trinitor/DetectionLab
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
835 Commits 1 Branch 0 Tags
a4eae82f3ebd58ae81cd4c94a13c1fa6a6236636
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Chris LongandGitHub a4eae82f3e Merge pull request #601 from mdtro/fix-zeek-props 
Add Custom props.conf for Zeek Splunk TA
 2021-02-09 08:45:05 -08:00
Chris LongandGitHub 872a4284e6 Updating sponsors 2021-02-04 11:17:30 -08:00
Chris LongandGitHub 386bab1fe3 Merge pull request #599 from mikajarvinen/master 
fix a typo in vm_name field in qemu type section of windows_2016.json
 2021-02-01 20:18:39 -08:00
Chris LongandGitHub c681c30449 Add HTTP failover for autorunstowineventlog 2021-01-26 14:25:23 -08:00
Chris LongandGitHub 59119e0ae4 Update install-utilities.ps1 2021-01-21 12:54:01 -08:00
Chris LongandGitHub 106a0a6805 Disable googlechrome installation (temporary) 2021-01-20 18:45:30 -08:00
Chris LongandGitHub 77b484b0ec Actually adding the parameter 2021-01-20 14:57:37 -08:00
Chris LongandGitHub 6c5cd3e137 Update install-utilities.ps1 
Don't check checksums for GoogleChrome choco package
 2021-01-20 14:23:44 -08:00
Chris Long ab9dd9487c Fix Zeek/Suricata on AWS 2021-01-13 12:05:16 -08:00
Chris Long 02cee91fe3 Add Big Sur check for prepare.ps1 2021-01-11 20:18:31 -08:00
Chris LongandGitHub 95717a7581 Merge pull request #588 from clong/monitor_eth0_eth1 
Monitor both eth0 and eth1 with Suricata+Zeek
 2021-01-11 17:19:24 -08:00
Chris LongandGitHub c52627e50b Merge branch 'master' into monitor_eth0_eth1 2021-01-11 17:16:04 -08:00
Chris Long c91b48e4bc Moving the VMX time settings, reodering JSON files 2021-01-11 17:14:12 -08:00
Chris LongandGitHub 6237582fc5 Update inventory.yml 2021-01-11 16:47:30 -08:00
Chris LongandGitHub 4a45443626 Merge pull request #587 from masq/master 
HyperV: hyperv-create-nat-switch script refactor/adapter check updates
 2021-01-11 12:21:17 -08:00
Chris Long 2023e54ece Monitor eth0 and eth1 with zeek and suricata 2021-01-05 21:56:00 -08:00
Chris LongandGitHub 46d487a05c Update README.md 2021-01-04 10:41:12 -08:00
Chris LongandGitHub 7aa5dd5c54 Update README.md 2021-01-04 10:40:34 -08:00
Chris LongandGitHub be28a4aa26 Updating sponsors 2020-12-31 10:17:16 -08:00
Chris Long f0987e8148 Don't sync VM clock with ESXi host 2020-12-27 20:53:33 -08:00
Chris LongandGitHub c5b057096c Merge pull request #577 from tbennett6421/BF-esxivars 
ensure all resources utilize the vars.esxi_datastore var
 2020-12-20 20:44:50 -08:00
Chris LongandGitHub cad9c0e553 Verify explorer.exe is running it before stopping it 
Issue #578
 2020-12-20 20:35:04 -08:00
Chris LongandGitHub 1a4509c340 Merge pull request #575 from clong/taskbar_layout 
Implement taskbar layout GPO
 2020-12-17 17:15:48 -08:00
Chris Long ec57ad4fb9 Implement taskbar layout GPO 2020-12-17 17:14:22 -08:00
Chris LongandGitHub 5b7dab7a43 I need more coffee 2020-12-17 14:31:30 -08:00
Chris LongandGitHub 081a7f6812 Fix typo 2020-12-17 14:29:35 -08:00
Chris LongandGitHub 7cc0bc79fd HTTP failover for live.sysinternals.com 
https://twitter.com/Centurion/status/1339676252047724545
 2020-12-17 13:06:11 -08:00
Chris LongandGitHub 39513f5eea Remove boot_disk_size 
This can cause issues with the ESXi provider per https://github.com/josenk/vagrant-vmware-esxi/issues/90#issuecomment-516141239
 2020-12-14 16:40:07 -08:00
Chris LongandGitHub 7826c6edef Merge pull request #572 from clong/update_splunk_uf 
Update Defender GPO, Update Splunk UF
 2020-12-05 10:05:17 -08:00
Chris Long a9e3b3d5de Update Defender GPO, Update Splunk UF 2020-12-05 09:16:42 -08:00
Chris LongandGitHub 4067a98c6c Fix indentation 2020-11-24 11:23:32 -08:00
Chris LongandGitHub 287063c394 Merge pull request #568 from man715/master 
Fix for Issue #525
 2020-11-24 11:23:02 -08:00
