Skip to content

Commit da671c3

Browse files
Jeremy RossiJeremy Rossi
Jeremy Rossi
authored and
Jeremy Rossi
committed
Download sections
1 parent aa1b9cd commit da671c3

10 files changed

+253
-29
lines changed

Diff for: ‎Trend-Micro-Logo.jpg

5.21 KB
Loading

Diff for: ‎_templates/deepsecurity.html

+13
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
2+
<ul class="nav nav-list">
3+
<li>
4+
<a href="http://www.trendmicro.com/us/enterprise/cloud-solutions/deep-security/index.html">Deep Security</a> provides
5+
comprehensive agentless and agent-based data security across physical, virtual and cloud servers, as well as virtual desktops.
6+
7+
<a href="http://www.trendmicro.com/us/enterprise/cloud-solutions/deep-security/index.html">
8+
<img title="TrendMicro" src="Trend-Micro-Logo.jpg">
9+
</a>
10+
11+
<p>Proud sponsor of the OSSEC Project</p>
12+
</li>
13+
</ul>

Diff for: ‎conf.py

+1-1
Original file line numberDiff line numberDiff line change
@@ -240,7 +240,7 @@
240240
'blog*': ['recentposts.html', 'categories.html', 'archives.html', 'searchbox.html'],
241241
'docs/**': ['localtoc.html', 'searchbox.html'],
242242
'downloads*': ['localtoc.html'],
243-
'index.html': [],
243+
'index': ['recentposts.html'],
244244
'': [],
245245
}
246246

Diff for: ‎downloads.rst

+34-28
Original file line numberDiff line numberDiff line change
@@ -2,24 +2,30 @@
22
Downloads
33
=========
44

5+
Source Downloads
6+
~~~~~~~~~~~~~~~~
57

68
+--------------+-----------------------------------------------+-------+
79
| latest development snapshots |
810
+==============+===============================================+=======+
9-
| server/agent | https://github.com/ossec/ossec-hids |
11+
| server/agent | https://github.com/ossec/ossec-hids/releases |
1012
+--------------+-----------------------------------------------+-------+
11-
| web ui | https://github.com/ossec/ossec-wui |
13+
| web ui | https://github.com/ossec/ossec-wui/release |
1214
+--------------+-----------------------------------------------+-------+
1315
| docs | https://github.com/ossec/ossec-docs |
1416
+--------------+-----------------------------------------------+-------+
15-
| Latest Stable Release (2.8.1) |
16-
+--------------+-----------------------------------------------+-------+
17-
| Server/Agent | https://github.com/ossec/ossec-hids | CRC |
18-
+--------------+-----------------------------------------------+-------+
19-
| Agent Windows| https://github.com/ossec/ossec-wui | CRC |
20-
+--------------+-----------------------------------------------+-------+
21-
| Virtual Appl | https://github.com/ossec/ossec-docs | CRC |
22-
+--------------+-----------------------------------------------+-------+
17+
18+
+--------------+-----------------------------------------------------------------------------------------------------+--------------------------------------------------------+
19+
| Latest Stable Release (2.8.1) |
20+
+===================+================================================================================================+========================================================+
21+
| Server/Agent Unix | `2.8.1.tar.gz <https://github.com/ossec/ossec-hids/archive/2.8.1.tar.gz>`_ | `Checksum <files/ossec-hids-2.8.1-checksum.txt>`_ |
22+
+-------------------+------------------------------------------------------------------------------------------------+--------------------------------------------------------+
