trinitor/DetectionLab
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
191 Commits 1 Branch 0 Tags
c0da758300a46e1d7352f23af7a22981b70a7243
Commit Graph

191 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Chris Long
c0da758300 Adding CONTRIBUTING.md 2018-12-22 21:39:53 -08:00
Chris Long
147a714aee Merge pull request #182 from clong/require_circleci_approval 
Update CircleCI job to include approval workflow
 2018-12-22 15:41:45 -08:00
Chris Long
28a0df75bb Update CircleCI job to include approval workflow 2018-12-22 15:32:43 -08:00
Chris Long
e15bf00ecb Merge pull request #181 from clong/fleet_update 
Update Fleet and use Fleetctl for pack imports.
 2018-12-21 15:21:56 -08:00
Chris Long
05f1f41930 Update osquery paths to reflect updates to repo 2018-12-20 19:02:08 -08:00
Chris Long
91012842b1 Update Fleet and use Fleetctl for pack imports. 2018-12-20 14:48:59 -08:00
Chris Long
0f7e4602e9 Updating file hashes on README.md [ci skip] 2018-12-18 11:29:25 -08:00
Chris Long
239e2acf0d Merge pull request #178 from clong/dec_box_refresh 
Updating VMware and Virtualbox boxes & README.md
 2018-12-15 11:11:14 -08:00
Chris Long
87ba56f7c6 Don't re-run CircleCI when merged into master 2018-12-14 21:02:59 -08:00
Chris Long
a9b48a9d75 Updating VMware and Virtualbox boxes & README.md 2018-12-14 20:25:50 -08:00
Chris Long
602b0e1431 Merge pull request #177 from clong/threat_hunting [ci skip] 
Adding Olaf's Threat Hunting App. Fixes. Updates. [ci skip]
 2018-12-11 15:42:55 -08:00
Chris Long
75c91331aa Merge branch 'master' into threat_hunting 2018-12-11 00:55:41 -08:00
Chris Long
8b9178685a Adding Olaf's Threat Hunting App. Fixes. Updates. 2018-12-11 00:52:46 -08:00
Chris Long
0f5d5b95b4 Add a backup for CI build provisioning 2018-12-07 00:17:34 -08:00
Chris Long
52faea3e67 Override virtualbox NIC type 
Addressing  https://github.com/clong/DetectionLab/issues/170
 2018-12-06 23:47:26 -08:00
Chris Long
c31165e0cd Merge pull request #174 from clong/vagrant_2.2.2 
Update Vagrant in CI to 2.2.2 and drop privs for windows shell provisioning steps
 2018-12-05 15:48:56 -08:00
Chris Long
9e19393138 Ignore Microsoft-Windows-LiveId when clearing event channels 
Addresses https://github.com/clong/DetectionLab/issues/171
 2018-12-05 13:46:38 -08:00
Chris Long
e547dc1ff9 Set privilege to false for all windows shell cmds 
https://github.com/clong/DetectionLab/issues/172
 2018-12-05 01:22:10 -08:00
Chris Long
c0370af30a Updating CI Vagrant & Packer versions 2018-12-05 01:20:36 -08:00
Chris Long
9b255e9398 Packer: Update guest additions for VMware and VirtualBox [ci skip] 2018-10-30 18:25:26 -07:00
Chris Long
553ecbaaf4 Add TLSv1.2 support to install-bginfo.ps1 2018-10-30 14:13:50 -07:00
Chris Long
d763d66dc2 Drop the firewall in Win10 host [ci skip] 2018-09-25 22:48:26 -07:00
Chris Long
f1edbb10bd Merge pull request #140 from dmi3mis/patch-3 
Add code to section "Excluding NAT interface from DNS"
 2018-09-25 22:44:55 -07:00
Chris Long
3af54d5003 Merge branch 'master' into patch-3 2018-09-25 22:44:47 -07:00
Chris Long
63e4b29e4a Add boot timeout to win10 host in Vagrantfile [ci skip] 2018-09-13 10:40:00 -07:00
Chris Long
a6bcbab794 Fix typo in bootstrap [ci skip] 2018-09-08 17:39:50 -07:00
Chris Long
d955b2c027 Merge pull request #150 from clong/donations 
Update README hashes, add donation buttons [ci skip]