Chris LongandGitHub bc8e89c359 Adding cost estimation 2020-11-20 22:58:07 -08:00
Chris LongandGitHub 89c5eeb317 Update Fleet URL 2020-11-20 22:42:41 -08:00
Chris Long 2e69f945d3 Merge branch 'master' of https://github.com/clong/detectionlab 2020-11-20 22:38:28 -08:00
Chris Long 18be2e2c29 Fix issues 565 and 559 2020-11-20 22:37:54 -08:00
Chris LongandGitHub af07f095f2 Update ESXi bootstrap to match vagrant 2020-11-17 20:32:14 -08:00
Chris LongandGitHub 7fd7993bf7 Force python2 for asngen app 2020-11-17 20:31:22 -08:00
Chris Long 91c5763032 Creating esxi_datastore variable 2020-11-17 13:37:16 -08:00
Chris Long e00dada09b Add missing quotes 2020-11-16 16:59:03 -08:00
Chris LongandGitHub baeecf21be Merge pull request #561 from juju4/devel 
Azure/Ansible: improve idempotency (2)
 2020-11-16 16:54:02 -08:00
Chris LongandGitHub dc776f3135 Merge branch 'master' into devel 2020-11-16 16:53:50 -08:00
Chris Long 1a47c92d90 Update bootstrap.sh with fleet fixes, remove duplicate registry key code 2020-11-16 16:51:23 -08:00
Chris LongandGitHub 71bb917b12 Merge pull request #564 from kernel-sanders/master 
Fix issues with fleet, ansible, and splunk (#563)
 2020-11-16 16:48:58 -08:00
Chris LongandGitHub cf336b578a Actually fix Issue #558 2020-11-15 08:46:44 -08:00
Chris LongandGitHub aa787f22c0 Update install-evtx-attack-samples.ps1 2020-11-14 23:39:36 -08:00
Chris LongandGitHub 27a41df46b Fix typo 2020-11-14 23:19:53 -08:00
Chris LongandGitHub 5ce28c7ca1 Create logger_variables.sh 2020-11-14 20:41:10 -08:00
Chris LongandGitHub 8b0b43f2e9 Merge pull request #560 from clong/logger_bootstrap_rename 
Rename bootstrap.sh -> logger_bootstrap.sh
 2020-11-14 20:39:12 -08:00
Chris Long 6bd07be431 Rename bootstrap.sh -> logger_bootstrap.sh 2020-11-14 19:09:52 -08:00
Chris LongandGitHub 20e34c4130 Fix issue 558 
- Fixes 558
- Fixes the CredentialGuard check
- Write-Error -> Write-Host
 2020-11-14 08:23:46 -08:00
Chris Long 92f7d91769 Backporting updates this role 2020-11-09 23:46:17 -08:00
Chris LongandGitHub 6e203d4d0e Merge pull request #554 from clong/kolide_to_fleetdm 
Kolide -> FleetDM
 2020-11-08 23:35:44 -08:00
Chris LongandGitHub 310a38e604 Update bootstrap.sh 2020-11-08 23:35:01 -08:00
Chris Long 821e9a65b9 Merge branch 'master' of https://github.com/clong/detectionlab 2020-11-08 22:55:04 -08:00
Chris Long 0db18b0859 Resolving Issue #553 2020-11-08 22:54:45 -08:00
Chris LongandGitHub d10f0852cc Merge pull request #552 from sukster/patch-1 
ESXi Terraform Provider automatic installation
 2020-11-08 21:56:34 -08:00
Chris LongandGitHub b1a4d32dfa Merge pull request #549 from juju4/devel 
Azure/Ansible: improve idempotency
 2020-11-07 15:44:40 -08:00
Chris LongandGitHub fc5637fc29 Merge branch 'master' into devel 2020-11-07 15:44:32 -08:00
Chris LongandGitHub ae023bcc46 Merge pull request #550 from sukster/master 
Open VNC ports on the firewall (automated way)
 2020-11-07 15:43:01 -08:00
Chris Long 3fb36effed Use /usr/bin/env bash instead of /bin/bash for scripts 2020-11-05 22:32:03 -08:00
Chris LongandGitHub e31479485c Merge pull request #547 from clong/esxi_fixes 
ESXi Bugfixes - Use only 2 network adapters instead of 3
 2020-11-05 14:38:38 -08:00
Chris Long 0d250b679f ESXi Bugfixes - Use only 2 network adapters instead of 3 2020-11-05 14:36:37 -08:00
Chris LongandGitHub b3b4715f49 Merge pull request #544 from znb/master 
Small addition for the Ansible fork() issue
 2020-11-04 16:42:06 -08:00
Chris LongandGitHub c68da5ca44 Update ESXi docs 
Note about MacOS Ansible fork() error from https://github.com/clong/DetectionLab/issues/543
 2020-11-03 12:38:04 -08:00
Chris LongandGitHub 4e42131b63 Merge pull request #542 from clong/refix-ci 
Verify CI Pipeline Build
 2020-11-01 12:23:19 -08:00
