tutorial.md

SO

• https://github.com/Security-Onion-Solutions/security-onion/wiki/Bro

Grafana

• wget https://s3-us-west-2.amazonaws.com/grafana-releases/release/grafana_4.6.1_amd64.deb
• sudo apt-get install -y adduser libfontconfig
• sudo dpkg -i grafana_4.6.1_amd64.deb

Change Timezone

• https://unix.stackexchange.com/questions/110522/timezone-setting-in-linux

Docker

• https://www.digitalocean.com/community/tutorials/how-to-install-and-use-docker-compose-on-ubuntu-14-04
• https://docs.docker.com/engine/installation/linux/docker-ce/ubuntu/#install-using-the-repository

Golang-go

• https://tecadmin.net/install-go-on-ubuntu/

Graylog

• http://docs.graylog.org/en/2.3/pages/installation/os/ubuntu.html
• https://www.digitalocean.com/community/tutorials/how-to-manage-logs-with-graylog-2-on-ubuntu-16-04#prerequisites
• http://docs.graylog.org/en/2.3/pages/sending_data.html

Java

• https://www.digitalocean.com/community/tutorials/how-to-install-java-on-ubuntu-with-apt-get

Partitioning

• https://wpollock.com/AUnix1/Partitioning.htm

Wazuh

• https://documentation.wazuh.com/2.0/installation-guide/installing-elastic-stack/elastic_server_deb.html#elastic-server-deb
• https://documentation.wazuh.com/current/index.html
• https://documentation.wazuh.com/2.0/user-manual/agents/registering-agents/register-agent-manual.html
• https://documentation.wazuh.com/2.0/installation-guide/installing-wazuh-agent/wazuh_agent_deb.html
• https://documentation.wazuh.com/current/docker/faq-wazuh-container.html#how-can-i-store-wazuh-data

Geolite

• https://dev.maxmind.com/geoip/geoip2/geolite2/

Gelf Output

• https://www.elastic.co/guide/en/logstash/current/plugins-outputs-gelf.html

MySQL Driver

• https://dev.mysql.com/get/Downloads/Connector-J/mysql-connector-java-5.1.44.zip

Icinga

• https://www.digitalocean.com/community/tutorials/how-to-use-icinga-to-monitor-your-servers-and-services-on-ubuntu-14-04
• https://openmoz.wordpress.com/2015/03/18/installing-icinga-2-monitoring-tool-on-ubuntu/
• https://exchange.icinga.com/dig/Plugins
• https://www.digitalocean.com/community/tutorials/how-to-install-icinga-and-icinga-web-on-ubuntu-16-04

Nessusbeat

• https://github.com/bardie/nessusbeat

TCPreplay

• https://github.com/Security-Onion-Solutions/security-onion/wiki/Pcaps

Rabbitmq

• https://tecadmin.net/install-rabbitmq-server-on-ubuntu/

Disable IPv6

• https://www.techrepublic.com/article/how-to-disable-ipv6-on-linux/

Commands

crontab

@reboot nohup /go_directory/src/github.com/bardie/nessusbeat/./nessusbeat -c /go_directory/src/github.com/bardie/nessusbeat/nessusbeat.yml -e -d "*" > /var/log/nessusbeat.log 2>&1 &

tcpreplay

sudo tcpreplay -i eth0 -t newdat3.log

Disable IPv6 Java

export _JAVA_OPTIONS="-Djava.net.preferIPv4Stack=true"

ENable Virtulization

https://www.codementor.io/slavko/enable-virtualization-inside-esxi-virtual-machine-du107l4ky