 Chris LongandGitHub
|
b3a069dc31
|
Merge pull request #468 from clong/osquery_refactor
Refactor osquery and add retry-loop for OU
|
2020-06-21 14:04:30 -07:00 |
|
|
Chris Long
|
ab5c0b2452
|
Standardize logging
|
2020-06-21 12:28:44 -07:00 |
|
|
Chris Long
|
c735f52934
|
Fixing the loop logic
|
2020-06-21 11:49:18 -07:00 |
|
|
Chris Long
|
ded6656cb7
|
Update operator
|
2020-06-21 09:16:50 -07:00 |
|
|
Chris Long
|
7858530c17
|
Remove from Ansible too
|
2020-06-21 00:28:38 -07:00 |
|
|
Chris Long
|
565ca261f1
|
Fix quote escaping
|
2020-06-20 23:51:10 -07:00 |
|
|
Chris Long
|
d466f343c4
|
Fixing shellcheck lint output
|
2020-06-20 19:14:09 -07:00 |
|
|
Chris Long
|
aa7f76d6cc
|
typo
|
2020-06-20 18:57:13 -07:00 |
|
|
Chris Long
|
201de78750
|
Merge branch 'osquery_refactor' of https://github.com/clong/detectionlab into osquery_refactor
|
2020-06-20 18:55:50 -07:00 |
|
|
Chris Long
|
fbc6c0a767
|
Add linter and update issue_template
|
2020-06-20 18:55:26 -07:00 |
|
|
Chris LongandGitHub
|
8fca376f4a
|
Merge branch 'master' into osquery_refactor
|
2020-06-20 18:34:28 -07:00 |
|
|
Chris Long
|
bb12246e74
|
Refactor osquery and add retry-loop for OU
|
2020-06-20 18:32:28 -07:00 |
|
|
Chris LongandGitHub
|
9e6670b1e2
|
Update fix-windows-expiration.ps1
Add try/catch for the regex matching
|
2020-06-20 16:32:55 -07:00 |
|
|
Chris LongandGitHub
|
55de552173
|
Updates, add link to Azure README
|
2020-06-15 20:48:27 -07:00 |
|
|
Chris LongandGitHub
|
2708f4fa4e
|
Update install-microsoft-ata.ps1
Add additional write-host statements
|
2020-06-15 00:53:35 -07:00 |
|
|
Chris LongandGitHub
|
a64fc9e641
|
Merge pull request #465 from clong/azure_bugfix1
Azure bugfixes
|
2020-06-15 00:34:08 -07:00 |
|
|
Chris Long
|
518101dc40
|
Azure bugfixes
|
2020-06-15 00:29:45 -07:00 |
|
|
Chris LongandGitHub
|
8829697fab
|
Update inventory.yml
Updating placeholder values
|
2020-06-14 22:25:12 -07:00 |
|
|
Chris LongandGitHub
|
b3a3b1fa56
|
Remove ESXi from verify checks
Issue #463
|
2020-06-14 21:47:24 -07:00 |
|
|
Chris LongandGitHub
|
c8658be3f5
|
Merge pull request #462 from clong/azure_dev
Add Support for Azure
|
2020-06-14 18:57:55 -07:00 |
|
|
Chris Long
|
b5887c1d5a
|
Fix file paths for TF
|
2020-06-14 18:56:14 -07:00 |
|
|
Chris LongandGitHub
|
a033ea2b60
|
Update configure-ou.ps1
|
2020-06-14 17:53:06 -07:00 |
|
|
Chris LongandGitHub
|
aeef254d28
|
Remove AMI chart from Terraform README
|
2020-06-14 15:02:10 -07:00 |
|
|
Chris LongandGitHub
|
7f837cbb1d
|
Typos
|
2020-06-13 22:43:10 -07:00 |
|
|
Chris LongandGitHub
|
1dbe8a75b2
|
Add a retry to configure-ou.ps1
|
2020-06-13 22:35:15 -07:00 |
|
|
Chris LongandGitHub
|
5645cfcb45
|
Merge pull request #459 from clong/azure-dont-change-dns
Don't change adapter DNS settings in Azure
|
2020-06-13 21:51:17 -07:00 |
|
|
Chris LongandGitHub
|
dfa0a09d43
|
Update create-domain.ps1
|
2020-06-13 21:50:00 -07:00 |
