trinitor/DetectionLab
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
468 Commits 1 Branch 0 Tags
8e58523ac3939820bff16c5536cabe615197c8d4
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Chris LongandGitHub 8e58523ac3 Adding image 2020-03-09 14:52:13 -07:00
Chris Long 003ed88d38 Adding images for ESXi readme 2020-03-09 14:50:45 -07:00
Chris LongandGitHub 688904a9b1 Fix image URLs in README 2020-03-09 14:48:40 -07:00
Chris LongandGitHub 4f69783f0f Merge pull request #388 from clong/ESXi 
Adding ESXi deployment code
 2020-03-09 14:47:10 -07:00
Chris LongandGitHub 068e9d8c05 Merge branch 'master' into ESXi 2020-03-09 14:46:54 -07:00
Chris Long 4e850a5ee6 Adding final ESXI deployment code 2020-03-09 14:42:58 -07:00
Chris LongandGitHub 47d4696147 Update install-redteam.ps1 2020-03-09 00:49:32 -07:00
Chris LongandGitHub 361b9b0b48 Adding exclusion folders to install-redteam.ps1 2020-03-07 23:11:44 -08:00
Chris LongandGitHub c630b88961 Removing reference to Invoke-AtomicRedTeam.psm1 
Fixes https://github.com/clong/DetectionLab/issues/385
 2020-03-07 20:02:25 -08:00
Chris Long e78b08a901 Merge branch 'ESXi' of https://github.com/clong/detectionlab into ESXi 2020-03-06 11:54:56 -08:00
Chris Long c5be4492b8 Adding some ansible code 2020-03-06 11:53:38 -08:00
Chris LongandGitHub e08f18e0a7 Update README.md 2020-03-05 23:01:35 -08:00
Chris LongandGitHub 51853befec Updating ESXi README 2020-03-05 22:42:29 -08:00
Chris Long f7940234ec De-duping MAC addresses and adding outputs 2020-03-05 22:28:02 -08:00
Chris Long 52ba931948 Adding an ESXi development branch 2020-03-05 22:07:55 -08:00
Chris LongandGitHub fc23f5a2d9 Merge pull request #383 from clong/suricata_yaml 
Replace inline suricata.yaml edits with resource file
 2020-03-02 11:12:42 -08:00
Chris Long ac1d2499a2 Replace inline suricata.yaml edits with resource file 2020-03-01 22:32:26 -08:00
Chris LongandGitHub cbf2340081 Uploading images for wiki page 2020-02-29 23:46:36 -08:00
Chris LongandGitHub d1cc369e87 Adding www.splunk.com to DNS cache 
Logger is sometimes failing to resolve www.splunk.com
 2020-02-29 23:12:21 -08:00
Chris LongandGitHub 90f2e305f0 Merge pull request #380 from clong/update_build_1804 
Update build server code
 2020-02-23 19:46:46 -08:00
Chris LongandGitHub 78b0458500 Update Packet server from 16.04 -> 18.04 2020-02-23 19:45:33 -08:00
Chris LongandGitHub 7e32871c88 Update build_machine_bootstrap.sh 2020-02-23 19:44:19 -08:00
Chris LongandGitHub 456bc1f690 Merge pull request #379 from clong/libvirt_fixes 
LibVirt fixes
 2020-02-17 15:06:29 -08:00
Chris Long 16003bbd68 LibVirt fixes 2020-02-17 15:04:32 -08:00
Chris LongandGitHub f3c40e84b5 Merge pull request #254 from Selora/libvirt_provider 
Libvirt provider
 2020-02-17 14:51:36 -08:00
Chris LongandGitHub 2bd2f20776 Merge branch 'master' into libvirt_provider 2020-02-17 14:45:09 -08:00
Chris LongandGitHub 5675ae42cc Merge pull request #378 from lnxg33k/master 
Set WinRM remoteip to any when packing the boxes.
 2020-02-15 15:23:54 -08:00
Chris LongandGitHub a9283825a1 Merge pull request #375 from lnxg33k/master 
Force powershell to use TLS 1.2 as chocolatey.org throws a TLS error
 2020-02-06 19:05:52 -06:00
Chris LongandGitHub 46eb701992 Merge branch 'master' into libvirt_provider 2020-01-19 23:41:41 -08:00
Chris LongandGitHub 24d2d5e9b0 Update README.md 2020-01-18 12:01:42 -08:00
Chris LongandGitHub 43cc095193 Merge branch 'master' into libvirt_provider 2020-01-18 00:10:43 -08:00
Chris LongandGitHub 797a9d507a Merge pull request #372 from lnxg33k/master 
Fix a monir bug when importing windows-application-security osquery config into fleet.
