-
Notifications
You must be signed in to change notification settings - Fork 2
/
mozdefinstall_trial.sh
executable file
·77 lines (59 loc) · 2.67 KB
/
mozdefinstall_trial.sh
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
MOZ_PATH=/opt/MozDef
# Cloning into /opt/
sudo git clone https://github.com/jeffbryner/MozDef.git $MOZ_PATH
# The permissions of /opt/ should NEVER be tampered with.
# This can have drastic effects on the system.
# Instead change the owner of the specific files/directories as per the need.
sudo chown -R $USER $MOZ_PATH
# Rabbit MQ
sudo apt-get install -y rabbitmq-server
sudo rabbitmq-plugins enable rabbitmq_management
# MongoDB
sudo apt-get install -y mongodb
# Nodejs and NPM
curl -sL https://deb.nodesource.com/setup_0.12 | sudo bash -
sudo apt-get install -y nodejs npm
# Nginx
sudo apt-get install -y nginx-full
sudo cp /opt/MozDef/docker/conf/nginx.conf /etc/nginx/nginx.conf
# MozDef
sudo apt-get install -y python2.7-dev python-pip curl supervisor wget libmysqlclient-dev
sudo -H pip install -U pip
# Below may have to be installed globally
sudo pip install uwsgi celery virtualenv
PATH_TO_VENV=$HOME/.mozdef_env
# Creating a virtualenv here
virtualenv $PATH_TO_VENV
sudo mkdir /var/log/mozdef
sudo mkdir -p /run/uwsgi/apps/
sudo touch /run/uwsgi/apps/loginput.socket && sudo chmod 666 /run/uwsgi/apps/loginput.socket
sudo touch /run/uwsgi/apps/rest.socket && sudo chmod 666 /run/uwsgi/apps/rest.socket
# Rewrite the below line, special care to be taken
mkdir -p $PATH_TO_VENV/bot/ && cd $PATH_TO_VENV/bot/
# Where to put it ? What does it do ?
wget http://geolite.maxmind.com/download/geoip/database/GeoLiteCity.dat.gz && gzip -d GeoLiteCity.dat.gz
# Copying config files
#### Do we need to do this ??
sudo cp $MOZ_PATH/docker/conf/supervisor.conf /etc/supervisor/conf.d/supervisor.conf
####
# sudo removed from below, if not working, use sudo
cp $MOZ_PATH/docker/conf/settings.js $MOZ_PATH/meteor/app/lib/settings.js
cp $MOZ_PATH/docker/conf/config.py $MOZ_PATH/alerts/lib/config.py
cp $MOZ_PATH/docker/conf/sampleData2MozDef.conf $MOZ_PATH/examples/demo/sampleData2MozDef.conf
cp $MOZ_PATH/docker/conf/mozdef.localloginenabled.css $MOZ_PATH/meteor/public/css/mozdef.css
# Install Kibana
cd /tmp/
sudo curl -L https://download.elasticsearch.org/kibana/kibana/kibana-3.1.0.tar.gz | sudo tar -C /opt -xz
sudo /bin/ln -s /opt/kibana-3.1.0 /opt/kibana
cd /opt/
## Instead of downloading: How about copying from a to b
sudo wget https://raw.githubusercontent.com/jeffbryner/MozDef/master/examples/kibana/dashboards/alert.js
sudo wget https://raw.githubusercontent.com/jeffbryner/MozDef/master/examples/kibana/dashboards/event.js
sudo cp alert.js /opt/kibana/app/dashboards/alert.js
sudo cp event.js /opt/kibana/app/dashboards/event.js
curl -L https://install.meteor.com/ | /bin/sh
sudo npm install -g meteorite
sudo rm -r /usr/bin/node
sudo ln -s /usr/bin/nodejs /usr/bin/node
cd /opt/MozDef/meteor
#meteor