Commit Graph
100 Commits
Author SHA1 Message Date
Chris LongandGitHub 78130b2b78 Merge pull request #427 from clong/nullqueue2
Add some Splunk nullQueues for noisy events
2020-04-18 16:00:50 -07:00
Chris Long d1d0566773 Add some Splunk nullQueues for noisy events 2020-04-18 15:59:54 -07:00
Chris LongandGitHub c238b8e21f Add hosts entry for WEF on the DC
Fixes a DNS problem with Microsoft ATA
2020-04-18 15:38:05 -07:00
Chris LongandGitHub e9804b4c69 Merge pull request #425 from clong/win10_activation
Fix Win10 Activation Issue on Terraform
2020-04-18 13:23:48 -07:00
Chris Long 091c221a87 Revert AZ change 2020-04-18 13:23:13 -07:00
Chris Long f81f715147 Fix Win10 Activation Issue on Terraform 2020-04-18 13:19:28 -07:00
Chris LongandGitHub 7c0b8907db Fix path for install-utilities.ps1 2020-04-17 22:02:29 -07:00
Chris LongandGitHub 37d7d1dfd1 Fixing Splunk app filename 2020-04-17 13:58:12 -07:00
Chris LongandGitHub 60f89345af Override Bootstrap DNS Settings 2020-04-16 22:00:05 -07:00
Chris Long 3fde431699 Small logger bugfixes 2020-04-14 13:29:58 -07:00
Chris LongandGitHub f38e45e608 Merge pull request #420 from clong/logger_bugfix
Fixing logger bugs, updating vm tools, updating Win10 ISO
2020-04-13 00:10:00 -07:00
Chris LongandGitHub 03c96430a5 Merge branch 'master' into logger_bugfix 2020-04-13 00:09:52 -07:00
Chris Long a67ce6efb5 Fixing logger bugs, updating vm tools, updating Win10 ISO 2020-04-13 00:05:49 -07:00
Chris LongandGitHub ffffcf3cce Update main.tf 2020-04-09 02:30:38 -07:00
Chris LongandGitHub dbfa998ec2 Update install-windows_ta.ps1 2020-04-08 00:20:01 -07:00
Chris LongandGitHub 0c82c97576 Merge pull request #414 from MHaggis/master
Bootstrap.sh Error fixes
2020-04-07 22:57:07 -07:00
Chris Long fd804a083d Fixing the Splunk nullqueue 2020-03-28 02:30:06 -07:00
Chris Long c7e013558a Resolving merge conflicts 2020-03-27 14:58:18 -07:00
Chris Long 34d8a39c43 Multiple bugfixes, add dashboard 2020-03-27 14:53:04 -07:00
Chris LongandGitHub 0f5faccf46 Update main.yml 2020-03-26 13:34:20 -07:00
Chris LongandGitHub 9437e74c3e Update bootstrap.sh 2020-03-26 11:45:37 -07:00
Chris LongandGitHub 6525456492 Update install-choco-extras.ps1 2020-03-25 22:46:55 -07:00
Chris LongandGitHub b2cf652fdc Update install-utilities.ps1 2020-03-25 22:46:19 -07:00
Chris LongandGitHub 648ecec2ad Merge pull request #408 from NemoEht/patch-4
Update to ubuntu1804_esxi.json with ssh_timeout
2020-03-23 22:53:43 -07:00
Chris LongandGitHub ce4f9b482a Merge branch 'master' into patch-4 2020-03-23 22:53:32 -07:00
Chris LongandGitHub 47f2d618ac Merge pull request #407 from clong/autoruns_wait
Add a wait for autoruns scheduled task
2020-03-23 22:52:36 -07:00
Chris Long 242e1a7cf3 Adding a failover for the ISO download 2020-03-23 22:51:43 -07:00
Chris Long 5dcc9965d3 Add a wait for autoruns scheduled task 2020-03-23 17:27:57 -07:00
Chris LongandGitHub d9ccdbb162 Merge pull request #403 from NemoEht/patch-1
Update ubuntu1804_esxi.json
2020-03-23 13:53:15 -07:00
Chris LongandGitHub 7c29ef8663 Merge pull request #404 from NemoEht/patch-2
Update windows_10_esxi.json
2020-03-23 13:53:02 -07:00
Chris LongandGitHub cf7debb049 Merge pull request #405 from NemoEht/patch-3
Update windows_2016_esxi.json
2020-03-23 13:52:47 -07:00
Chris LongandGitHub f7543b3003 Merge pull request #402 from clong/ansible_tasks
Break out Ansible tasks
2020-03-23 00:32:47 -07:00
Chris Long 5084822e84 Break out Ansible tasks 2020-03-23 00:31:09 -07:00
Chris LongandGitHub 1d9ed8872a Merge pull request #399 from lnxg33k/master
Should fix an issue when installing zeek
2020-03-21 14:11:00 -07:00
Chris LongandGitHub 16c58561e9 Merge pull request #397 from MHaggis/master
Update - Add BOTSv3 and update Apps
2020-03-19 11:31:40 -07:00
Chris LongandGitHub d252a41fae Merge pull request #395 from lnxg33k/master
Fix a typo that stopped the defender exclusions of \tools directory and disable RealtimeMonitoring when installing redteaming tools.
