mirror of https://github.com/MISP/misp-modules
Deployed 494c7bb
with MkDocs version: 1.4.2
parent
24d6fb91ca
commit
3556cecae2
|
@ -830,47 +830,47 @@
|
|||
</code></pre></div>
|
||||
<p>The MISP module service returns the available modules in a JSON array containing each module name along with their supported input attributes.</p>
|
||||
<p>Based on this information, a query can be built in a JSON format and saved as body.json:</p>
|
||||
<div class="highlight"><pre><span></span><code><span class="p">{</span>
|
||||
<span class="w"> </span><span class="nt">"hostname"</span><span class="p">:</span><span class="w"> </span><span class="s2">"www.foo.be"</span><span class="p">,</span>
|
||||
<span class="w"> </span><span class="nt">"module"</span><span class="p">:</span><span class="w"> </span><span class="s2">"dns"</span>
|
||||
<span class="p">}</span>
|
||||
<div class="highlight"><pre><span></span><code><span class="p">{</span><span class="w"></span>
|
||||
<span class="w"> </span><span class="nt">"hostname"</span><span class="p">:</span><span class="w"> </span><span class="s2">"www.foo.be"</span><span class="p">,</span><span class="w"></span>
|
||||
<span class="w"> </span><span class="nt">"module"</span><span class="p">:</span><span class="w"> </span><span class="s2">"dns"</span><span class="w"></span>
|
||||
<span class="p">}</span><span class="w"></span>
|
||||
</code></pre></div>
|
||||
<p>Then you can POST this JSON format query towards the MISP object server:</p>
|
||||
<div class="highlight"><pre><span></span><code>curl<span class="w"> </span>-s<span class="w"> </span>http://127.0.0.1:6666/query<span class="w"> </span>-H<span class="w"> </span><span class="s2">"Content-Type: application/json"</span><span class="w"> </span>--data<span class="w"> </span>@body.json<span class="w"> </span>-X<span class="w"> </span>POST
|
||||
<div class="highlight"><pre><span></span><code>curl -s http://127.0.0.1:6666/query -H <span class="s2">"Content-Type: application/json"</span> --data @body.json -X POST
|
||||
</code></pre></div>
|
||||
<p>The module should output the following JSON:</p>
|
||||
<div class="highlight"><pre><span></span><code><span class="p">{</span>
|
||||
<span class="w"> </span><span class="nt">"results"</span><span class="p">:</span><span class="w"> </span><span class="p">[</span>
|
||||
<span class="w"> </span><span class="p">{</span>
|
||||
<span class="w"> </span><span class="nt">"types"</span><span class="p">:</span><span class="w"> </span><span class="p">[</span>
|
||||
<span class="w"> </span><span class="s2">"ip-src"</span><span class="p">,</span>
|
||||
<span class="w"> </span><span class="s2">"ip-dst"</span>
|
||||
<span class="w"> </span><span class="p">],</span>
|
||||
<span class="w"> </span><span class="nt">"values"</span><span class="p">:</span><span class="w"> </span><span class="p">[</span>
|
||||
<span class="w"> </span><span class="s2">"188.65.217.78"</span>
|
||||
<span class="w"> </span><span class="p">]</span>
|
||||
<span class="w"> </span><span class="p">}</span>
|
||||
<span class="w"> </span><span class="p">]</span>
|
||||
<span class="p">}</span>
|
||||
<div class="highlight"><pre><span></span><code><span class="p">{</span><span class="w"></span>
|
||||
<span class="w"> </span><span class="nt">"results"</span><span class="p">:</span><span class="w"> </span><span class="p">[</span><span class="w"></span>
|
||||
<span class="w"> </span><span class="p">{</span><span class="w"></span>
|
||||
<span class="w"> </span><span class="nt">"types"</span><span class="p">:</span><span class="w"> </span><span class="p">[</span><span class="w"></span>
|
||||
