Skip to content

Instantly share code, notes, and snippets.

Host *
ForwardAgent yes
AddKeysToAgent yes
KeepAlive yes
ServerAliveInterval 60
ControlMaster auto
ControlPath ~/.ssh/sockets/%r@%h-%p
ControlPersist 600
# Host *.example.com
@AlexAkulov
AlexAkulov / diamond-hashivault-collector
Last active May 13, 2019 17:28
Diamond Collector for basic monitoring of Hasicorp Vault
# coding=utf-8
"""
Simple collector which get JSON and parse it into flat metrics
#### Dependencies
* urllib2
"""
CREATE TABLE wssg.sysmon_logs_local ( Date Date, TimeStamp DateTime, ComputerName String, EventId UInt8, Task String, DstHost String, DstIp String, DstPort UInt16, DstPortName String, Image String, ProcessGuid String, ProcessId UInt32, Proto String, SrcHost String, SrcIp String, SrcPort UInt16, User String, CommandLine String, Company String, CurrentDirectory String, Description String, FileVersion String, Hashes String, IntegrityLevel String, LogonGuid String, LogonId String, ParentCommandLine String, ParentImage String, ParentProcessGuid String, ParentProcessId UInt32, Product String, TerminalSessionId UInt32, EventType String, TargetObject String, Details String, SourceImage String, SourceProcessGuid String, SourceProcessId String, StartAddress String, StartModule String, TargetImage String, TargetProcessGuid String, TargetProcessId UInt32, ImageLoaded String, Signature String, SignatureStatus String, Signed String, ConfigurationFileHash String, Configuration String, FileCreate String, TargetFilename Strin
@AlexAkulov
AlexAkulov / bro.spec
Last active June 20, 2018 08:55
bro 2.5.4 with af_packet rpm spec
#
# spec file for package Bro
#
# Copyright (c) 1995-2014 The Regents of the University of California
# through the Lawrence Berkeley National Laboratory and the
# International Computer Science Institute. All rights reserved.
#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions are met:
#
input {
syslog {
port => {{ bitfan_syslogd_port }}
protocol => "udp"
type => "syslog"
}
}
filter {
kv {
field_split => "\\t"
[Tt]emp/
[Oo]bj/
[Bb]uild
/[Bb]uilds/
/[Ll]ibrary/
sysinfo.txt
*.stackdump
/Assets/AssetStoreTools*
*.apk
*.unitypackage