2020-03-15 13:02:09 -07:00
Chris LongandGitHub e612709f4d Whitespace formatting 2020-03-13 12:10:17 -07:00
Chris LongandGitHub 66ad89c160 Merge pull request #393 from lnxg33k/master
Make sure we have a DNS resolution when calling fix_eth1_static_ip.
2020-03-13 12:09:44 -07:00
Chris LongandGitHub 0b1488a0eb Merge branch 'master' into master 2020-03-13 12:09:33 -07:00
Chris LongandGitHub 05a3faae17 Fixed the path to 01-netcfg.yaml 2020-03-13 12:06:20 -07:00
Chris LongandGitHub 306ddf7540 Merge pull request #390 from ZephrFish/patch-5
extra comma not required
2020-03-11 00:51:39 -07:00
Chris LongandGitHub 706924312d Merge pull request #389 from ZephrFish/patch-1
ssh_wait_time is deprecated
2020-03-10 13:45:17 -07:00
Chris LongandGitHub da8d5d789d Fix formatting 2020-03-09 15:03:05 -07:00
Chris LongandGitHub 8e58523ac3 Adding image 2020-03-09 14:52:13 -07:00
Chris Long 003ed88d38 Adding images for ESXi readme 2020-03-09 14:50:45 -07:00
Chris LongandGitHub 688904a9b1 Fix image URLs in README 2020-03-09 14:48:40 -07:00
Chris LongandGitHub 4f69783f0f Merge pull request #388 from clong/ESXi
Adding ESXi deployment code
2020-03-09 14:47:10 -07:00
Chris LongandGitHub 068e9d8c05 Merge branch 'master' into ESXi 2020-03-09 14:46:54 -07:00
Chris Long 4e850a5ee6 Adding final ESXI deployment code 2020-03-09 14:42:58 -07:00
Chris LongandGitHub 47d4696147 Update install-redteam.ps1 2020-03-09 00:49:32 -07:00
Chris LongandGitHub 361b9b0b48 Adding exclusion folders to install-redteam.ps1 2020-03-07 23:11:44 -08:00
Chris LongandGitHub c630b88961 Removing reference to Invoke-AtomicRedTeam.psm1
Fixes https://github.com/clong/DetectionLab/issues/385
2020-03-07 20:02:25 -08:00
Chris Long e78b08a901 Merge branch 'ESXi' of https://github.com/clong/detectionlab into ESXi 2020-03-06 11:54:56 -08:00
Chris Long c5be4492b8 Adding some ansible code 2020-03-06 11:53:38 -08:00
Chris LongandGitHub e08f18e0a7 Update README.md 2020-03-05 23:01:35 -08:00
Chris LongandGitHub 51853befec Updating ESXi README 2020-03-05 22:42:29 -08:00
Chris Long f7940234ec De-duping MAC addresses and adding outputs 2020-03-05 22:28:02 -08:00
Chris Long 52ba931948 Adding an ESXi development branch 2020-03-05 22:07:55 -08:00
Chris LongandGitHub fc23f5a2d9 Merge pull request #383 from clong/suricata_yaml
Replace inline suricata.yaml edits with resource file
2020-03-02 11:12:42 -08:00
Chris Long ac1d2499a2 Replace inline suricata.yaml edits with resource file 2020-03-01 22:32:26 -08:00
Chris LongandGitHub cbf2340081 Uploading images for wiki page 2020-02-29 23:46:36 -08:00
Chris LongandGitHub d1cc369e87 Adding www.splunk.com to DNS cache
Logger is sometimes failing to resolve www.splunk.com
2020-02-29 23:12:21 -08:00
Chris LongandGitHub 90f2e305f0 Merge pull request #380 from clong/update_build_1804
Update build server code
2020-02-23 19:46:46 -08:00
Chris LongandGitHub 78b0458500 Update Packet server from 16.04 -> 18.04 2020-02-23 19:45:33 -08:00
Chris LongandGitHub 7e32871c88 Update build_machine_bootstrap.sh 2020-02-23 19:44:19 -08:00
Chris LongandGitHub 456bc1f690 Merge pull request #379 from clong/libvirt_fixes
LibVirt fixes
2020-02-17 15:06:29 -08:00
Chris Long 16003bbd68 LibVirt fixes 2020-02-17 15:04:32 -08:00
Chris LongandGitHub f3c40e84b5 Merge pull request #254 from Selora/libvirt_provider
Libvirt provider
2020-02-17 14:51:36 -08:00
Chris LongandGitHub 2bd2f20776 Merge branch 'master' into libvirt_provider 2020-02-17 14:45:09 -08:00
Chris LongandGitHub 5675ae42cc Merge pull request #378 from lnxg33k/master
Set WinRM remoteip to any when packing the boxes.