<span class="w"> </span><span class="s2">"ip-src"</span><span class="p">,</span><span class="w"></span>
|
||||
<span class="w"> </span><span class="s2">"ip-dst"</span><span class="w"></span>
|
||||
<span class="w"> </span><span class="p">],</span><span class="w"></span>
|
||||
<span class="w"> </span><span class="nt">"values"</span><span class="p">:</span><span class="w"> </span><span class="p">[</span><span class="w"></span>
|
||||
<span class="w"> </span><span class="s2">"188.65.217.78"</span><span class="w"></span>
|
||||
<span class="w"> </span><span class="p">]</span><span class="w"></span>
|
||||
<span class="w"> </span><span class="p">}</span><span class="w"></span>
|
||||
<span class="w"> </span><span class="p">]</span><span class="w"></span>
|
||||
<span class="p">}</span><span class="w"></span>
|
||||
</code></pre></div>
|
||||
<p>It is also possible to restrict the category options of the resolved attributes by passing a list of categories along (optional):</p>
|
||||
<div class="highlight"><pre><span></span><code><span class="p">{</span>
|
||||
<span class="w"> </span><span class="nt">"results"</span><span class="p">:</span><span class="w"> </span><span class="p">[</span>
|
||||
<span class="w"> </span><span class="p">{</span>
|
||||
<span class="w"> </span><span class="nt">"types"</span><span class="p">:</span><span class="w"> </span><span class="p">[</span>
|
||||
<span class="w"> </span><span class="s2">"ip-src"</span><span class="p">,</span>
|
||||
<span class="w"> </span><span class="s2">"ip-dst"</span>
|
||||
<span class="w"> </span><span class="p">],</span>
|
||||
<span class="w"> </span><span class="nt">"values"</span><span class="p">:</span><span class="w"> </span><span class="p">[</span>
|
||||
<span class="w"> </span><span class="s2">"188.65.217.78"</span>
|
||||
<span class="w"> </span><span class="p">],</span>
|
||||
<span class="w"> </span><span class="nt">"categories"</span><span class="p">:</span><span class="w"> </span><span class="p">[</span>
|
||||
<span class="w"> </span><span class="s2">"Network activity"</span><span class="p">,</span>
|
||||
<span class="w"> </span><span class="s2">"Payload delivery"</span>
|
||||
<span class="w"> </span><span class="p">]</span>
|
||||
<span class="w"> </span><span class="p">}</span>
|
||||
<span class="w"> </span><span class="p">]</span>
|
||||
<span class="p">}</span>
|
||||
<div class="highlight"><pre><span></span><code><span class="p">{</span><span class="w"></span>
|
||||
<span class="w"> </span><span class="nt">"results"</span><span class="p">:</span><span class="w"> </span><span class="p">[</span><span class="w"></span>
|
||||
<span class="w"> </span><span class="p">{</span><span class="w"></span>
|
||||
<span class="w"> </span><span class="nt">"types"</span><span class="p">:</span><span class="w"> </span><span class="p">[</span><span class="w"></span>
|
||||
<span class="w"> </span><span class="s2">"ip-src"</span><span class="p">,</span><span class="w"></span>
|
||||
<span class="w"> </span><span class="s2">"ip-dst"</span><span class="w"></span>
|
||||
<span class="w"> </span><span class="p">],</span><span class="w"></span>
|
||||
<span class="w"> </span><span class="nt">"values"</span><span class="p">:</span><span class="w"> </span><span class="p">[</span><span class="w"></span>
|
||||
<span class="w"> </span><span class="s2">"188.65.217.78"</span><span class="w"></span>
|
||||
<span class="w"> </span><span class="p">],</span><span class="w"></span>
|
||||
<span class="w"> </span><span class="nt">"categories"</span><span class="p">:</span><span class="w"> </span><span class="p">[</span><span class="w"></span>
|
||||
<span class="w"> </span><span class="s2">"Network activity"</span><span class="p">,</span><span class="w"></span>
