Page of content · What is SOC? ∘ TheHive ∘ Cortex · The Hive installation ∘ installing java virtual machine ∘ Installing Cassandra Database ∘ Cassandra configuration ∘ Thehive installation steps ∘ Indexing Engine ∘ File Storage ∘ File system · Elasticsearch installation ∘ Elasticsearch roles and users ∘ Certificates creation…

what is docker Docker is an open-source containerization technology based on Linux that allows developers to write, operate, and bundle programs for container deployment. Docker containers, unlike virtual computers, have a number of advantages like Abstraction at the OS level with optimal resource consumption ,Connectivity ,Build and test with efficiency ,Application execution that…

What is SIEM Security, information, and event management (SIEM) is a term used to describe the management of security, information, and events. SIEM technology combines log data, security warnings, and events into a centralized platform that allows for real-time security monitoring analysis. SIEM software is used by security operation centers (SOCs) to improve…

Creating the CA certificate pubkey = ca.domain_name privkey = ca.domain_name serialnumber = random.getrandbits(64) k = crypto.PKey() # create a self-signed cert k.generate_key(crypto.TYPE_RSA, 4096) cert = crypto.X509() cert.get_subject().C = ca.country cert.get_subject().ST = ca.state cert.get_subject().L = ca.city cert.get_subject().O = ca.org_name cert.get_subject().OU = ca.org_unit cert.get_subject().CN = ca.domain_name cert.set_serial_number(serialnumber) cert.gmtime_adj_notBefore(0) cert.gmtime_adj_notAfter(31536000) # 315360000 is in seconds. cert.set_issuer(cert.get_subject()) cert.set_pubkey(k) cert.sign(k, ‘sha512’) ca_certificate = crypto.dump_certificate(crypto.FILETYPE_PEM, cert) ca_key = crypto.dump_privatekey(crypto.FILETYPE_PEM, k)…

Introduction OpenVAS is a vulnerability scanner that scans endpoints and web apps to locate and find flaws. Corporations often use it as part of their prevention strategies to easily find any holes in their manufacturing or development servers or applications. …

Task 2 Enumerate How many open ports?

What is Splunk? Splunk is a software tool for searching, analyzing and visualizing machine-generated data obtained from the websites, apps, sensors, computers, etc. that make up the company and The infrastructure. For an organization, Splunk provides plenty of opportunities. Any of the advantages of using Splunk are Offers improved GUI in a dashboard…

Task 2 → Recon Launch a scan against our target machine, I recommend using a SYN scan set to scan all ports on the machine. The scan command will be provided as a hint, however, it’s recommended to complete the room ‘RP: Nmap’ prior to this room. To do an SYN scan you need…

Task 2 → Understanding NFS NFS stands for “Network File System” which supports a system over a network to exchange archives and data with others. Users and applications will view files on remote systems almost as if they were local files through the use of NFS. This is done by mounting all or apart of…