5 Commits
Author SHA1 Message Date
Mike Haag 2b37af791d Bootstrap.sh Error fixes
Errors during install:
-     logger: Error during app install: failed to extract app from /vagrant/resources/splunk_forwarder/splunk-add-on-for-microsoft-windows_700.tgz to /opt/splunk/var/run/splunk/bundle_tmp/2ade41e05f0e68dc: No such file or directory

-     logger: Error during app install: failed to extract app from /vagrant/resources/splunk_server/add-on-for-microsoft-sysmon_1062.tgz to /opt/splunk/var/run/splunk/bundle_tmp/eeef7b83a2d6b716: No such file or directory

1. Fixed the forwarder error by placing the updated TA in the forwarder path.
2. fixed server error, this was caused by a typo in the name.
2020-04-06 09:04:23 -06:00
Mike Haag e52f8eee5a bootstrap.sh comment fix 2020-03-19 10:41:19 -06:00
Mike Haag 4bc014ca63 Update bootstrap.sh 2020-03-19 09:43:04 -06:00
Mike Haag 852f20af57 Adding BOTSv3 and Updating Apps 2020-03-19 09:39:58 -06:00
Mike Haag 2d5d6f508e Add BOTS to Logger
This will add the BOTSv2 dataset to DetectionLab.

One app required for BOTS:
Splunk Stream - https://splunkbase.splunk.com/app/1809/

Recommended:
Boss of the SOC (BOTS) Advanced APT Hunting Companion App for Splunk -  https://splunkbase.splunk.com/app/4430/
2019-09-05 10:02:05 -06:00