|
||||
<span class="w"> </span><span class="s2">"Payload delivery"</span><span class="w"></span>
|
||||
<span class="w"> </span><span class="p">]</span><span class="w"></span>
|
||||
<span class="w"> </span><span class="p">}</span><span class="w"></span>
|
||||
<span class="w"> </span><span class="p">]</span><span class="w"></span>
|
||||
<span class="p">}</span><span class="w"></span>
|
||||
</code></pre></div>
|
||||
<p>For both the type and the category lists, the first item in the list will be the default setting on the interface.</p>
|
||||
<h3 id="enable-your-module-in-the-web-interface">Enable your module in the web interface<a class="headerlink" href="#enable-your-module-in-the-web-interface" title="Permanent link">¶</a></h3>
|
||||
|
@ -914,12 +914,12 @@ Recommended Plugin.Import_ocr_enabled true Enable or disable the ocr
|
|||
<li>SSH into the machine (Login info on training page)</li>
|
||||
<li>Go into the misp-modules directory</li>
|
||||
</ul>
|
||||
<div class="highlight"><pre><span></span><code><span class="nb">cd</span><span class="w"> </span>/usr/local/src/misp-modules
|
||||
<div class="highlight"><pre><span></span><code><span class="nb">cd</span> /usr/local/src/misp-modules
|
||||
</code></pre></div>
|
||||
<p>Set the git repo to your fork and checkout your development branch. If you SSH'ed in as the misp user you will have to use sudo.</p>
|
||||
<div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>git<span class="w"> </span>remote<span class="w"> </span>set-url<span class="w"> </span>origin<span class="w"> </span>https://github.com/YourRepo/misp-modules.git
|
||||
sudo<span class="w"> </span>git<span class="w"> </span>pull
|
||||
sudo<span class="w"> </span>git<span class="w"> </span>checkout<span class="w"> </span>MyModBranch
|
||||
<div class="highlight"><pre><span></span><code>sudo git remote set-url origin https://github.com/YourRepo/misp-modules.git
|
||||
sudo git pull
|
||||
sudo git checkout MyModBranch
|
||||
</code></pre></div>
|
||||
<p>Remove the contents of the build directory and re-install misp-modules.</p>
|
||||
<div class="highlight"><pre><span></span><code><span class="n">sudo</span> <span class="n">rm</span> <span class="o">-</span><span class="n">fr</span> <span class="n">build</span><span class="o">/*</span>
|
||||
|
@ -930,9 +930,9 @@ sudo<span class="w"> </span>git<span class="w"> </span>checkout<span class="w">
|
|||
<span class="n">misp</span><span class="o">-</span><span class="n">modules</span> <span class="o">-</span><span class="n">d</span>
|
||||
</code></pre></div>
|
||||
<p>In your original terminal you can now run your tests manually and see any errors that arrive</p>
|
||||
<div class="highlight"><pre><span></span><code><span class="nb">cd</span><span class="w"> </span>tests/
|
||||
curl<span class="w"> </span>-s<span class="w"> </span>http://127.0.0.1:6666/query<span class="w"> </span>-H<span class="w"> </span><span class="s2">"Content-Type: application/json"</span><span class="w"> </span>--data<span class="w"> </span>@MY_TEST_FILE.json<span class="w"> </span>-X<span class="w"> </span>POST
|
||||
<span class="nb">cd</span><span class="w"> </span>../
|
||||
<div class="highlight"><pre><span></span><code><span class="nb">cd</span> tests/
|
||||
curl -s http://127.0.0.1:6666/query -H <span class="s2">"Content-Type: application/json"</span> --data @MY_TEST_FILE.json -X POST
|
||||
<span class="nb">cd</span> ../
|
||||
</code></pre></div>
|
||||
|
||||
|
||||
|
|
|
@ -560,88 +560,88 @@
|
|||