|
|
Chris LongandGitHub
|
f8cc4a9ec7
|
Update join-domain.ps1
|
2020-06-13 21:49:41 -07:00 |
|
|
Chris LongandGitHub
|
add22be68b
|
Update create-domain.ps1
Don't change DNS settings for azure provisioning
|
2020-06-13 21:47:59 -07:00 |
|
|
Chris LongandGitHub
|
69320e2b16
|
Update install-botsv3.sh
Add Splunk restart after app installation
|
2020-06-08 17:57:37 -07:00 |
|
|
Chris LongandGitHub
|
14e47a9650
|
Remove ' from ansible comment
Ansible barfs with an `ERROR! failed at splitting arguments, either an unbalanced jinja2 block or quotes` message when comments contain apostrophes
|
2020-06-02 00:04:18 -07:00 |
|
|
Chris LongandGitHub
|
ccd9dd3ba8
|
Merge pull request #457 from clong/exi_osquery_fixes
ESXi and Osquery Fixes
|
2020-06-01 22:55:38 -07:00 |
|
|
Chris Long
|
74dda07942
|
Update ESXi bootstrap too
|
2020-06-01 22:53:36 -07:00 |
|
|
Chris Long
|
7dc7e6916c
|
ESXi RAM Bump, osquery fixes
|
2020-06-01 22:51:14 -07:00 |
|
|
Chris LongandGitHub
|
1980665355
|
Merge pull request #456 from clong/osquery_status_filter
Filter noisy osquery status info messages from Splunk
|
2020-06-01 21:48:23 -07:00 |
|
|
Chris LongandGitHub
|
2823f140d2
|
Update props.conf
|
2020-06-01 21:47:32 -07:00 |
|
|
Chris LongandGitHub
|
c55b3d6def
|
Update transforms.conf
|
2020-06-01 21:46:22 -07:00 |
|
|
Chris LongandGitHub
|
da366bcce6
|
Update install-microsoft-ata.ps1
|
2020-06-01 01:58:53 -07:00 |
|
|
Chris LongandGitHub
|
5877ebaf82
|
BadBlood and Hunting for Beacons acknowledgements
|
2020-06-01 01:43:58 -07:00 |
|
|
Chris LongandGitHub
|
9ddc914c95
|
Add BadBlood download to install-redteam.ps1
|
2020-06-01 01:40:54 -07:00 |
|
|
Chris LongandGitHub
|
10f260bf73
|
Update logger_dashboard.xml
|
2020-06-01 01:21:22 -07:00 |
|
|
Chris LongandGitHub
|
dcd69ea6cf
|
Merge pull request #451 from clong/expiration_ps1
Add Powershell script to resolve expiration issues
|
2020-05-19 00:29:07 -07:00 |
|
|
Chris Long
|
6312f4740b
|
Add Powershell script to resolve expiration issues
|
2020-05-19 00:26:19 -07:00 |
|
|
Chris LongandGitHub
|
d686a50f81
|
Adding availability_zone to terraform.tfvars.example
us-west-1a doesn't support t2 or t3 medium instances anymore
|
2020-05-11 20:05:01 -07:00 |
|
|
Chris LongandGitHub
|
79a2a03b5c
|
Fixing retry logic in install-microsoft-ata.ps1
Fixes issue #444
|
2020-05-11 16:59:50 -07:00 |
|
|
Chris LongandGitHub
|
ca515405a5
|
Update install-redteam.ps1
|
2020-05-10 12:51:32 -07:00 |
|
|
Chris LongandGitHub
|
bb134623b6
|
Merge pull request #443 from clong/ens5_terraform_adapter
Update Terraform Network Adapter to ens5 and use t3 instances
|
2020-05-09 16:32:51 -07:00 |
|
|
Chris LongandGitHub
|
02b12fdb46
|
Merge branch 'master' into ens5_terraform_adapter
|
2020-05-09 16:32:43 -07:00 |
|
|
Chris Long
|
78ff2086b5
|
16.04 -> 18.04
|
2020-05-09 16:31:52 -07:00 |
|
|
Chris Long
|
692265b7c0
|
