From 98de0cd20d0d2bb3f5e95f13c66fc55653b8a660 Mon Sep 17 00:00:00 2001 From: Chris Long Date: Mon, 3 Sep 2018 21:23:14 -0700 Subject: [PATCH] Updating README after bro/suricata [ci skip] [ci skip] --- README.md | 20 ++++---------------- 1 file changed, 4 insertions(+), 16 deletions(-) diff --git a/README.md b/README.md index 95bfd0e..55ee4ee 100644 --- a/README.md +++ b/README.md @@ -28,22 +28,6 @@ NOTE: This lab has not been hardened in any way and runs with default vagrant cr * Vagrant 1.9.2 or newer * Virtualbox or VMWare Fusion/Workstation -This lab has been successfully tested on: - -OS | Vagrant | Packer | Provider ----|---------|--------|----------- -OSX 10.12.4 | 1.9.3 | 1.0.0 | Virtualbox (5.1.14) -OSX 10.12.6 | 2.0.1 | 1.1.2 | Virtualbox (5.1.30) -OSX 10.12.4 | 1.9.2 | 1.0.0 | VMWare Fusion (8.5.6) -OSX 10.12.5 | 1.9.3 | 1.0.0 | VMWare Fusion (8.5.8) -OSX 10.12.6 | 2.0.1 | 1.1.3 | VMWare Fusion (8.5.9) -OSX 10.12.6 | 2.0.1 | 1.1.3 | VMWare Fusion (8.5.10) -OSX 10.12.6 | 2.0.3 | 1.2.1 | VMWare Fusion (10.1.1) -OSX 10.13.6 | 2.1.2 | 1.2.4 | VMWare Fusion (10.1.2) -Ubuntu 16.04 | 2.0.1 | 1.1.3 | Virtualbox (5.1) -Ubuntu 16.04 | 2.0.2 | N/A | Virtualbox (5.2) -Ubuntu 16.04 | 2.0.3 | 1.2.1 | Virtualbox (5.2) - **Known Bad Versions:** * Packer 1.1.2 will fail to build VMWare-ISOs correctly due to [this issue](https://github.com/hashicorp/packer/issues/5622). @@ -158,6 +142,8 @@ Vagrant commands must be run from the "Vagrant" folder. * Splunk Enterprise * Fleet osquery Manager * Mitre's Caldera Server + * Bro + * Suricata ## Splunk Indexes Index Name | Description @@ -167,6 +153,8 @@ osquery-status | osquery/fleet INFO/WARN/ERROR logs powershell | Powershell transcription logs sysmon | Logs from the Sysmon service wineventlog | Windows Event Logs +bro | Bro network traffic logs +suricata | Suricata IDS logs ## Installed Tools on Windows * Sysmon