<h2 id="how-to-install-and-start-misp-modules-in-a-python-virtualenv">How to install and start MISP modules (in a Python virtualenv)?<a class="headerlink" href="#how-to-install-and-start-misp-modules-in-a-python-virtualenv" title="Permanent link">¶</a></h2>
|
||||
<div class="highlight"><pre><span></span><code><span class="nv">SUDO_WWW</span><span class="o">=</span><span class="s2">"sudo -u www-data"</span>
|
||||
|
||||
sudo<span class="w"> </span>apt-get<span class="w"> </span>install<span class="w"> </span>-y<span class="w"> </span><span class="se">\</span>
|
||||
<span class="w"> </span>git<span class="w"> </span><span class="se">\</span>
|
||||
<span class="w"> </span>libpq5<span class="w"> </span><span class="se">\</span>
|
||||
<span class="w"> </span>libjpeg-dev<span class="w"> </span><span class="se">\</span>
|
||||
<span class="w"> </span>tesseract-ocr<span class="w"> </span><span class="se">\</span>
|
||||
<span class="w"> </span>libpoppler-cpp-dev<span class="w"> </span><span class="se">\</span>
|
||||
<span class="w"> </span>imagemagick<span class="w"> </span>virtualenv<span class="w"> </span><span class="se">\</span>
|
||||
<span class="w"> </span>libopencv-dev<span class="w"> </span><span class="se">\</span>
|
||||
<span class="w"> </span>zbar-tools<span class="w"> </span><span class="se">\</span>
|
||||
<span class="w"> </span>libzbar0<span class="w"> </span><span class="se">\</span>
|
||||
<span class="w"> </span>libzbar-dev<span class="w"> </span><span class="se">\</span>
|
||||
<span class="w"> </span>libfuzzy-dev<span class="w"> </span><span class="se">\</span>
|
||||
<span class="w"> </span>libcaca-dev
|
||||
sudo apt-get install -y <span class="se">\</span>
|
||||
git <span class="se">\</span>
|
||||
libpq5 <span class="se">\</span>
|
||||
libjpeg-dev <span class="se">\</span>
|
||||
tesseract-ocr <span class="se">\</span>
|
||||
libpoppler-cpp-dev <span class="se">\</span>
|
||||
imagemagick virtualenv <span class="se">\</span>
|
||||
libopencv-dev <span class="se">\</span>
|
||||
zbar-tools <span class="se">\</span>
|
||||
libzbar0 <span class="se">\</span>
|
||||
libzbar-dev <span class="se">\</span>
|
||||
libfuzzy-dev <span class="se">\</span>
|
||||
libcaca-dev
|
||||
|
||||
<span class="c1"># BEGIN with virtualenv: </span>
|
||||
<span class="nv">$SUDO_WWW</span><span class="w"> </span>virtualenv<span class="w"> </span>-p<span class="w"> </span>python3<span class="w"> </span>/var/www/MISP/venv
|
||||
<span class="nv">$SUDO_WWW</span> virtualenv -p python3 /var/www/MISP/venv
|
||||
<span class="c1"># END with virtualenv</span>
|
||||
|
||||
<span class="nb">cd</span><span class="w"> </span>/usr/local/src/
|
||||
<span class="nb">cd</span> /usr/local/src/
|
||||
<span class="c1"># Ideally you add your user to the staff group and make /usr/local/src group writeable, below follows an example with user misp</span>
|
||||
sudo<span class="w"> </span>adduser<span class="w"> </span>misp<span class="w"> </span>staff
|
||||
sudo<span class="w"> </span>chmod<span class="w"> </span><span class="m">2775</span><span class="w"> </span>/usr/local/src
|
||||
sudo<span class="w"> </span>chown<span class="w"> </span>root:staff<span class="w"> </span>/usr/local/src
|
||||
git<span class="w"> </span>clone<span class="w"> </span>https://github.com/MISP/misp-modules.git
|
||||
git<span class="w"> </span>clone<span class="w"> </span>git://github.com/stricaud/faup.git<span class="w"> </span>faup
|
||||
git<span class="w"> </span>clone<span class="w"> </span>git://github.com/stricaud/gtcaca.git<span class="w"> </span>gtcaca
|
||||
sudo adduser misp staff
|
||||
sudo chmod <span class="m">2775</span> /usr/local/src
|
||||
sudo chown root:staff /usr/local/src
|
||||
git clone https://github.com/MISP/misp-modules.git
|
||||