Update Terraform Network Adapter to ens5 and use t3 instances where possible
|
2020-05-09 16:30:11 -07:00 |
|
|
Chris LongandGitHub
|
5398841cfe
|
Update bootstrap.sh
|
2020-05-09 13:38:57 -07:00 |
|
|
Chris LongandGitHub
|
50f56a90ee
|
VMware Vagrant Utility 1.0.7 -> 1.0.9
|
2020-05-09 12:48:02 -07:00 |
|
|
Chris LongandGitHub
|
745a4cd81b
|
Merge pull request #441 from clong/vagrant_2_2_9
Vagrant 2.2.7 -> 2.2.9
|
2020-05-09 12:43:53 -07:00 |
|
|
Chris Long
|
6f27cdb281
|
Vagrant 2.2.7 -> 2.2.9
|
2020-05-09 12:43:08 -07:00 |
|
|
Chris LongandGitHub
|
2659539afa
|
Update install-redteam.ps1
|
2020-05-09 12:41:52 -07:00 |
|
|
Chris LongandGitHub
|
c8d6cf433d
|
Update install-redteam.ps1
|
2020-05-07 20:55:10 -07:00 |
|
|
Chris LongandGitHub
|
1b64af6e0b
|
Fixing path
|
2020-05-07 14:18:20 -07:00 |
|
|
Chris LongandGitHub
|
614f3148e3
|
More Defender removal code
|
2020-05-07 14:07:21 -07:00 |
|
|
Chris LongandGitHub
|
7c2006b704
|
Merge pull request #437 from clong/update_gpo_ena
Update DC Auditing GPO and Add Packer Script for ENA
|
2020-05-03 21:37:54 -07:00 |
|
|
Chris LongandGitHub
|
23e8e288f9
|
Merge branch 'master' into update_gpo_ena
|
2020-05-03 17:13:59 -07:00 |
|
|
Chris Long
|
aeecd1b756
|
Update DC Auditing GPO and Add Packer Script for ENA
|
2020-05-03 17:12:05 -07:00 |
|
|
Chris LongandGitHub
|
9e9120f02b
|
Implementing blacklist on wef_inputs.conf
Resolving Issue #436
|
2020-05-03 17:08:22 -07:00 |
|
|
Chris LongandGitHub
|
f0a7b1481f
|
Typo
|
2020-05-02 22:21:24 -07:00 |
|
|
Chris LongandGitHub
|
b314066e06
|
Fixing Splunk regex
|
2020-05-02 22:20:48 -07:00 |
|
|
Chris LongandGitHub
|
c8514a49a4
|
Merge pull request #434 from olafhartong/patch-1
Added missing subscription forward rule
|
2020-05-02 12:17:39 -07:00 |
|
|
Chris LongandGitHub
|
6de7ffa8d5
|
Reverting last update to install-redteam.ps1
|
2020-04-25 23:03:03 -07:00 |
|
|
Chris LongandGitHub
|
3f12ac524a
|
Update install-redteam.ps1
|
2020-04-25 12:20:25 -07:00 |
|
|
Chris LongandGitHub
|
7ba7b6904b
|
Merge pull request #431 from clong/update_readme_esxi
Update README.md and ESXi logger code
|
2020-04-23 19:38:06 -07:00 |
|
|
Chris LongandGitHub
|
1cb90374f6
|
Merge branch 'master' into update_readme_esxi
|
2020-04-23 19:37:58 -07:00 |
|
|
Chris Long
|
71206dc243
|
Update README.md and ESXi logger code
|
2020-04-23 19:35:26 -07:00 |
|
|
Chris LongandGitHub
|
9f14610928
|
Update README.md
|
2020-04-18 23:23:36 -07:00 |
|
|
Chris LongandGitHub
|
203d7a4638
|
Fixing eth1 ip detection logic
Interfaces can have multiple IP addresses, causing this step to fail in Virtualbox
|
2020-04-18 22:53:35 -07:00 |
|
|
Chris LongandGitHub
|
78130b2b78
|
Merge pull request #427 from clong/nullqueue2
Add some Splunk nullQueues for noisy events
|
2020-04-18 16:00:50 -07:00 |
|
|
Chris Long
|
d1d0566773
|
Add some Splunk nullQueues for noisy events
|
2020-04-18 15:59:54 -07:00 |
