trinitor/DetectionLab
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
835 Commits 1 Branch 0 Tags
a4eae82f3ebd58ae81cd4c94a13c1fa6a6236636
Commit Graph

313 Commits

Author SHA1 Message Date
mdtro
a422ad8442 add custom props.conf for Splunk TA for Zeek and update logger_bootstrap 2021-02-06 01:01:08 -06:00
Chris Long
c681c30449 Add HTTP failover for autorunstowineventlog 2021-01-26 14:25:23 -08:00
Chris Long
59119e0ae4 Update install-utilities.ps1 2021-01-21 12:54:01 -08:00
Chris Long
106a0a6805 Disable googlechrome installation (temporary) 2021-01-20 18:45:30 -08:00
Chris Long
77b484b0ec Actually adding the parameter 2021-01-20 14:57:37 -08:00
Chris Long
6c5cd3e137 Update install-utilities.ps1 
Don't check checksums for GoogleChrome choco package
 2021-01-20 14:23:44 -08:00
Chris Long
ab9dd9487c Fix Zeek/Suricata on AWS 2021-01-13 12:05:16 -08:00
Chris Long
02cee91fe3 Add Big Sur check for prepare.ps1 2021-01-11 20:18:31 -08:00
Chris Long
2023e54ece Monitor eth0 and eth1 with zeek and suricata 2021-01-05 21:56:00 -08:00
Chris Long
cad9c0e553 Verify explorer.exe is running it before stopping it 
Issue #578
 2020-12-20 20:35:04 -08:00
Chris Long
ec57ad4fb9 Implement taskbar layout GPO 2020-12-17 17:14:22 -08:00
Chris Long
5b7dab7a43 I need more coffee 2020-12-17 14:31:30 -08:00
Chris Long
081a7f6812 Fix typo 2020-12-17 14:29:35 -08:00
Chris Long
7cc0bc79fd HTTP failover for live.sysinternals.com 
https://twitter.com/Centurion/status/1339676252047724545
 2020-12-17 13:06:11 -08:00
Chris Long
a9e3b3d5de Update Defender GPO, Update Splunk UF 2020-12-05 09:16:42 -08:00
Chris Long
2e69f945d3 Merge branch 'master' of https://github.com/clong/detectionlab 2020-11-20 22:38:28 -08:00
Chris Long
18be2e2c29 Fix issues 565 and 559 2020-11-20 22:37:54 -08:00
Chris Long
7fd7993bf7 Force python2 for asngen app 2020-11-17 20:31:22 -08:00
Chris Long
91c5763032 Creating esxi_datastore variable 2020-11-17 13:37:16 -08:00
Chris Long
e00dada09b Add missing quotes 2020-11-16 16:59:03 -08:00
Chris Long
1a47c92d90 Update bootstrap.sh with fleet fixes, remove duplicate registry key code 2020-11-16 16:51:23 -08:00
Chris Long
cf336b578a Actually fix Issue #558 2020-11-15 08:46:44 -08:00
Chris Long
aa787f22c0 Update install-evtx-attack-samples.ps1 2020-11-14 23:39:36 -08:00
Chris Long
27a41df46b Fix typo 2020-11-14 23:19:53 -08:00
Chris Long
5ce28c7ca1 Create logger_variables.sh 2020-11-14 20:41:10 -08:00
Chris Long
6bd07be431 Rename bootstrap.sh -> logger_bootstrap.sh 2020-11-14 19:09:52 -08:00
Chris Long
20e34c4130 Fix issue 558 
- Fixes 558
- Fixes the CredentialGuard check
- Write-Error -> Write-Host
 2020-11-14 08:23:46 -08:00
Chris Long
310a38e604 Update bootstrap.sh 2020-11-08 23:35:01 -08:00
Chris Long
3fb36effed Use /usr/bin/env bash instead of /bin/bash for scripts 2020-11-05 22:32:03 -08:00
Chris Long
023b9acd8d Fix typo 2020-10-16 15:31:11 -07:00
Chris Long
51b6599c39 Add WINS server config 2020-10-15 18:52:49 -07:00
Chris Long
aef71a10d1 Attempt to fix issue 517 2020-10-14 23:04:53 -07:00
Arioch
e2d9879344 Merge branch 'master' into update_gpo_rdp 2020-10-01 09:14:24 +02:00
Chris Long
456124149e Adding evtx_attack_samples Splunk index 2020-09-30 16:59:01 -07:00
Chris Long
ff3e595235 Adding ATA to Packer image, adding evtx-attack-samples 2020-09-29 17:36:32 -07:00
ZeArioch
c80063c4b3 add migration table target to RDP GPO import script 2020-09-28 15:55:41 +02:00
ZeArioch
848259d261 add migration table for the domain groups to be updated on import 2020-09-28 15:52:39 +02:00
ZeArioch
b67f4e85a8 add GPO file with 'Domain Users' as RDP group members 2020-09-28 15:50:53 +02:00
ZeArioch
2e900f5951 delete old RDP GPO files 2020-09-28 15:48:29 +02:00
Chris Long
aa51e77663 nits 2020-09-23 23:58:06 -07:00
p-zim
ccb39ea145 Update install-redteam.ps1 
PurpleSharp part throws an error and Vagrant stops since the script did not check if the PurpleSharp folder was already existing when for example re-running "vagrant reload dc --provision"
 2020-09-24 00:05:37 +02:00
Ahmed Shawky
779bb91bf5 Add a logrotate config for Suricata 2020-09-22 02:49:07 +00:00
Chris Long
7c539edcc7 Update provision.ps1 2020-09-20 21:13:50 -07:00
Chris Long
cc63e1dfb1 Update bootstrap.sh 2020-09-20 21:11:14 -07:00
Chris Long
e3365d827a Improve velociraptor release URL resolution 
The Velociraptor project sometimes creates releases that don't follow a URL convention and add a "-1" to the build number and URL. This update should help handle those cases.
 2020-09-16 15:46:27 -07:00
Chris Long
086df6f534 Update ESXI netplan, de-hardcode Velociraptor URL 2020-09-07 23:19:04 -07:00
Chris Long
59374ca601 Merge branch 'master' into add-hyperv 2020-08-28 14:21:52 -07:00
Chris Long
52599dffdc Adding in check for both Vbox and VMware being installed 2020-08-27 21:31:42 -07:00
Chris Long
2b3c3ba624 Fix typo 2020-08-27 19:54:43 -07:00
Chris Long
bee5d4ce1b Replace build scripts with prepare scripts 2020-08-27 18:14:41 -07:00