git clone git://github.com/stricaud/faup.git faup
|
||||
git clone git://github.com/stricaud/gtcaca.git gtcaca
|
||||
|
||||
<span class="c1"># Install gtcaca/faup</span>
|
||||
<span class="nb">cd</span><span class="w"> </span>gtcaca
|
||||
mkdir<span class="w"> </span>-p<span class="w"> </span>build
|
||||
<span class="nb">cd</span><span class="w"> </span>build
|
||||
cmake<span class="w"> </span>..<span class="w"> </span><span class="o">&&</span><span class="w"> </span>make
|
||||
sudo<span class="w"> </span>make<span class="w"> </span>install
|
||||
<span class="nb">cd</span><span class="w"> </span>../../faup
|
||||
mkdir<span class="w"> </span>-p<span class="w"> </span>build
|
||||
<span class="nb">cd</span><span class="w"> </span>build
|
||||
cmake<span class="w"> </span>..<span class="w"> </span><span class="o">&&</span><span class="w"> </span>make
|
||||
sudo<span class="w"> </span>make<span class="w"> </span>install
|
||||
sudo<span class="w"> </span>ldconfig
|
||||
<span class="nb">cd</span> gtcaca
|
||||
mkdir -p build
|
||||
<span class="nb">cd</span> build
|
||||
cmake .. <span class="o">&&</span> make
|
||||
sudo make install
|
||||
<span class="nb">cd</span> ../../faup
|
||||
mkdir -p build
|
||||
<span class="nb">cd</span> build
|
||||
cmake .. <span class="o">&&</span> make
|
||||
sudo make install
|
||||
sudo ldconfig
|
||||
|
||||
<span class="nb">cd</span><span class="w"> </span>../../misp-modules
|
||||
<span class="nb">cd</span> ../../misp-modules
|
||||
|
||||
<span class="c1"># BEGIN with virtualenv: </span>
|
||||
<span class="nv">$SUDO_WWW</span><span class="w"> </span>/var/www/MISP/venv/bin/pip<span class="w"> </span>install<span class="w"> </span>-I<span class="w"> </span>-r<span class="w"> </span>REQUIREMENTS
|
||||
<span class="nv">$SUDO_WWW</span><span class="w"> </span>/var/www/MISP/venv/bin/pip<span class="w"> </span>install<span class="w"> </span>.
|
||||
<span class="nv">$SUDO_WWW</span> /var/www/MISP/venv/bin/pip install -I -r REQUIREMENTS
|
||||
<span class="nv">$SUDO_WWW</span> /var/www/MISP/venv/bin/pip install .
|
||||
<span class="c1"># END with virtualenv</span>
|
||||
|
||||
<span class="c1"># BEGIN without virtualenv: </span>
|
||||
sudo<span class="w"> </span>pip<span class="w"> </span>install<span class="w"> </span>-I<span class="w"> </span>-r<span class="w"> </span>REQUIREMENTS
|
||||
sudo<span class="w"> </span>pip<span class="w"> </span>install<span class="w"> </span>.
|
||||
sudo pip install -I -r REQUIREMENTS
|
||||
sudo pip install .
|
||||
<span class="c1"># END without virtualenv</span>
|
||||
|
||||
<span class="c1"># Start misp-modules as a service</span>
|
||||
sudo<span class="w"> </span>cp<span class="w"> </span>etc/systemd/system/misp-modules.service<span class="w"> </span>/etc/systemd/system/
|
||||
sudo<span class="w"> </span>systemctl<span class="w"> </span>daemon-reload
|
||||
sudo<span class="w"> </span>systemctl<span class="w"> </span><span class="nb">enable</span><span class="w"> </span>--now<span class="w"> </span>misp-modules
|
||||
/var/www/MISP/venv/bin/misp-modules<span class="w"> </span>-l<span class="w"> </span><span class="m">127</span>.0.0.1<span class="w"> </span>-s<span class="w"> </span><span class="p">&</span><span class="w"> </span><span class="c1">#to start the modules</span>
|
||||
sudo cp etc/systemd/system/misp-modules.service /etc/systemd/system/
|
||||
sudo systemctl daemon-reload
|
||||
sudo systemctl <span class="nb">enable</span> --now misp-modules
|
||||
/var/www/MISP/venv/bin/misp-modules -l <span class="m">127</span>.0.0.1 -s <span class="p">&</span> <span class="c1">#to start the modules</span>
|
||||
</code></pre></div>
|
||||
