e2752458d4
bump elk to 7.17.0 to support 8.0.1 in 22.x
2022-03-18 16:23:27 +00:00
cac7cdcec6
fix data fields with regard to the request field, log4pot, nginx
2022-01-17 17:10:48 +01:00
fb49a77180
tweaking, json_batch transfer to hive
2022-01-07 15:41:57 +00:00
788a4c4f98
prepare for new attack map feature
...
tweaking, cleanup
2022-01-04 16:16:27 +00:00
68b080a3a8
Work in progress!
...
This is the foundation for the distributed T-Pot feature,
highly work in progress, only works with local docker image builds,
will be available for prod for upcoming T-Pot 22xx.
2022-01-03 18:24:17 +00:00
ef1a1fa057
Merge branch 'master' of https://github.com/telekom-security/tpotce
2021-12-21 11:37:18 +00:00
daf41b4b71
tweaking
2021-12-21 11:36:38 +00:00
aaccb43471
bump elk stack to 7.16.2
...
ELK 7.16.2 includes log4j 2.17.0 to address latest issues
2021-12-20 11:17:18 +00:00
b0339610a2
Prep for Log4Pot integration
2021-12-16 20:25:40 +00:00
a98b447556
ELK 7.16.1 fixes log4j vulns.
2021-12-13 15:59:48 +00:00
5f29516197
tweaking
2021-12-08 23:55:13 +00:00
ce39e1bd4f
logstash logging for honeypots
2021-11-19 23:20:13 +00:00
c9b909e51d
finetune new honeypots logging
2021-11-02 19:13:28 +00:00
ea624351b5
finetuning logstash.conf for new honeypots
2021-10-29 16:28:16 +00:00
c1eb9f7216
logstash parsing for ddospot, hellpot
2021-10-28 18:57:55 +00:00
1a844d13ba
start integrating new honeypots into ELK
2021-10-27 16:14:52 +00:00
348a5d572b
bump elastic stack to 7.15.1
2021-10-26 13:56:38 +00:00
9de1bdd0b5
tweaking, bump elastic stack to 7.14.1, rebuild dashboards
2021-09-15 15:58:44 +00:00
06ef8850fe
prep for ELK 7.13.4, start full integration of new honeypots
2021-08-25 15:04:27 +00:00
4cb84166c5
bump ewsposter to 1.2.0, elk stack to 7.13.2
2021-06-28 16:30:40 +00:00
f51ab7ec0f
prepare to bump elastic stack to 7.13.1
2021-06-10 17:03:22 +00:00
0c5ab33b8a
bump elastic stack to 7.12.1
2021-05-17 16:32:03 +00:00
92925cecbd
bump dicompot to latest master
2020-10-27 21:30:33 +00:00
54a6a944aa
prep for ipphoney
2020-08-25 12:25:59 +00:00
b86d2c715b
prep for ipphoney
2020-08-24 21:36:08 +00:00
5080151b7c
prep for elk 7.9
2020-08-24 10:35:46 +00:00
16a7cdb975
tweaking
...
Update logstash config for new Dicompot fields
Revert Dionaea back to 0.8.0, latest master was unstable
2020-06-26 23:48:48 +00:00
238a08b055
tweaking
...
cleanup index-pattern
add dicompot log to logstash
2020-06-24 13:21:29 +00:00
99d8cf9b32
fix for query fields
2020-06-24 10:22:09 +00:00
81c6351cf1
fix for keeping daily index
2020-06-23 21:40:38 +00:00
a396356785
add honeysap logstash config
2020-06-19 22:53:56 +00:00
2882668826
Add a new elasticsearch honeypot
...
adjust installer
adjust elasticpot configs to T-Pot's environment
create Dockerfile
adjust logstash config
update Readme
2020-06-17 18:09:59 +00:00
680194adf7
prep for new listbot FQDN
2020-05-12 09:19:09 +00:00
ed73d83317
Update update.sh
2020-04-22 17:48:32 +02:00
1a7b3b3795
Load listbot data from OTC
2020-04-22 16:50:41 +02:00
73e1842c16
offload listbot from netlify CDN
2020-04-02 13:12:11 +00:00
b9da9f04af
adjust default field
2020-02-03 12:18:43 +00:00
984ba958fb
logstash template not upgraded
...
with daily index enabled logstash will not be able to put new events into ES
simple solution, just deleting logstash template upon logstash start and leave it to logstash to upload the latest template
.
2020-02-01 14:08:23 +00:00
5a4724bcba
elk 7.x dev test
2020-01-31 14:21:55 +00:00
f110eb08b0
prepare for mailoney json logging
2020-01-22 12:17:30 +00:00
1d0aad3b34
tweak logstash.conf for citrixhoneypot
2020-01-16 18:04:29 +00:00
a6ed6613a5
prepare citrixhoneypot for ELK integration
2020-01-16 15:13:58 +00:00
bf39c0f5b2
bump elastic stack to 6.7.2
2019-08-15 15:38:12 +00:00
31d7707d19
download instead of git pull
...
download translation maps rather than running a git pull
translation maps will now be bzip2 compressed to reduce traffic to a minimum
fixes #432
2019-08-14 14:43:47 +00:00
bbf226aeda
remove glastopf
2019-06-03 19:57:50 +00:00
a7e553efe9
still working on fatt
2019-06-03 16:13:58 +00:00
f870c8e885
continue working on fatt
2019-06-03 10:22:07 +00:00
867bda6ad7
increase number of fields limit
...
#382
2019-05-31 15:34:29 +00:00
c09547e3a4
adjust group and permissions for /data
2019-05-08 11:16:48 +00:00
e8d8773863
tweaking
2019-03-19 11:08:23 +00:00
