Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Llw typos #74

Merged
merged 7 commits into from
Nov 28, 2023
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@ Logging Made Easy can:

## Disclaimer

**LME is currently still early in development. The current release is version 1.0**
**LME is currently still early in development.**

***If you have an existing install of the LME Alpha (v0.5 or older) some manual intervention will be required in order to upgrade to the latest version, please see [Upgrading](/docs/markdown/maintenance/upgrading.md) for further information.***

Expand Down
2 changes: 1 addition & 1 deletion docs/markdown/logging-guidance/filtering.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@

There may come a time where a log is not particularly useful or an aspect of LME proves overly verbose (e.g.: [Dashboard spamming events](https://github.com/cisagov/LME/issues/22). We try our best to make everything useful by default but cannot predict every eventuality since all environments will be different. So to enable users to make the LME system more useful (and hopefully commit their own pull requests back with updates :) ), we are documenting here how you can filter out logs in the:

1. Dashbaord
1. Dashboard
2. Host logging utility (e.g. winlogbeat)
3. Serverside (e.g. logstash)

Expand Down
5 changes: 2 additions & 3 deletions docs/markdown/maintenance/upgrading.md
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
# Upgrading

## 1 Upgrade Paths
LME is currently on v1.0.
Please see https://github.com/cisagov/LME/releases/ for our latest release.

Below you can find the upgrade paths that are currently supported and what steps are required for these upgrades. Note that major version upgrades tend to include significant changes, and so will require manual intervention and will not be automatically applied, even if auto-updates are enabled.

Expand All @@ -23,7 +23,7 @@ sudo cp /opt/lme_old/files_for_windows.zip /opt/lme/
sudo cp /opt/lme_old/lme.conf /opt/lme/
sudo cp /opt/lme_old/lme_update.sh /opt/lme/
```
Finally, you'll need to grab your old dashbouard_update password and add it into the new dashboard_update script:
Finally, you'll need to grab your old dashboard_update password and add it into the new dashboard_update script:
```
OLD_Password=[OLD_PASSWORD_HERE]
sudo cp /opt/lme/Chapter\ 3\ Files/dashboard_update.sh /opt/lme/
Expand Down Expand Up @@ -60,7 +60,6 @@ Most data from the old LME should display just fine in the new dashboards, but t
cd /opt/lme/
sudo ./dashboard_update.sh
```
If there are issues its possible the version didn't update in `/opt/lme/lme.conf`. Change it to `1.0` if it did not.

The rules built-in to the Elastic SIEM can then be updated to the latest version by following the instructions listed in [Chapter 4](/docs/markdown/chapter4.md#42-enable-the-detection-engine) and selecting the option to update the prebuilt rules when prompted, before making sure all of the rules are activated:

Expand Down
2 changes: 1 addition & 1 deletion testing/Readme.md
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ This script does not install LME; it simply creates a fresh environment that's r
| $NumClients | -n | The number of Windows clients to create; maximum 16; defaults to 1 | No |
| $AutoShutdownTime | | The auto-shutdown time in UTC (HHMM, e.g. 2230, 0000, 1900); auto-shutdown not configured if not provided | No |
| $AutoShutdownEmail | | An email to be notified if a VM is auto-shutdown. | No |
| $AllowedSources | -s | Comma-Seperated list of CIDR prefixes or IP ranges, e.g. XX.XX.XX.XX/YY,XX.XX.XX.XX/YY,etc..., that are allowed to connect to the VMs via RDP and ssh. | Yes |
| $AllowedSources | -s | Comma-Separated list of CIDR prefixes or IP ranges, e.g. XX.XX.XX.XX/YY,XX.XX.XX.XX/YY,etc..., that are allowed to connect to the VMs via RDP and ssh. | Yes |
| $NoPrompt | -y | Switch, run the script with no prompt (useful for automated runs). By default, the script will prompt the user to review paramters and confirm before continuing. | No |

Example:
Expand Down
2 changes: 1 addition & 1 deletion testing/SetupTestbed.ps1
Original file line number Diff line number Diff line change
Expand Up @@ -46,7 +46,7 @@ param (

[Alias("s")]
[Parameter(Mandatory=$true,
HelpMessage="XX.XX.XX.XX/YY,XX.XX.XX.XX/YY,etc... Comma-Seperated list of CIDR prefixes or IP ranges"
HelpMessage="XX.XX.XX.XX/YY,XX.XX.XX.XX/YY,etc... Comma-Separated list of CIDR prefixes or IP ranges"
)]
[string]$AllowedSources,

Expand Down