diff --git a/a.4-best-practices/content.tex b/a.4-best-practices/content.tex index c8bce75..79a8fb1 100644 --- a/a.4-best-practices/content.tex +++ b/a.4-best-practices/content.tex @@ -29,8 +29,8 @@ \item Private sector community \begin{itemize} \item Our largest sharing community - \item Over {\bf 1000 organisations} - \item {\bf ~2700 users} + \item Over {\bf 1250 organisations} + \item {\bf ~3600 users} \item Functions as a central hub for a lot of sharing communities \item Private organisations, Researchers, Various SoCs, some CSIRTs, etc \end{itemize} @@ -75,11 +75,18 @@ \begin{frame} \frametitle{Communities supported by CIRCL} \begin{itemize} + \item ISAC / specialised community MISPs + \begin{itemize} + \item Topical or community specific instances hosted or co-managed by CIRCL + \item Examples, GSMA, FIRST.org, CSIRT network, etc + \item Often come with their {\bf own taxonomies and domain specific object definitions} + \end{itemize} \item FIRST.org's MISP community \item Telecom and Mobile operators' community \item Various ad-hoc communities for exercises for example \begin{itemize} \item The ENISA exercise for example + \item Locked Shields exercise \end{itemize} \end{itemize} \end{frame} diff --git a/a.b-cli/cli.png b/a.b-cli/cli.png new file mode 100644 index 0000000..6ead290 Binary files /dev/null and b/a.b-cli/cli.png differ diff --git a/a.b-cli/content.tex b/a.b-cli/content.tex new file mode 100644 index 0000000..b218ef6 --- /dev/null +++ b/a.b-cli/content.tex @@ -0,0 +1,65 @@ +% DO NOT COMPILE THIS FILE DIRECTLY! +% This is included by the other .tex files. + +\begin{frame}[t,plain] +\titlepage +\end{frame} + +\begin{frame} +\frametitle{MISP CLI functionalities} + \begin{itemize} + \item The MISP API is great for remotely executing administrative tasks + \item But sometimes we want to simplify the process / avoid having to deal with authentication + \item MISP also has an extensive CLI sub-system for this reason + \end{itemize} +\end{frame} + +\begin{frame} +\frametitle{Types of objectives for the scripts} + \begin{itemize} + \item Automating recurring tasks + \item Recovery from loss of access + \item Updates / initialisation + \item Background worker management + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{CLI documentation} + \begin{itemize} + \item \url{https://path.to.your.misp/events/automation} + \end{itemize} + \begin{center} + \includegraphics[scale=0.4]{cli.png} + \end{center} +\end{frame} + +\begin{frame} +\frametitle{Usage} + \texttt{/var/www/MISP/app/Console/cake [Shell] [Command] [parameters]} + \begin{itemize} + \item Example: + \begin{itemize} + \item \texttt{/var/www/MISP/app/Console/cake Password "andras.iklody@gmail.com" "Nutella"} + \item Change password to "Nutella" for my user + \item Some shells are single use and don't need a command parameter + \end{itemize} + \item Also used by the background processing + \item Automation is meant to be used via cron jobs + \end{itemize} +\end{frame} + +\begin{frame} +\frametitle{Automation via crontab} + \begin{itemize} + \item Edit crontab of www-data user + \item \texttt{crontab -u www-data -e} + \item \texttt{0 3,9,15,21 * * * /var/www/MISP/app/Console/cake Server pull 1 30 full} + \item Pull server ID \#30 as user \#1 every 6 hours + \item \texttt{@hourly /var/www/MISP/app/Console/cake Server cacheFeed 1 csv full} + \item Cache all csv feeds as user \#1 every hour + \end{itemize} +\end{frame} + + + diff --git a/a.b-cli/logo-circl.pdf b/a.b-cli/logo-circl.pdf new file mode 100644 index 0000000..62c9239 Binary files /dev/null and b/a.b-cli/logo-circl.pdf differ diff --git a/a.b-cli/misplogo.pdf b/a.b-cli/misplogo.pdf new file mode 100755 index 0000000..60da568 Binary files /dev/null and b/a.b-cli/misplogo.pdf differ diff --git a/a.b-cli/pics/param-ui.png b/a.b-cli/pics/param-ui.png new file mode 100644 index 0000000..7c5ff8a Binary files /dev/null and b/a.b-cli/pics/param-ui.png differ diff --git a/a.b-cli/slide.tex b/a.b-cli/slide.tex new file mode 100644 index 0000000..e043092 --- /dev/null +++ b/a.b-cli/slide.tex @@ -0,0 +1,26 @@ +\documentclass{beamer} +\usetheme[numbering=progressbar]{focus} +\definecolor{main}{RGB}{47, 161, 219} +\definecolor{textcolor}{RGB}{128, 128, 128} +\definecolor{background}{RGB}{240, 247, 255} + + +\usepackage[utf8]{inputenc} +\usepackage{tikz} +\usepackage{listings} +\usepackage{adjustbox} +\usetikzlibrary{positioning} +\usetikzlibrary{shapes,arrows} +%\usepackage[T1]{fontenc} +%\usepackage[scaled]{beramono} + +\author{\small{\input{../includes/authors.txt}}} + +\title{MISP CLI} +\subtitle{Automate all the things} +\institute{\includegraphics[scale=0.5]{misplogo.pdf}} +\date{\input{../includes/location.txt}} +\begin{document} +\include{content} +\end{document} +