 2020-01-18 00:10:22 -08:00
Chris LongandGitHub 4d13f53866 Forcing DNS Server settings on DC for Terraform 
Addresses https://github.com/clong/DetectionLab/issues/370
 2020-01-06 22:36:32 -08:00
Chris LongandGitHub 85563d7742 Fix issue #362 
https://github.com/clong/DetectionLab/issues/362
 2019-12-21 01:17:32 -08:00
Chris LongandGitHub 2206c0b944 Merge pull request #365 from clong/invoke_atomictest 
Include Invoke-AtomicRedTeam in Powershell
 2019-12-20 23:50:51 -08:00
Chris LongandGitHub 5e720ef398 Merge branch 'master' into invoke_atomictest 2019-12-20 23:50:37 -08:00
Chris Long b5c73ce647 Include Invoke-AtomicTest in Powershell 2019-12-20 23:46:35 -08:00
Chris LongandGitHub 6d90874599 Fix fleet URL 2019-12-20 22:02:08 -08:00
Chris LongandGitHub 828447b508 Merge pull request #364 from clong/ubuntu_upgrade 
Logger bump to Ubuntu 18.04 & Migrate to Zeek
 2019-12-20 18:04:16 -08:00
Chris LongandGitHub ffbca14bd0 Adding mirrors back 2019-12-20 18:03:48 -08:00
Chris LongandGitHub ba7004b283 Merge branch 'master' into ubuntu_upgrade 2019-12-20 15:51:01 -08:00
Chris Long 7e17727cbb Logger bump to Ubuntu 18.04 & Migrate to Zeek 2019-12-20 15:48:13 -08:00
Chris LongandGitHub e4bb3c9a43 Update 20-detectionlab 2019-12-18 13:43:21 -08:00
Chris Long beecfbf2e2 Add overview image back 2019-12-04 21:40:20 -08:00
Chris LongandGitHub 26895efd42 Merge pull request #354 from clong/remove_splunk_forwarder 
Modify Splunk Forwarding, MOTD, Sysmon
 2019-12-04 21:38:29 -08:00
Chris Long 0393d627ad Convert ADSI:Exists to Get-ADOrganizationalUnit 2019-12-04 18:49:28 -08:00
Chris Long 4a8485c28e Disable IPv6 on Windows adapters 2019-12-04 13:45:43 -08:00
Chris Long f64ff20aaf Disabling default windows inputs. Adding powershell command for event channel perms 2019-12-04 11:27:35 -08:00
Chris Long 249ce2ec76 Updating channel permissions for Microsoft-Windows-Sysmon 2019-12-03 22:18:20 -08:00
Chris Long 6cb8b1b53d Merge branch 'remove_splunk_forwarder' of https://github.com/clong/detectionlab into remove_splunk_forwarder 2019-12-03 19:57:11 -08:00
Chris LongandGitHub ef0c1842cd Merge branch 'master' into remove_splunk_forwarder 2019-12-03 19:54:53 -08:00
Chris Long f3fa80299f Adding rearm to each Windows host 2019-12-03 19:53:59 -08:00
Chris LongandGitHub f7fc93cfb6 Rearm WEF AMI when it's being brought online 2019-12-03 19:46:58 -08:00
Chris LongandGitHub a36c90b057 Merge branch 'master' into remove_splunk_forwarder 2019-12-03 00:44:58 -08:00
Chris Long ee9a1f87fd Removing Splunk forwarder from Windows hosts 2019-12-03 00:42:02 -08:00
Chris LongandGitHub 79dfed3622 Add files via upload 2019-11-27 01:00:45 -08:00
Chris Long b5070e593e Updating guest tools 2019-11-19 23:43:06 -08:00
Chris Long 5bcef5e47d Adding new Terraform output for Guacamole 2019-11-19 22:24:23 -08:00
Chris LongandGitHub 5584f792a3 Merge pull request #351 from clong/guacamole 
Adding Guacamole for multi-machine management
 2019-11-19 21:03:10 -08:00
Chris LongandGitHub 876e72c822 Merge branch 'master' into guacamole 2019-11-19 21:02:47 -08:00
Chris Long 905eaca9fa Adding Guacamole for multi-machine management 2019-11-19 21:01:19 -08:00
Chris LongandGitHub 8b96fd110c Update README.md 2019-11-18 21:29:08 -08:00
Chris Long 3db4b4e3c5 Update README.md 2019-11-12 19:50:12 -08:00
Chris LongandGitHub 9ed0fc884f Merge pull request #344 from clong/redo_dc_auditing 
Multiple fixes for auditing, wireshark
 2019-11-11 23:15:37 -08:00
Chris LongandGitHub 3140fa5668 Merge branch 'master' into redo_dc_auditing 2019-11-11 23:15:21 -08:00
Chris Long 92af8912aa Revert changes to .gitignore 2019-11-11 23:12:45 -08:00
Chris Long 17e42182ef Adding updated manifests 2019-11-11 23:11:36 -08:00
Chris Long 9f392c76cc Re-create DC Auditing GPO. Update ThreatHunting Splunk App. 2019-11-11 23:01:57 -08:00
Chris LongandGitHub 17d250f349 Force delete server if the build times out 
Fixes https://github.com/clong/DetectionLab/issues/324
 2019-11-08 11:27:22 -08:00
Chris LongandGitHub fc3ffb6761 Update README.md 
Remove GoFundMe, add GitHub sponsor Button
 2019-11-07 23:48:09 -08:00
Chris LongandGitHub 2b608addb0 Fixing issue #341 
Add TLS1.2 support
 2019-11-07 23:44:03 -08:00
Chris LongandGitHub 208f1b233d Merge pull request #340 from clong/update_bootstrap 
Updating bootstrap.sh
 2019-11-06 22:21:29 -08:00
Chris Long 0bd64eb04b Updating bootstrap.sh 2019-11-06 22:13:19 -08:00
Chris LongandGitHub 466b54e385 Installing yq via apt-get 
Fixing the yq issue by using the apt repository
 2019-11-04 22:43:25 -08:00
Chris LongandGitHub b0b124243b Updating yq installation check 2019-11-01 08:43:21 -07:00
Chris LongandGitHub a9d743ef49 Addressing issue #329 
Thanks to @protodroidbot for the fix!