<h2 id="how-to-install-and-start-misp-modules-on-rhel-based-distributions">How to install and start MISP modules on RHEL-based distributions ?<a class="headerlink" href="#how-to-install-and-start-misp-modules-on-rhel-based-distributions" title="Permanent link">¶</a></h2>
|
||||
<p>As of this writing, the official RHEL repositories only contain Ruby 2.0.0 and Ruby 2.1 or higher is required. As such, this guide installs Ruby 2.2 from the SCL repository.</p>
|
||||
<div class="highlight"><pre><span></span><code><span class="nv">SUDO_WWW</span><span class="o">=</span><span class="s2">"sudo -u apache"</span>
|
||||
sudo<span class="w"> </span>yum<span class="w"> </span>install<span class="w"> </span><span class="se">\</span>
|
||||
<span class="w"> </span>rh-ruby22<span class="w"> </span><span class="se">\</span>
|
||||
<span class="w"> </span>openjpeg-devel<span class="w"> </span><span class="se">\</span>
|
||||
<span class="w"> </span>rubygem-rouge<span class="w"> </span><span class="se">\</span>
|
||||
<span class="w"> </span>rubygem-asciidoctor<span class="w"> </span><span class="se">\</span>
|
||||
<span class="w"> </span>zbar-devel<span class="w"> </span><span class="se">\</span>
|
||||
<span class="w"> </span>opencv-devel<span class="w"> </span><span class="se">\</span>
|
||||
<span class="w"> </span>gcc-c++<span class="w"> </span><span class="se">\</span>
|
||||
<span class="w"> </span>pkgconfig<span class="w"> </span><span class="se">\</span>
|
||||
<span class="w"> </span>poppler-cpp-devel<span class="w"> </span><span class="se">\</span>
|
||||
<span class="w"> </span>python-devel<span class="w"> </span><span class="se">\</span>
|
||||
<span class="w"> </span>redhat-rpm-config
|
||||
<span class="nb">cd</span><span class="w"> </span>/usr/local/src/
|
||||
sudo<span class="w"> </span>git<span class="w"> </span>clone<span class="w"> </span>https://github.com/MISP/misp-modules.git
|
||||
<span class="nb">cd</span><span class="w"> </span>misp-modules
|
||||
<span class="nv">$SUDO_WWW</span><span class="w"> </span>/usr/bin/scl<span class="w"> </span><span class="nb">enable</span><span class="w"> </span>rh-python36<span class="w"> </span><span class="s2">"virtualenv -p python3 /var/www/MISP/venv"</span>
|
||||
<span class="nv">$SUDO_WWW</span><span class="w"> </span>/var/www/MISP/venv/bin/pip<span class="w"> </span>install<span class="w"> </span>-U<span class="w"> </span>-I<span class="w"> </span>-r<span class="w"> </span>REQUIREMENTS
|
||||
<span class="nv">$SUDO_WWW</span><span class="w"> </span>/var/www/MISP/venv/bin/pip<span class="w"> </span>install<span class="w"> </span>-U<span class="w"> </span>.
|
||||
sudo yum install <span class="se">\</span>
|
||||
rh-ruby22 <span class="se">\</span>
|
||||
openjpeg-devel <span class="se">\</span>
|
||||
rubygem-rouge <span class="se">\</span>
|
||||
rubygem-asciidoctor <span class="se">\</span>
|
||||
zbar-devel <span class="se">\</span>
|
||||
opencv-devel <span class="se">\</span>
|
||||
gcc-c++ <span class="se">\</span>
|
||||
pkgconfig <span class="se">\</span>
|
||||
poppler-cpp-devel <span class="se">\</span>
|
||||
python-devel <span class="se">\</span>
|
||||
redhat-rpm-config
|
||||
<span class="nb">cd</span> /usr/local/src/
|
||||
sudo git clone https://github.com/MISP/misp-modules.git
|
||||
<span class="nb">cd</span> misp-modules
|
||||
<span class="nv">$SUDO_WWW</span> /usr/bin/scl <span class="nb">enable</span> rh-python36 <span class="s2">"virtualenv -p python3 /var/www/MISP/venv"</span>
|
||||
<span class="nv">$SUDO_WWW</span> /var/www/MISP/venv/bin/pip install -U -I -r REQUIREMENTS
|
||||
<span class="nv">$SUDO_WWW</span> /var/www/MISP/venv/bin/pip install -U .