2020-02-15 15:23:54 -08:00
Chris LongandGitHub a9283825a1 Merge pull request #375 from lnxg33k/master
Force powershell to use TLS 1.2 as chocolatey.org throws a TLS error
2020-02-06 19:05:52 -06:00
Chris LongandGitHub 46eb701992 Merge branch 'master' into libvirt_provider 2020-01-19 23:41:41 -08:00
Chris LongandGitHub 24d2d5e9b0 Update README.md 2020-01-18 12:01:42 -08:00
Chris LongandGitHub 43cc095193 Merge branch 'master' into libvirt_provider 2020-01-18 00:10:43 -08:00
Chris LongandGitHub 797a9d507a Merge pull request #372 from lnxg33k/master
Fix a monir bug when importing windows-application-security osquery config into fleet.
2020-01-18 00:10:22 -08:00
Chris LongandGitHub 4d13f53866 Forcing DNS Server settings on DC for Terraform
Addresses https://github.com/clong/DetectionLab/issues/370
2020-01-06 22:36:32 -08:00
Chris LongandGitHub 85563d7742 Fix issue #362
https://github.com/clong/DetectionLab/issues/362
2019-12-21 01:17:32 -08:00
Chris LongandGitHub 2206c0b944 Merge pull request #365 from clong/invoke_atomictest
Include Invoke-AtomicRedTeam in Powershell
2019-12-20 23:50:51 -08:00
Chris LongandGitHub 5e720ef398 Merge branch 'master' into invoke_atomictest 2019-12-20 23:50:37 -08:00
Chris Long b5c73ce647 Include Invoke-AtomicTest in Powershell 2019-12-20 23:46:35 -08:00
Chris LongandGitHub 6d90874599 Fix fleet URL 2019-12-20 22:02:08 -08:00
Chris LongandGitHub 828447b508 Merge pull request #364 from clong/ubuntu_upgrade
Logger bump to Ubuntu 18.04 & Migrate to Zeek
2019-12-20 18:04:16 -08:00
Chris LongandGitHub ffbca14bd0 Adding mirrors back 2019-12-20 18:03:48 -08:00
Chris LongandGitHub ba7004b283 Merge branch 'master' into ubuntu_upgrade 2019-12-20 15:51:01 -08:00
Chris Long 7e17727cbb Logger bump to Ubuntu 18.04 & Migrate to Zeek 2019-12-20 15:48:13 -08:00
Chris LongandGitHub e4bb3c9a43 Update 20-detectionlab 2019-12-18 13:43:21 -08:00
Chris Long beecfbf2e2 Add overview image back 2019-12-04 21:40:20 -08:00
Chris LongandGitHub 26895efd42 Merge pull request #354 from clong/remove_splunk_forwarder
Modify Splunk Forwarding, MOTD, Sysmon
2019-12-04 21:38:29 -08:00
Chris Long 0393d627ad Convert ADSI:Exists to Get-ADOrganizationalUnit 2019-12-04 18:49:28 -08:00
Chris Long 4a8485c28e Disable IPv6 on Windows adapters 2019-12-04 13:45:43 -08:00
Chris Long f64ff20aaf Disabling default windows inputs. Adding powershell command for event channel perms 2019-12-04 11:27:35 -08:00
Chris Long 249ce2ec76 Updating channel permissions for Microsoft-Windows-Sysmon 2019-12-03 22:18:20 -08:00
Chris Long 6cb8b1b53d Merge branch 'remove_splunk_forwarder' of https://github.com/clong/detectionlab into remove_splunk_forwarder 2019-12-03 19:57:11 -08:00
Chris LongandGitHub ef0c1842cd Merge branch 'master' into remove_splunk_forwarder 2019-12-03 19:54:53 -08:00
Chris Long f3fa80299f Adding rearm to each Windows host 2019-12-03 19:53:59 -08:00
Chris LongandGitHub f7fc93cfb6 Rearm WEF AMI when it's being brought online 2019-12-03 19:46:58 -08:00
Chris LongandGitHub a36c90b057 Merge branch 'master' into remove_splunk_forwarder 2019-12-03 00:44:58 -08:00
Chris Long ee9a1f87fd Removing Splunk forwarder from Windows hosts 2019-12-03 00:42:02 -08:00
Chris LongandGitHub 79dfed3622 Add files via upload 2019-11-27 01:00:45 -08:00
Chris Long b5070e593e Updating guest tools 2019-11-19 23:43:06 -08:00