23+
| Agent Windows | `ossec-agent-win32-2.8.exe`_ | `Checksum <files/ossec-agent-win32-2.8-checksum.txt>`_ |
24+
+-------------------+------------------------------------------------------------------------------------------------+--------------------------------------------------------+
25+
| Virtual Appl | `ossec-vm-2.8.1.ova <http://www.ossec.net/files/ossec-vm-2.8.1.ova>`_ | `Checksum <files/ossec-vm-2.8.1-checksum.txt>`_ |
26+
+-------------------+------------------------------------------------------------------------------------------------+--------------------------------------------------------+
27+
28+
.. _ossec-agent-win32-2.8.exe: https://github.com/ossec/ossec-hids/releases/download/v2.8.0/ossec-agent-win32-2.8.exe
2329

2430
RPMs for RHEL, CentOS, Fedora and others
2531
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
@@ -52,22 +58,6 @@ Available in the `AtomiCorp repository <http://www5.atomicorp.com/channels/ossec
5258
| All | `6 - 20 <http://www5.atomicorp.com/channels/ossec/fedora/>`_ |
5359
+--------------+----------------------------------------------------------------------------+
5460

55-
DEBs for Debian Wheezy, Jessie and Sid
56-
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
57-
58-
Available in the `AlienVault repository <http://ossec.alienvault.com/repos/apt/debian/pool/main/o/>`_.
59-
60-
61-
+-------------------------------------------------------------------------------------------+
62-
| Debian |
63-
+==============+============================================================================+
64-
| OSSEC Server | `Wheezy, Jessie, Sid <http://ossec.alienvault.com/repos/apt/debian/pool/main/o/ossec-hids/>`_ |
65-
+--------------+----------------------------------------------------------------------------+
66-
| OSSEC Agent | `Wheezy, Jessie, Sid <http://ossec.alienvault.com/repos/apt/debian/pool/main/o/ossec-hids-agent/>`_ |
67-
+--------------+----------------------------------------------------------------------------+
68-
69-
70-
7161
RPM Installation
7262
================
7363

@@ -79,6 +69,21 @@ To install with yum do the following:
7969
# yum install ossec-hids ossec-hids-server (or ossec-hids-client for the agent)
8070
8171
72+
DEBs for Debian Wheezy, Jessie and Sid
73+
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
74+
75+
Available in the `AlienVault repository <http://ossec.alienvault.com/repos/apt/debian/pool/main/o/>`_.
76+
77+
78+
+--------------------------------------------------------------------------------------------------------------------+
79+
| Debian |
80+
+==============+=====================================================================================================+
81+
| OSSEC Server | `Wheezy, Jessie, Sid <http://ossec.alienvault.com/repos/apt/debian/pool/main/o/ossec-hids/>`_ |
82+
+--------------+-----------------------------------------------------------------------------------------------------+
83+
| OSSEC Agent | `Wheezy, Jessie, Sid <http://ossec.alienvault.com/repos/apt/debian/pool/main/o/ossec-hids-agent/>`_ |
84+
+--------------+-----------------------------------------------------------------------------------------------------+
85+
86+
8287
DEB Installation
8388
================
8489

@@ -92,8 +97,9 @@ To install with apt-get do the following:
9297
# apt-get update
9398
# apt-get install ossec-hids (or ossec-hids-agent)
9499
100+
95101
PGP key
96-
=======
102+
~~~~~~~
97103