|
||||
</code></pre></div>
|
||||
<p>Create the service file /etc/systemd/system/misp-modules.service :</p>
|
||||
<div class="highlight"><pre><span></span><code><span class="nb">echo</span><span class="w"> </span><span class="s2">"[Unit]</span>
|
||||
<div class="highlight"><pre><span></span><code><span class="nb">echo</span> <span class="s2">"[Unit]</span>
|
||||
<span class="s2">Description=MISP's modules</span>
|
||||
<span class="s2">After=misp-workers.service</span>
|
||||
|
||||
|
@ -654,30 +654,30 @@ sudo<span class="w"> </span>git<span class="w"> </span>clone<span class="w"> </s
|
|||
<span class="s2">RestartSec=10</span>
|
||||
|
||||
<span class="s2">[Install]</span>
|
||||
<span class="s2">WantedBy=multi-user.target"</span><span class="w"> </span><span class="p">|</span><span class="w"> </span>sudo<span class="w"> </span>tee<span class="w"> </span>/etc/systemd/system/misp-modules.service
|
||||
<span class="s2">WantedBy=multi-user.target"</span> <span class="p">|</span> sudo tee /etc/systemd/system/misp-modules.service
|
||||
</code></pre></div>
|
||||
<p>The After=misp-workers.service must be changed or removed if you have not created a misp-workers service. Then, enable the misp-modules service and start it:</p>
|
||||
<div class="highlight"><pre><span></span><code>systemctl<span class="w"> </span>daemon-reload
|
||||
systemctl<span class="w"> </span><span class="nb">enable</span><span class="w"> </span>--now<span class="w"> </span>misp-modules
|
||||
<div class="highlight"><pre><span></span><code>systemctl daemon-reload
|
||||
systemctl <span class="nb">enable</span> --now misp-modules
|
||||
</code></pre></div>
|
||||
<h2 id="how-to-use-an-misp-modules-docker-container">How to use an MISP modules Docker container<a class="headerlink" href="#how-to-use-an-misp-modules-docker-container" title="Permanent link">¶</a></h2>
|
||||
<h3 id="docker-build">Docker build<a class="headerlink" href="#docker-build" title="Permanent link">¶</a></h3>
|
||||
<div class="highlight"><pre><span></span><code>docker<span class="w"> </span>build<span class="w"> </span>-t<span class="w"> </span>misp-modules<span class="w"> </span><span class="se">\</span>
|
||||
<span class="w"> </span>--build-arg<span class="w"> </span><span class="nv">BUILD_DATE</span><span class="o">=</span><span class="k">$(</span>date<span class="w"> </span>-u<span class="w"> </span>+<span class="s2">"%Y-%m-%d"</span><span class="k">)</span><span class="w"> </span><span class="se">\</span>
|
||||
<span class="w"> </span>docker/
|
||||
<div class="highlight"><pre><span></span><code>docker build -t misp-modules <span class="se">\</span>
|
||||
--build-arg <span class="nv">BUILD_DATE</span><span class="o">=</span><span class="k">$(</span>date -u +<span class="s2">"%Y-%m-%d"</span><span class="k">)</span> <span class="se">\</span>
|
||||
docker/
|
||||
</code></pre></div>
|
||||
<h3 id="docker-run">Docker run<a class="headerlink" href="#docker-run" title="Permanent link">¶</a></h3>
|
||||
<div class="highlight"><pre><span></span><code><span class="c1"># Start Redis</span>
|
||||
docker<span class="w"> </span>run<span class="w"> </span>--rm<span class="w"> </span>-d<span class="w"> </span>--name<span class="o">=</span>misp-redis<span class="w"> </span>redis:alpine
|
||||
docker run --rm -d --name<span class="o">=</span>misp-redis redis:alpine
|
||||
<span class="c1"># Start MISP-modules</span>
|
||||
docker<span class="w"> </span>run<span class="w"> </span><span class="se">\</span>
|
||||
<span class="w"> </span>--rm<span class="w"> </span>-d<span class="w"> </span>--name<span class="o">=</span>misp-modules<span class="w"> </span><span class="se">\</span>
