infosecn1nja
/
HELK
mirror of https://github.com/infosecn1nja/HELK.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
597 Commits
4 Branches
12 Tags
262 MiB
Commit Graph

295 Commits (master)

Author SHA1 Message Date
Roberto Rodriguez e819bc892a Update Gemfile.lock 2020-02-15 00:11:54 -05:00
Roberto Rodriguez f78a2f0e63 Updating Gemfiles 2020-02-15 00:08:50 -05:00
Roberto Rodriguez 60a8c77734 fixing helk-logstash permissions bug 
https://github.com/hunters-forge/Blacksmith/issues/4
https://github.com/Cyb3rWard0g/HELK/issues/430
https://github.com/Cyb3rWard0g/HELK/issues/423
 2020-02-12 03:51:26 -05:00
neu5ron 5a1da7bd3d logstash docker modification for future permission errors 2020-02-04 21:08:50 -05:00
neu5ron 1d5e7375c3 keep in case need to re-add these lines 2020-01-31 17:29:32 -05:00
neu5ron 53842fbe5f forgot logging rotation 2020-01-31 17:20:42 -05:00
Nate Guagenti 0d23090f2e
Update helk_install.sh 
move comment
 2020-01-25 14:50:06 -05:00
troplolBE bea50be51e fix install script link creation 2020-01-25 19:31:32 +01:00
troplolBE 395c31b529 fix remove script error 2020-01-25 19:16:00 +01:00
neu5ron 52a9a7c02f add note 2020-01-25 12:03:26 -05:00
neu5ron f42e5907e1 add note 2020-01-25 11:19:14 -05:00
neu5ron a23c853c15 check Docker is running on all HELK builds before continuing install script 2020-01-25 11:17:23 -05:00
neu5ron c117e2207a proper string compare and link docker compose for sudo usage.. otherwise will error command not found ;) 2020-01-25 11:17:06 -05:00
neu5ron 8c6ad4eeb5 typo 2020-01-25 10:44:22 -05:00
neu5ron 7aee053352 update finding OTRF images, regex typo 2020-01-25 10:33:55 -05:00
neu5ron f557e8da02 set log.level for logstash trail versions to 'warn' 2020-01-24 22:13:42 -05:00
neu5ron 6add378bf1 - fix wait for kibana index logic 
- add logic to check if .security index exists for later usage
 2020-01-24 21:49:22 -05:00
neu5ron d1fc172f40 - detect, and then give user option (if it exists) to use persisted compose config 
- better logging/explanation.. well at least attempt to ;)
- add remove of OTRF docker images
 2020-01-24 20:39:16 -05:00
neu5ron c69b9372e5 call setup_firewall 2020-01-24 20:24:40 -05:00
neu5ron 462c490722 Merge branch 'pull/410' into scripts-helk_install_and_update 
# Conflicts:
#	docker/helk_install.sh
 2020-01-24 19:49:43 -05:00
neu5ron 924ebfa5b7 lets start kibana once .kibana index is up - that way, can troubleshoot and acesss elasticsearch with or without all data loaded! 2020-01-23 17:28:32 -05:00
neu5ron e5f24c3ecd http status code checking for user/pass submission 2020-01-23 17:27:56 -05:00
neu5ron c16bc4c2bf cleanup 2020-01-23 17:27:32 -05:00
neu5ron b143b0eb52 set reasonable batch size 2020-01-22 17:45:00 -05:00
neu5ron ce102c8328 use custom logstash, fixes some more things with plugins. additionally monitoring is not limited to x-pack only now. also, use same logstash.yml now too :) 2020-01-22 17:32:49 -05:00
neu5ron 9955e13b3c smarter index templates for base indexes 2020-01-22 17:10:12 -05:00
neu5ron d4130876bb verbiage updates 2020-01-22 17:09:52 -05:00
neu5ron efab24c259 set an index priority for .kibana index for faster starts 2020-01-22 17:09:43 -05:00
neu5ron 472203ab13 implement cluster health check as an even more efficient check of up/down 2020-01-22 17:08:55 -05:00
neu5ron 2825e2467d remove unneeded line 2020-01-22 17:06:26 -05:00
neu5ron a1541a01ee reduce sleep 2020-01-22 16:05:48 -05:00
neu5ron 118f135996 punctuation 2020-01-22 15:08:20 -05:00
neu5ron 84cdd88752 set consumer threads to 2 because have 2 partitions now :) 2020-01-22 15:06:40 -05:00
neu5ron 62c67029c6 update persist conf 2020-01-22 15:00:23 -05:00
neu5ron cf3dac54db script verbiage 2020-01-22 14:59:15 -05:00
neu5ron 6a6d4ac472 recommend to download new git updates 2020-01-22 13:58:08 -05:00
neu5ron 114144ac3f kafka optimization, better support group consumption, and more detailed documentation of some of the settings 2020-01-22 12:07:41 -05:00
neu5ron ae3275e6f1 elastic stack 7.5.2 2020-01-21 18:21:25 -05:00
neu5ron 20b25fad27 logstash plugin updates for 7.5.2 2020-01-21 18:20:37 -05:00
neu5ron f337515af1 fix for gem file locks 2020-01-21 18:19:21 -05:00
neu5ron f8cdb9c250 ignore none issues 2020-01-21 18:19:08 -05:00
tcastron 381f318ed0
Corrected variable mistake in script 2020-01-21 08:35:08 +01:00
neu5ron 50e3bb86ed beginning of persist configuration 
add build parameters to an info log
create helk directory in /usr/share/HELK
 2020-01-20 18:16:52 -05:00
neu5ron 2c1001f109 bash cleanup 2020-01-20 16:08:25 -05:00
neu5ron 212e9cdbc8 Merge branch 'master' of https://github.com/Cyb3rWard0g/HELK into scripts-helk_install_and_update 2020-01-20 11:16:42 -05:00
tcastron 0589382f9f
Update to work only with centos 2020-01-20 15:03:21 +01:00
tcastron 3ccf927ddf
Update helk remove script for firewall integration 2020-01-20 14:56:57 +01:00
tcastron 3ba34d89a0
Created firewall setup script 2020-01-20 13:55:48 +01:00
tcastron 3bd2000da8
Added firewall setup script to install script 2020-01-20 13:54:28 +01:00
tcastron a068dbe0bc
Fixed the script to be compliant with the new images 2020-01-16 09:12:19 +01:00