telekom-security/tpotce
1
0
Fork 0
mirror of https://github.com/telekom-security/tpotce.git synced 2025-07-02 01:27:27 -04:00
Code Issues Packages Projects Releases Wiki Activity

Add Beelzebub

Browse Source
This commit is contained in:
t3chn0m4g3
2024-09-04 21:45:00 +02:00
parent f41c15ec10
commit 429d74472c
16 changed files with 439 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
docker/elk/logstash/dist/http_output.conf vendored
View File

@ -29,6 +29,13 @@ input {
type => "Adbhoney"
}
# Beelzebub
file {
path => ["/data/beelzebub/log/beelzebub.json"]
codec => json
type => "Beelzebub"
}
# Ciscoasa
file {
path => ["/data/ciscoasa/log/ciscoasa.log"]
@ -253,6 +260,13 @@ filter {
}
}
# Beelzebub
if [type] == "Beelzebub" {
date {
match => [ "timestamp", "ISO8601" ]
}
}
# Ciscoasa
if [type] == "Ciscoasa" {
kv {

14
docker/elk/logstash/dist/logstash.conf vendored
View File

@ -29,6 +29,13 @@ input {
type => "Adbhoney"
}
# Beelzebub
file {
path => ["/data/beelzebub/log/beelzebub.json"]
codec => json
type => "Beelzebub"
}
# Ciscoasa
file {
path => ["/data/ciscoasa/log/ciscoasa.log"]
@ -253,6 +260,13 @@ filter {
}
}
# Beelzebub
if [type] == "Beelzebub" {
date {
match => [ "timestamp", "ISO8601" ]
}
}
# Ciscoasa
if [type] == "Ciscoasa" {
kv {

2
docker/elk/map/Dockerfile
View File

@ -13,7 +13,7 @@ RUN apk -U --no-cache add \
# Install from GitHub and setup
mkdir -p /opt && \
cd /opt/ && \
git clone https://github.com/t3chn0m4g3/t-pot-attack-map -b 2.2.0 && \
git clone https://github.com/t3chn0m4g3/t-pot-attack-map -b 2.2.1 && \
cd t-pot-attack-map && \
pip3 install --break-system-packages --upgrade pip && \
pip3 install --break-system-packages -r requirements.txt && \