 2018-09-08 14:20:58 -07:00
Chris Long
48b01104e1 Update README hashes, add donation buttons [ci skip] 2018-09-08 14:18:17 -07:00
Chris Long
0f667e3818 Give suricata time to start [ci skip] 
The pgrep check is failing if Suricata doesn't start fast enough
 2018-09-08 09:55:36 -07:00
Chris Long
053205a025 Merge pull request #149 from clong/suricata_and_ip_fixes 
Multiple fixes, additions [ci skip]
 2018-09-07 22:16:22 -07:00
Chris Long
6ad4dcf2b4 Update CI env, add some packer changes 2018-09-07 18:07:31 -07:00
Chris Long
9a82f140f4 Actually add the app 2018-09-07 14:58:11 -07:00
Chris Long
a95143a2d3 Fix formatting, add Splunk ASN lookup app 2018-09-07 14:57:53 -07:00
Chris Long
ba7784e0e8 Multiple fixes, additions 2018-09-06 22:58:36 -07:00
Chris Long
ef84579aa7 Merge pull request #139 from dmi3mis/patch-1 
Rename virtualbox VM names to predictable [ci skip]
 2018-09-05 08:41:36 -07:00
Chris Long
4529c7fd0b Merge branch 'master' into patch-1 2018-09-05 08:41:25 -07:00
Chris Long
0807060af9 Merge pull request #145 from jbeley/master 
added sed line to fix suricata build [ci skip]
 2018-09-05 08:36:01 -07:00
Dmitry
f82a2a0cbb Merge branch 'master' into patch-1 2018-09-05 22:26:18 +07:00
Dmitry
04318c0bff Added vm names to vmmare providers 2018-09-05 22:24:49 +07:00
Jeff Beley
234646af53 added sed line to fix suricata build 2018-09-05 02:57:34 -05:00
Chris Long
16ecf5bbc8 Add success notification for reloaded vagrants to build.sh [ci skip] 
If a host finished provisioning successfully after a reload, it would not print the "success!" message. This commit fixes that. This is potentially what caused the problem in #135. [ci skip]
 2018-09-04 07:51:21 -07:00
Dmitry
4d21d2e885 Add code to section "Excluding NAT interface from DNS" 
Hi!
I want  you to add code to subj section. 
Here my qwuick and dirty example of a code
Here the list what it proposed to do.
1. remove NAT adapters IP Resource records in DNS Server.
2. Uncheck option "Register this connection's addresses in dns"
3. Remove all RR from NAT if already registered. (unnessesary, if NAT adapter RR not exist)
4. restart DNS server service.
 2018-09-04 15:28:44 +07:00
Dmitry
ac1cab0170 Rename virtualbox VM names to predictable 
Hi!
I suggest you to add this to make virtualbox vm names more predictable.
Now i suspect that virtualbox vm names are slightly random.

cfg.vm.provider "virtualbox" do |vb, override|
...
vb.name = "name.windomain.local"
...
end
 2018-09-04 13:36:04 +07:00
Chris Long
98de0cd20d Updating README after bro/suricata [ci skip] 
[ci skip]
 2018-09-03 21:23:14 -07:00
Chris Long
e385956ff9 Merge pull request #137 from jbeley/master 
Add bro and suricata to detectionlab
 2018-09-03 21:20:41 -07:00
Jeff Beley
cf4193ac52 Merge branch 'master' of github.com:jbeley/DetectionLab 2018-09-03 08:50:28 -05:00
Jeff Beley
875c4c7a5a migrated to bro packge from opensuse.org 2018-09-03 08:50:13 -05:00
Chris Long
8ee53ad2c9 Merge branch 'master' into master 2018-08-29 20:07:48 -07:00
Chris Long
63d0c8a937 Update ISO url for Server2016 [ci skip] 
[ci skip]
 2018-08-29 10:20:44 -07:00
Jeff Beley
5501b69598 Added bro and suricata to the logger vagrant 
configured splunk to ingest both bro and suricata logs

reconfigured logger vagrant box to have 2 CPUs and 4GB of RAM
 2018-08-29 11:58:23 -05:00