gradiuscypher / grids Goto Github PK
View Code? Open in Web Editor NEWMy network monitoring solution and tools that go along with it.
License: MIT License
My network monitoring solution and tools that go along with it.
License: MIT License
Finish the Suricata Configuration deep dive, as mentioned in this Wiki page: https://github.com/gradiuscypher/grIDS/wiki/Suricata-Container
The Elastic monitoring X-Pack is super helpful for managing Elasticsearch. Should include a guide for setting it up.
nginx proxy for kibana for more control and configuration.
Two things need to be done to ensure that the Elasticsearch Docker containers have enough resources:
vm_max_map
to a higher value. Reference here.Suricata is configured to use a specific interface name. This will more than likely not match other's hardware, so we need a way to change the interface name, either during a script or letting the user know they need to change the interface name.
Would like to write up something to publish events from the IDS platform to webhooks for things like Slack/Discord.
Might also consider leveraging Push Notifications with a platform like Firebase.
The events/sec metric on the IDS Monitoring Dashboard isn't calculating properly.
Automated scripts for each section of setup, using something like Chef/Ansible preferred.
The hardware section is light on details and is a bit hand-wavy. Need to improve this with actual recommendations and some more math behind hardware choices.
Full packet capture along with a useful way of navigating PCAPs.
How to leverage the platform for data exploration and threat hunting.
Setup a graceful way to expire old Elasticsearch documents with configurable rates.
Need to put together some tools for updating the Suricata rules in the Docker container.
Also need to consider actually tuning the rules and picking particular sections of ET's rulesets. Could also write a script to help users pick the right rulesets.
Exploration into machine learning to highlight anomalous traffic.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.