limit-output --no-progress classic-shell -installArgs ADDLOCAL=ClassicStartMenu choco install -y --limit-output --no-progress classic-shell -installArgs ADDLOCAL=ClassicStartMenu
& "C:\Program Files\Classic Shell\ClassicStartMenu.exe" "-xml" "c:\vagrant\resources\windows\MenuSettings.xml" & "C:\Program Files\Classic Shell\ClassicStartMenu.exe" "-xml" "c:\vagrant\resources\windows\MenuSettings.xml"
regedit /s c:\vagrant\resources\MenuStyle_Default_Win7.reg
} }
choco install -y --limit-output --no-progress NotepadPlusPlus GoogleChrome WinRar choco install -y --limit-output --no-progress NotepadPlusPlus GoogleChrome WinRar

9
ci/manual_machine_bootstrap_vmware.sh
View File

@@ -2,11 +2,10 @@
# This script is used to manually prepare an Ubuntu 16.04 server for DetectionLab building # This script is used to manually prepare an Ubuntu 16.04 server for DetectionLab building
# eth1: # Put this code in bootstrap.sh
# dhcp4: true # echo -e " eth1:\n dhcp4: true\n nameservers:\n addresses: [8.8.8.8,8.8.4.4]" >> /etc/netplan/01-netcfg.yaml
# gateway4: 192.168.76.1 # netplan apply
# nameservers: # sed -i 's/nameserver 127.0.0.53/nameserver 8.8.8.8/g' /etc/resolv.conf && chattr +i /etc/resolv.conf
# addresses: [8.8.8.8,8.8.4.4]
export DEBIAN_FRONTEND=noninteractive export DEBIAN_FRONTEND=noninteractive
export SERIALNUMBER="SECRET" export SERIALNUMBER="SECRET"