98104
Before you install any package from our project, we recommend that you
99105
verify it using our PGP key. Follow these two steps if you are not used
@@ -124,7 +130,7 @@ warning saying “gpg: Note: This key has expired!”, make sure to update
124130
the key and run the “import” command again (as specified above).
125131

126132
Contribute back!
127-
----------------
133+
~~~~~~~~~~~~~~~~
128134

129135
If you find ossec useful and would like to contribute back to the
130136
community, please contact us. We have a lot of work to do and any help

Diff for: ‎files/OSSEC-PGP-KEY.asc

+53
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,53 @@
1+
-----BEGIN PGP PUBLIC KEY BLOCK-----
2+
Version: GnuPG v1.4.10 (GNU/Linux)
3+
4+
mQINBE4bYxIBEAC296jKikGNwTq43gYNh/jD0J9DJbIULkUnxqPc9mGjn4zSqd4S
5+
vqPunLEQWZTGupNkW6xlty6MM5hXwFLJCGuoMqa8Ad+AS8ovf+Tf8+fjAzDOqrJH
6+
Yo8aeAnwvLxOQugKvT1qIImoOIU6CbvlZsl9kSTsrejVJ8tU+g7EYLx3cKHU4wJL
7+
iKJ6tpcxIwaXb0YTqtJHnoNIA20PKiTsXT5onQNX0xJfzYBbb+veJ8kVJ7jorPoH
8+
3epiSbDHppliyF1D+cJgfxPthAXdYWITl5jAcdlshaqopssJkWUyiDxL63ZGY9rM
9+
/pGQxQKydWAcMo64OAunlbXCT9x5IaVcVfM7TUw0hDv45QRMSnSMC0f7VrZENpcM
10+
nzxil1Y4AhaKKcmyIRxE1cKijm+CYf9bmArRsebiJiHP6K93iryOUfwNyPPNl5iG
11+
qWi1A7Kf2r8Q30feEHU//ySN/yeSP55nEV2MEkEDEUG6wctIbb0nl4lgK+5kMXmi
12+
4/C111DU4h8L/x4z2hfNXV6wfCq0mWzXDHGvGiHdaYypSwD8ny6qb8BnT/uLttUs
13+
eTClanJTnSKZQsTC0HWhZ8LEIIXLV64LB+vbj9nDx8YkEasxdNDFE5uw0l/7lwuM
14+
H6q6OWnQBdpELio93KCiWVUIkABK1YIjg1GicPaAhv48ZiSVPfnvDOR9jQARAQAB
15+
tB5EYW5pZWwgQi4gQ2lkIDxkY2lkQG9zc2VjLm5ldD6JAj4EEwECACgFAk4bYxIC
16+
GwMFCQlmAYAGCwkIBwMCBhUIAgkKCwQWAgMBAh4BAheAAAoJEEVrF8+jkBNRwPUP
17+
/Ryl+wNOQXt3DAmKV4EKbL52W2xhciePw3fHPjePRMQNrHw6zt4d16TulebLDhyJ
18+
tCM2RbH2WlHk2gUJvM2ItEdi+FFh5MYjfgjAzCqqE6+TmxBPA3NRWYBLLp/zUcDZ
19+
vhxWgiU0+Uj6M4DkeKu3M0LgG8JdWl3WzyvSYupOMnme7BSoQU4ctv41jCnEAlUb
20+
UA422Tzi3tWMUIqeGdUbdG92riu32s4E6zBcxUMNErVvTSPxWe1/FpVR/ckptCum
21+
wj+x2xMjtSexEAja6mXa3Iz02JFpYU4CgYNEepwAelH5duuOuFMrH+jeRrgsfeIm
22+
JKWdipzwyvea8WrXx7q4X3+2LskXp4QwwyxYjtZJmQoz1DSJHWtzd0Wxik1UuZPa
23+
Lpm8PtmlJYXuYCB2kWUEMX3/lNyZMtpbt2wDqAaHn2/4NF6gkC0DzDi9mLscBJDV
24+
lZL8C6aBPxQByFMpIVuhKlAjJe3PrpY1/oUs8JDwcCAqXpA3VA0NjLyLQi4aJQ2G
25+
Fy6p+lPMxo6qVe4OpJ+2yZuH2CAY5gDojca/TJRMdfsDBU1ZYfcyf4CmmvH/SesD
26+
j+7NS1ENR4Ujt5oVjHs0ApMebn/R1oR2M21YZVjrBv6B44Q8OL8b6A9Db0L2Q3nP
27+
3KUlX0g1SE7WRM8e7vL5bDD+/TILQc1ZxZyxMBSP9ovhuQINBE4bYxIBEADNCre/
28+
3Z9nnxIukzMj6PqZnsNU57dhUrvvujxieJa9wgm9h8c0fADn5UbxyEzQexMP4i7A
29+
voTrDKNZikuQyWK8BEtd5esyCUV5kgBF0u9x/KCZrto03/5uvZG2PNz5kUrO18fP
30+
AU/62P7epRl55lyPwYWGSVpMlsysmuu5SMW57JrXHgCSFqC8Kz3/3Qtfx2RfSkJD
31+
xZFH5BrThtvBvB36Ek4I105tfn7cF6OsgZxrkeRS56ZNmDJIOTF+Z/gRKmohPKQV
32+
jaADCOzInV9n0opyRtH3POghoDiDv35ecZpRGvSxuU5TizXJrJs7tF2IOL8nqCU/
33+
F0DZAczYSrRugfPX0Hx2s6+j+Rf8ElYxR/1YqJ57egMm6kloeOTRtGGfooCox0ZP
34+
2pdPT5mOiYucEWAw1L5OWcyXVO9cQ158NPcsTPTQEHZecRCQTHk2S1EvZ82SiiAL
35+
7QZ7feoSJNCv/+i5YAVHnuP8KNdz5575f5YKMhhUmVokXLl2HQhlGqmVNedfgyD2
36+
mZ6jT7h+v012kM4TGBPhZGVXoQjoPnzlFqQhovg/IrXKvs12/LyLkQhHR3XZqede
37+
3zesF1tbQluXmssnAWSWIrE3q+QoT22av4P3GxSabZYu1BooC7oI3rqXubFjwi7R
38+
oAu7CqYjRPDU5MbFIsjNC/BiCVbQQ2xMIaTZvwARAQABiQIlBBgBAgAPBQJOG2MS
39+
AhsMBQkJZgGAAAoJEEVrF8+jkBNRvMwQAI70gTIbmhEuz0D89pV9QD2b40d2TVuJ
40+
+jeQChtD++5p73llavM9P4TNY+FSEbTFxXEl1hVFEdvJZAlpva0gWphjSSmVIUr5
41+
YSpFwp/MUpysLmHgVlVMQNukDBqULG+60BvPGWq5LeausmFcXC27AzxRR2F3/XKN
42+
