Skip to content

Instantly share code, notes, and snippets.

View jeffgeiger's full-sized avatar

Jeff Geiger jeffgeiger

37 followers · 5 following
View GitHub Profile
@dcode
dcode / snort_unified2_output.sh
Created January 19, 2016 21:10
Configure Snort w/ the RPM for unified2 output
sudo sed -i'' 's/^# output unified2/output unified2/' /etc/snort/snort.conf
sudo sed -i'' 's/ALERTMODE/#ALERTMODE/' /etc/sysconfig/snort
@dcode
dcode / http_gauss_browse.py
Last active June 1, 2016 14:07
Takes in a list of CSV ordered by (rank,domain) (from Alexa, for instance) and browses the highest ranking more often.
#!/usr/bin/env python2
from multiprocessing import Pool
from time import sleep
from random import randint, gauss
import os, sys
import requests
## TODO
# . recursively download linked resources:
# . images
@dcode
dcode / elasticsearch@.service
Last active September 7, 2016 16:27
Example template service file for multiple instances. Set `node.name` in `elasticsearch.yml` to ${NODENAME}.
[Unit]
Description=Elasticsearch
Documentation=http://www.elastic.co
Wants=network-online.target
After=network-online.target
[Service]
Environment=ES_HOME=/usr/share/elasticsearch
Environment=CONF_DIR=/etc/elasticsearch
Environment=DATA_DIR=/var/lib/elasticsearch
@dcode
dcode / group_cpuinfo_by_socket-core-ids.sh
Last active September 27, 2016 21:07
Get top-level physical processor numbers grouped by socket and core id's
egrep -e "processor" -e "core id" -e ^physical /proc/cpuinfo | \
xargs -l3 echo | \
awk -vOFS='\t' '{ print "{\"socket\": "$7", \"core\": " $11 ", \"proc\":" $3 "}" }' | \
jq -sc '
[.[] | {sock_core:"\(.socket)-\(.core)", proc, core, socket } ]
| group_by(.sock_core) | .[] | .[0] ' | \
sort -V
@dcode
dcode / 01-migrate-bro-data.sh
Last active October 7, 2016 17:10
Attempt to migrate data to old indexes. I need to do this because data types changed, but I don't want to lose the old data.
# Move index names from bro-YYYY.MM.DD to bro-v1-YYYY.MM.DD
for item in $(curl -s -n -XGET localhost:9200/_cat/indices | awk '/bro-/ { split($3,a,"-"); print a[2] }'); do
cat <<EOF | curl -s -n -XPOST localhost:9200/_reindex -d @- >/dev/null
{ "source": {"index": "bro-${item}"}, "dest": {"index": "bro.v1-${item}"} }
EOF
echo -e "\nCloned data from bro-${item} to bro.v1-${item}"
done
@dcode
dcode / ROCKNSM-BETA0.adoc
Created December 14, 2016 05:32

ROCK NSM Beta 0 Notes

@rhwood
rhwood / rpi3-wireless-drivers.sh
Last active August 2, 2017 12:39
CentOS 7 Raspberry Pi 3 Wireless Drivers
#!/bin/bash
curl --location https://github.com/raspberrypi/firmware/raw/master/boot/bcm2710-rpi-3-b.dtb > /boot/bcm2710-rpi-3-b.dtb
curl --location https://github.com/RPi-Distro/firmware-nonfree/raw/54bab3d6a6d43239c71d26464e6e10e5067ffea7/brcm80211/brcm/brcmfmac43430-sdio.bin > /usr/lib/firmware/brcm/brcmfmac43430-sdio.bin
curl --location https://github.com/RPi-Distro/firmware-nonfree/raw/54bab3d6a6d43239c71d26464e6e10e5067ffea7/brcm80211/brcm/brcmfmac43430-sdio.txt > /usr/lib/firmware/brcm/brcmfmac43430-sdio.txt
echo "Reboot to ensure the dtb is initialized and kernel knows about the hardware in place."
echo
@dcode
dcode / install-bro-w_pfring_and_options.sh
Created October 22, 2015 14:02
Install bro packages that include PF_RING and optional performance enhancements on CentOS 7
# Install epel
sudo yum -y install epel-release
# Install kernel headers for current kernel
sudo yum install -y kernel-devel-$(uname -r) kernel-headers-$(uname -r)
# Install ntop repos
cat << EOF | sudo tee /etc/yum.repos.d/ntop.repo
[ntop]
name=ntop packages
@bndabbs
bndabbs / create_users.ps1
Created March 20, 2018 21:42
Bulk Load AD Users
Import-Module ActiveDirectory
$password = (Read-Host -AsSecureString "AccountPassword")
$users = import-csv ".\users.csv"
foreach ($user in $users){
New-ADUser `
-SamAccountName ($user.GivenName + "." + $user.Surname).ToLower() `
-UserPrincipalName (($user.GivenName + "." + $user.Surname).ToLower() + "@" + $env:USERDNSDOMAIN) `
-DisplayName ($user.GivenName + " " + $user.Surname) `
@dcode
dcode / json2csv.jq
Created August 30, 2016 16:58
Useful for mapping JSON to CSV when each of the records have the same structure. You can put this into a script and `chmod +x` it.
#!/usr/local/bin/jq -s -r -f
( map(keys) | add | unique ) as $cols |
map(. as $row | $cols | map($row[.])) as $rows |
$cols, $rows[] | @csv