Chris LongandGitHub 2c1f422da6 Update build_machine_bootstrap.sh 2020-11-01 09:36:48 -08:00
Chris LongandGitHub 54dadd198b Merge pull request #541 from clong/circle_build_steps_fix 
Fixing CircleCI Build Steps
 2020-10-31 22:10:28 -07:00
Chris Long fa0bc1cbbd EOF needs to be in quotes 2020-10-31 17:32:51 -07:00
Chris Long 1a84e03d47 Remove args 2020-10-31 16:30:00 -07:00
Chris Long 9315f80370 Fix path 2020-10-31 15:14:54 -07:00
Chris Long 3df9a91bec Simplify this 2020-10-31 14:58:41 -07:00
Chris Long fce294c7b0 Fixing CircleCI Build Steps 2020-10-29 23:28:51 -07:00
Chris LongandGitHub 892978fd2e Merge pull request #540 from aancw/master 
Update ESXi Provider to josenk/esxi
 2020-10-29 16:32:42 -07:00
Chris LongandGitHub 54d7d4d454 Merge pull request #537 from sean-code/esxi-splunk-threathunting-fix 
ESXi: Add missing commands for splunk ThreatHunting app that existed in vagrant bootstrap file
 2020-10-19 17:50:58 -07:00
Chris Long f75231b76e Fixing Issue #535 2020-10-16 22:43:56 -07:00
Chris LongandGitHub 023b9acd8d Fix typo 2020-10-16 15:31:11 -07:00
Chris LongandGitHub 51b6599c39 Add WINS server config 2020-10-15 18:52:49 -07:00
Chris LongandGitHub ed424776fc Merge pull request #534 from aancw/master 
Update README packer for ESXI 7.0 support
 2020-10-15 13:48:40 -07:00
Chris Long aef71a10d1 Attempt to fix issue 517 2020-10-14 23:04:53 -07:00
Chris Long 483a8f7d13 Update WEF ansible role for evtx-event-samples 2020-10-04 11:36:44 -07:00
Chris LongandGitHub 142c4524d7 Merge pull request #528 from ZeArioch/update_gpo_rdp 
Fix bug with "Allow Domain Users RDP" GPO
 2020-10-04 11:29:39 -07:00
Chris LongandGitHub ea64a14371 Adding EVTX-ATTACK-SAMPLES acknowledgement 2020-09-30 17:01:02 -07:00
Chris LongandGitHub 456124149e Adding evtx_attack_samples Splunk index 2020-09-30 16:59:01 -07:00
Chris LongandGitHub 08b88573e7 Merge pull request #530 from clong/add_ata_to_box 
Adding ATA to Packer image, adding evtx-attack-samples
 2020-09-30 15:25:21 -07:00
Chris LongandGitHub 5732a51cde Merge branch 'master' into add_ata_to_box 2020-09-30 15:25:13 -07:00
Chris LongandGitHub 47850f00f7 Merge pull request #527 from jwmoss/patch-1 
Updated iso_name & SHA256
 2020-09-30 05:30:08 -07:00
Chris Long ff3e595235 Adding ATA to Packer image, adding evtx-attack-samples 2020-09-29 17:36:32 -07:00
Chris LongandGitHub aa51e77663 nits 2020-09-23 23:58:06 -07:00
Chris LongandGitHub c7d5259723 Update sponsors on README 
Thanks @olliencc !
 2020-09-23 23:48:46 -07:00
Chris LongandGitHub 3b016fa989 Merge pull request #524 from p-zim/master 
Check if PurpleSharp folder already exists
 2020-09-23 23:41:58 -07:00
Chris LongandGitHub ee16760546 Merge pull request #522 from lnxg33k/master 
Add a logrotate config for Suricata
 2020-09-21 23:06:52 -07:00
Chris LongandGitHub bae5572a6c Merge pull request #521 from kithack/master 
Enable Sysprep for Windows 2016 LibVirt build
 2020-09-21 12:50:33 -07:00
Chris LongandGitHub d01f9fbc74 Update README.md 2020-09-20 21:52:23 -07:00
Chris LongandGitHub ca9346338c Merge pull request #520 from clong/try_catch_ping 
Add exception handling for ping.detectionlab.network requests
 2020-09-20 21:14:08 -07:00
Chris LongandGitHub 7c539edcc7 Update provision.ps1 2020-09-20 21:13:50 -07:00
Chris LongandGitHub cc63e1dfb1 Update bootstrap.sh 2020-09-20 21:11:14 -07:00
Chris LongandGitHub e3365d827a Improve velociraptor release URL resolution 
The Velociraptor project sometimes creates releases that don't follow a URL convention and add a "-1" to the build number and URL. This update should help handle those cases.
 2020-09-16 15:46:27 -07:00
Chris LongandGitHub 7b915c6c16 Updating sponsors 2020-09-16 11:08:07 -07:00
Chris Long 086df6f534 Update ESXI netplan, de-hardcode Velociraptor URL 2020-09-07 23:19:04 -07:00