|
||||
<span class="w"> </span>-e<span class="w"> </span><span class="nv">REDIS_BACKEND</span><span class="o">=</span>misp-redis<span class="w"> </span><span class="se">\</span>
|
||||
<span class="w"> </span>-e<span class="w"> </span><span class="nv">REDIS_PORT</span><span class="o">=</span><span class="s2">"6379"</span><span class="w"> </span><span class="se">\</span>
|
||||
<span class="w"> </span>-e<span class="w"> </span><span class="nv">REDIS_PW</span><span class="o">=</span><span class="s2">""</span><span class="w"> </span><span class="se">\</span>
|
||||
<span class="w"> </span>-e<span class="w"> </span><span class="nv">REDIS_DATABASE</span><span class="o">=</span><span class="s2">"245"</span><span class="w"> </span><span class="se">\</span>
|
||||
<span class="w"> </span>-e<span class="w"> </span><span class="nv">MISP_MODULES_DEBUG</span><span class="o">=</span><span class="s2">"false"</span><span class="w"> </span><span class="se">\</span>
|
||||
<span class="w"> </span>dcso/misp-dockerized-misp-modules
|
||||
docker run <span class="se">\</span>
|
||||
--rm -d --name<span class="o">=</span>misp-modules <span class="se">\</span>
|
||||
-e <span class="nv">REDIS_BACKEND</span><span class="o">=</span>misp-redis <span class="se">\</span>
|
||||
-e <span class="nv">REDIS_PORT</span><span class="o">=</span><span class="s2">"6379"</span> <span class="se">\</span>
|
||||
-e <span class="nv">REDIS_PW</span><span class="o">=</span><span class="s2">""</span> <span class="se">\</span>
|
||||
-e <span class="nv">REDIS_DATABASE</span><span class="o">=</span><span class="s2">"245"</span> <span class="se">\</span>
|
||||
-e <span class="nv">MISP_MODULES_DEBUG</span><span class="o">=</span><span class="s2">"false"</span> <span class="se">\</span>
|
||||
dcso/misp-dockerized-misp-modules
|
||||
</code></pre></div>
|
||||
<h3 id="docker-compose">Docker-compose<a class="headerlink" href="#docker-compose" title="Permanent link">¶</a></h3>
|
||||
<div class="highlight"><pre><span></span><code>services:
|
||||
|
|
14
sitemap.xml
14
sitemap.xml
|
@ -2,37 +2,37 @@
|
|||
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
|
||||
<url>
|
||||
<loc>https://www.misp-project.org/</loc>
|
||||
<lastmod>2023-01-23</lastmod>
|
||||
<lastmod>2023-03-20</lastmod>
|
||||
<changefreq>daily</changefreq>
|
||||
</url>
|
||||
<url>
|
||||
<loc>https://www.misp-project.org/contribute/</loc>
|
||||
<lastmod>2023-01-23</lastmod>
|
||||
<lastmod>2023-03-20</lastmod>
|
||||
<changefreq>daily</changefreq>
|
||||
</url>
|
||||
<url>
|
||||
<loc>https://www.misp-project.org/expansion/</loc>
|
||||
<lastmod>2023-01-23</lastmod>
|
||||
<lastmod>2023-03-20</lastmod>
|
||||
<changefreq>daily</changefreq>
|
||||
</url>
|
||||
<url>
|
||||
<loc>https://www.misp-project.org/export_mod/</loc>
|
||||
<lastmod>2023-01-23</lastmod>
|
||||
<lastmod>2023-03-20</lastmod>
|
||||
<changefreq>daily</changefreq>
|
||||
</url>
|
||||
<url>
|
||||
<loc>https://www.misp-project.org/import_mod/</loc>
|
||||
<lastmod>2023-01-23</lastmod>
|
||||
<lastmod>2023-03-20</lastmod>
|
||||
<changefreq>daily</changefreq>
|
||||
</url>
|
||||
<url>
|
||||
<loc>https://www.misp-project.org/install/</loc>
|
||||
<lastmod>2023-01-23</lastmod>
|
||||
<lastmod>2023-03-20</lastmod>
|
||||
<changefreq>daily</changefreq>
|
||||
</url>
|
||||
<url>
|
||||
<loc>https://www.misp-project.org/license/</loc>
|
||||
<lastmod>2023-01-23</lastmod>
|
||||
<lastmod>2023-03-20</lastmod>
|
||||
<changefreq>daily</changefreq>
|
||||
</url>
|
||||
</urlset>
|
BIN
sitemap.xml.gz
BIN
sitemap.xml.gz
Binary file not shown.
Loading…
Reference in New Issue