8eV+eAH5Uqy8dRiMMAn86x0PB0A2xyjBZGsH769ucJgXYQIRRZ8wn/ol/imGlMfT
43+
5VdQ5fa8PwXFKnqYAWtMQafkafoYlKGvUS3hPJki/e/SCPjLLZXX8Xc/XgSYQu97
44+
UezZFJ0Km2lM5pwOu0d86WmiMnOA6GmIBg3wLBNR1kdccGF82z+EEWxA0Hh7hwxd
45+
U1ZhqeLUK71M95xZiq9Q+aXrJVs4eqtIFXRr1YAcfBkhiTDM5Vq936Ja7cxys6Nx
46+
HvL6Mkh//nRwfT8PufHPjZGAt+5OB37jLTOwQn6XZhXOIBVp/r3ezrVdrxbkiqTk
47+
YuypHZxt7csc4dFfMY4ZYQ2MWPHR+v0OJc63/gtP98/7TJjdx1BPEAYcfi7feRv6
48+
H2v0PtbKsgo1PRC+g/6LbHouBjXEEf7orrPzKxwNTLAno6rzFwlEYTLSqyGHBGpV
49+
OMTkBnvf7OQyMDtSnET66wgrgu1eS9eFGdftyYHjuSWBZJsHfwrlsQJz9z9fM6/p
50+
E3Tntif/Eivx
51+
=jcBw
52+
-----END PGP PUBLIC KEY BLOCK-----
53+

Diff for: ‎files/ossec-agent-win32-2.8-checksum.txt

+2
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
MD5(ossec-agent-win32-2.8.exe)= a699117d0ed77f88b3a8661644ee3efd
2+
SHA1(ossec-agent-win32-2.8.exe)= 5b8759b555c56c3ed8f360f2abccd69e3c097c2f

Diff for: ‎files/ossec-hids-2.8.1-checksum.txt

+2
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
MD5(ossec-hids-2.8.1.tar.gz)= c2ffd25180f760e366ab16eeb82ae382
2+
SHA1(ossec-hids-2.8.1.tar.gz)= 0ecf1df09558dc8bb4b6f65e1fb2ca7a7df9817c

Diff for: ‎files/ossec-hids-2.8.1-release-note.txt

+87
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,87 @@
1+
Trend Micro, Inc. Sept 9, 2014
2+
--------------------------------------------------------------------------------
3+
OSSEC "v2.8.1" Release Note
4+
--------------------------------------------------------------------------------
5+
6+
Summary of changes in v2.8.1
7+
8+
=== NOTE: In terms of features this release is the same as OSSEC 2.8, *EXCEPT*
9+
it includes a fix for CVE-2014-5284 vulnerability discovered by Jeff
10+
Petersen of Roka Security LLC.
11+
12+
Go to https://github.com/ossec/ossec-hids/releases/tag/2.8.1 for more
13+
information regarding this issue.
14+
15+
=== Installation
16+
== Server
17+
- Avoided a crash of agentd on Solaris (danpop60)
18+
19+
== Agent
20+
- Fixed manage_agents -f potential infinite loop (awiddersheim)
21+
- Added manage_agents -r <id> to remove an agent (awiddersheim)
22+
- Allow NIX agents to use "-f" option and run in forground (awiddersheim)
23+
24+
- Windows agent install/uninstall GUI enhancements (awiddersheim)
25+
- Windows agent_config profile fixed (gaelmuller)
26+
- Added eventchannel support for Windows agent on Vista or later (gaelmuller)
27+
- Many Windows agent bug fixes (awiddersheim)
28+
29+
=== Syscheck
30+
== Extended filesize from an integer to a long integer
31+
== Make syscheck/analysisd/remoted.debug in internal_options.conf work (awiddersheim)
32+
33+
=== ActiveResponse
34+
== Fix active-response on MAC OS Firewall (jknockaert)
35+
36+
=== Log monitoring/analysis
37+
== Add option to allow the outputing of all alerts to a zeromq PUB socket
38+
in JSON format, using cJSON library (jrossi, justintime32). New Config:
39+
<ossec>
40+
<global>
41+
<zeromq_output>yes|no</zeromq_output>
42+
<zeromq_uri>tcp://localhost:11111</zeromq_uri>
43+
== Add TimeGenerated to the output of Windows Event logs (awiddersheim)
44+
== os_net fixes, and code clean up in general (cgzones)
45+
== os_regex unit test cases added (cgzones)
46+
== os_xml review and fixes (cgzones)
47+
48+
=== Rules and Decoders
49+
== Added some additional sshd rules in sshd_rules.xml (joshgarnett)
50+
== Removed bro-ids rules (ddpbsd)
51+
== Removed event ID 676, 672 in msauth_rules.xml (mstarks01)
52+
53+