 2019-10-31 21:33:14 -07:00
Chris LongandGitHub 69f797a020 Create FUNDING.yml 2019-10-30 00:54:35 -07:00
Chris LongandGitHub 3c34ded609 Case insensitive version check 
Resolves https://github.com/clong/DetectionLab/issues/326
 2019-10-08 12:00:26 -07:00
Chris LongandGitHub bb45da7c69 Merge pull request #325 from clong/bots_bootstrap 
Updating bootstrap.sh to not install BOTSv2 by default
 2019-09-30 20:33:56 -07:00
Chris Long 84287c4c17 Updating bootstrap.sh to not install BOTSv2 by default 2019-09-30 20:32:19 -07:00
Chris LongandGitHub 801dab26e0 Merge pull request #320 from MHaggis/master 
Add BOTSv2 to Logger
 2019-09-30 20:22:33 -07:00
Chris LongandGitHub d8389399df Merge pull request #314 from dtrizna/master 
Installation fails due resolve issues on all boxes
 2019-07-24 22:46:22 -07:00
Chris LongandGitHub 279a94ae3c Remove default AMI IDs 2019-07-22 21:20:45 -07:00
Chris LongandGitHub a07e9cbaac Fix bro-pkg issue 
https://github.com/abiteboul
 2019-07-20 23:44:19 -07:00
Chris LongandGitHub 9eec435ebf Merge pull request #312 from clong/threathunting_134 
Update ThreatHunting app to 1.3.4
 2019-07-20 00:50:58 -07:00
Chris Long 9cceafa28e Update ThreatHunting app to 1.3.4 2019-07-20 00:49:35 -07:00
Chris LongandGitHub 6134b37630 Merge pull request #310 from clong/remove_packer_port_forwards 
Remove packer port forwards
 2019-07-17 22:46:36 -07:00
Chris LongandGitHub 6a9474b70c Remove Packer Port Forwarding 
Removes port forwarding from Win2016 template
 2019-07-17 22:45:55 -07:00
Chris LongandGitHub 926a1ab3ef Remove Packer Port Forwards 
Removes port forwarding from Win10 template
 2019-07-17 22:44:50 -07:00
Chris LongandGitHub 0a7f7a16e8 Merge pull request #308 from strcrzy/aws_local_amis 
local AMI vars should override data sources
 2019-07-10 12:32:46 -07:00
Chris Long 280bce8252 Updating bginfo.bgi to point to the correct .bmp 2019-07-08 00:41:32 -07:00
Chris Long 2480c27200 Remove Prebuilt Vagrantfile 2019-07-07 10:46:59 -07:00
Chris LongandGitHub 53a535a8f0 Merge pull request #307 from clong/1903_update 
Update Windows 10 to 1903 & Add Sysprep
 2019-07-07 10:46:03 -07:00
Chris LongandGitHub 8fe4e85251 Merge branch 'master' into 1903_update 2019-07-06 18:38:52 -07:00
Chris Long f55b721da2 Remove debugging paths from Vagrantfile 2019-07-06 18:35:02 -07:00
Chris Long df718b4408 Update to 1903 2019-07-06 18:29:29 -07:00
Chris LongandGitHub b162255275 Use get-command to auto-resolve packer path 
Resolves https://github.com/clong/DetectionLab/issues/279
 2019-06-20 14:21:29 -04:00
Chris LongandGitHub 528633a72d Merge pull request #304 from sunnyneo/patch-2 
Explicitly define the file directory
 2019-06-17 23:40:10 -07:00
Chris LongandGitHub 85070d8f40 Merge pull request #300 from asvoboda/upgrade/terraform-0.12 
Upgrade to terraform 0.12
 2019-06-13 13:36:15 -07:00
Chris Long 95d1fb31f4 Updating ASNGen App 2019-06-09 17:53:21 -07:00