|
|
Chris LongandGitHub
|
c238b8e21f
|
Add hosts entry for WEF on the DC
Fixes a DNS problem with Microsoft ATA
|
2020-04-18 15:38:05 -07:00 |
|
|
Chris LongandGitHub
|
e9804b4c69
|
Merge pull request #425 from clong/win10_activation
Fix Win10 Activation Issue on Terraform
|
2020-04-18 13:23:48 -07:00 |
|
|
Chris Long
|
091c221a87
|
Revert AZ change
|
2020-04-18 13:23:13 -07:00 |
|
|
Chris Long
|
f81f715147
|
Fix Win10 Activation Issue on Terraform
|
2020-04-18 13:19:28 -07:00 |
|
|
Chris LongandGitHub
|
7c0b8907db
|
Fix path for install-utilities.ps1
|
2020-04-17 22:02:29 -07:00 |
|
|
Chris LongandGitHub
|
37d7d1dfd1
|
Fixing Splunk app filename
|
2020-04-17 13:58:12 -07:00 |
|
|
Chris LongandGitHub
|
60f89345af
|
Override Bootstrap DNS Settings
|
2020-04-16 22:00:05 -07:00 |
|
|
Chris Long
|
3fde431699
|
Small logger bugfixes
|
2020-04-14 13:29:58 -07:00 |
|
|
Chris LongandGitHub
|
f38e45e608
|
Merge pull request #420 from clong/logger_bugfix
Fixing logger bugs, updating vm tools, updating Win10 ISO
|
2020-04-13 00:10:00 -07:00 |
|
|
Chris LongandGitHub
|
03c96430a5
|
Merge branch 'master' into logger_bugfix
|
2020-04-13 00:09:52 -07:00 |
|
|
Chris Long
|
a67ce6efb5
|
Fixing logger bugs, updating vm tools, updating Win10 ISO
|
2020-04-13 00:05:49 -07:00 |
|
|
Chris LongandGitHub
|
ffffcf3cce
|
Update main.tf
|
2020-04-09 02:30:38 -07:00 |
|
|
Chris LongandGitHub
|
dbfa998ec2
|
Update install-windows_ta.ps1
|
2020-04-08 00:20:01 -07:00 |
|
|
Chris LongandGitHub
|
0c82c97576
|
Merge pull request #414 from MHaggis/master
Bootstrap.sh Error fixes
|
2020-04-07 22:57:07 -07:00 |
|
|
Chris Long
|
fd804a083d
|
Fixing the Splunk nullqueue
|
2020-03-28 02:30:06 -07:00 |
|
|
Chris Long
|
c7e013558a
|
Resolving merge conflicts
|
2020-03-27 14:58:18 -07:00 |
|
|
Chris Long
|
34d8a39c43
|
Multiple bugfixes, add dashboard
|
2020-03-27 14:53:04 -07:00 |
|
|
Chris LongandGitHub
|
0f5faccf46
|
Update main.yml
|
2020-03-26 13:34:20 -07:00 |
|
|
Chris LongandGitHub
|
9437e74c3e
|
Update bootstrap.sh
|
2020-03-26 11:45:37 -07:00 |
|
|
Chris LongandGitHub
|
6525456492
|
Update install-choco-extras.ps1
|
2020-03-25 22:46:55 -07:00 |
|
|
Chris LongandGitHub
|
b2cf652fdc
|
Update install-utilities.ps1
|
2020-03-25 22:46:19 -07:00 |
|
|
Chris LongandGitHub
|
648ecec2ad
|
Merge pull request #408 from NemoEht/patch-4
Update to ubuntu1804_esxi.json with ssh_timeout
|
2020-03-23 22:53:43 -07:00 |
|
|
Chris LongandGitHub
|
ce4f9b482a
|
Merge branch 'master' into patch-4
|
2020-03-23 22:53:32 -07:00 |
|
|
Chris LongandGitHub
|
47f2d618ac
|
Merge pull request #407 from clong/autoruns_wait
Add a wait for autoruns scheduled task
|
2020-03-23 22:52:36 -07:00 |
|
|
Chris Long
|
242e1a7cf3
|
Adding a failover for the ISO download
|
2020-03-23 22:51:43 -07:00 |
|
|
Chris Long
|
5dcc9965d3
|
Add a wait for autoruns scheduled task
|
2020-03-23 17:27:57 -07:00 |
|