=== Contributions
54+
== zeromq_pubsub.py (jrossi)
55+
== ossec-eps.sh, a script to calculate events-per-second (mstarks01)
56+
57+
58+
OSSEC 2.8 CONTRIBUTORS (GitHub usernames in alphabetical order):
59+
awiddersheim
60+
Brad Lhotsky
61+
cgzones
62+
ChristianBeer
63+
danpop60 (Solaris fix)
64+
ddpbsd
65+
denied39
66+
dopefish
67+
gaelmuller
68+
harshilmathur
69+
jbcheng
70+
jknockaert
71+
justintime32
72+
Joshua Garnett
73+
harshilmathur
74+
hexinglun
75+
jrossi
76+
labrown
77+
Micha Nasriachi
78+
mstarks01
79+
northox
80+
pdrakeweb
81+
reyjrar
82+
Santiago Bassett
83+
84+
85+
=== END ===
86+
87+

Diff for: ‎files/ossec-vm-2.8.1-checksum.txt

+2
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
MD5(ossec-vm-2.8.1.ova)= bf3a01045e81b407d4c284e82e5bbeb2
2+
SHA1(ossec-vm-2.8.1.ova)= fda0b8b8d13a91b7fc42ca14c4af47e6feb09215

Diff for: ‎files/ossec-vm-2.8.1.README

+59
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,59 @@
1+
OSSEC Virtual Appliance 2.8.1
2+
=============================
3+
4+
1. This virtual appliance contains the following facilities:
5+
6+
- CentOS 6.5
7+
- OSSEC 2.8.1
8+
- OSSEC WebUI 0.8 Beta
9+
- Elasticsearch 1.3.1
10+
- Logstash 1.4.2
11+
- Kibana 3.1.0
12+
- ElasticHQ monitoring plugin
13+
- XAMPP 1.8.1
14+
15+
2. The virtual appliance is provided as an OVA which you can import into
16+
most virtual systems. We recommend using VirtualBox which can import
17+
the OVA image directly. We used VirtualBox to create this appliance
18+
and the OVA.
19+
20+
NOTE: The VM can only be run on 64 bit systems.
21+
22+
3. To open the appliance, unzip the package with gunzip then open the
23+
ossec-virtual-appliance.ova in VirtualBox.
24+
25+
4. The password for all the accounts on this system including root, user,
26+
OSSEC Web UI and phpMyAdmin is "_0ssec_". Note that the user name for
27+
the OSSEC Web UI is just "user" and for phpMyAdmin is "root".
28+
29+
5. Firefox is installed on this VM which includes links to the following:
30+
31+
- OSSEC Documentation
32+
- OSSEC Web UI
33+
- OSSEC Logs (Kibana console to Elasticsearch)
34+
- ElastiHQ managment console
35+
36+
6. OSSEC, OSSEC WebUI, and the ELK (Elasticsearch-Logstash-Kibana) stack
37+
are all configured to work out of the box. There are copies of OSSEC
38+
agent for Linux and Windows that you can push out to systems that you
39+
want to monitor.
40+
41+
7. Before installing an OSSEC agent, make sure you change the VM network
42+
interface from NAT - the factory default - to bridged so that you will
43+
get an IP address from you network's DHCP server or set a static IP in
44+
the VM by configuring the network files on the CentOS system as you
45+
would any other Redhat derived Linux system.
46+
47+
8. Although you don't have to change any ELK configuration settings, if
48+
you feel the need to explore, the Elasticsearch system is installed
49+
in /usr/share/elasticsearch and the main configuration files are
50+
/etc/elasticsearch/elasticsearch.yml and /etc/sysconfig/elasticsearch.
51+
Similarly, Logstash is installed in /usr/share/logstash.
52+
53+
9. XAMPP is installed in /opt/lampp.
54+
55+
10. OSSEC WebUI is installed in /opt/lampp/htdocs/ossec-wui and Kibana is
56+
installed in /opt/lampp/htdocs/kibana.
57+
58+
11. You can start and stop ossec, elasticsearch, logstash, and xampp with
59+
the 'service' command.

0 commit comments

Comments
 (0)