Skip to content

Commit

Permalink
The vulnerability detection configuration block has been updated (#6376)
Browse files Browse the repository at this point in the history
* Update imposter

* Configuration block vulnerability detection update

* Remove unwanted elements -vulnerability conf block-

---------

Co-authored-by: Federico Rodriguez <[email protected]>
  • Loading branch information
yenienserrano and asteriscos authored Feb 2, 2024
1 parent 7227630 commit 4041e2b
Show file tree
Hide file tree
Showing 8 changed files with 234 additions and 334 deletions.
37 changes: 37 additions & 0 deletions docker/imposter/agents/agent_manager.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
{
"data": {
"affected_items": [
{
"os": {
"arch": "x86_64",
"codename": "stretch",
"major": "9",
"name": "Debian GNU/Linux",
"platform": "debian",
"uname": "Linux |ip-10-0-1-106 |4.9.0-9-amd64 |#1 SMP Debian 4.9.168-1+deb9u2 (2019-05-13) |x86_64",
"version": "9"
},
"ip": "FE80:0034:0223:A000:0002:B3FF:0000:8329",
"configSum": "6f4293818ef64291ca53727fb9ab8958",
"mergedSum": "7976a83d1aebcca09bc14459b5518ed5",
"id": "000",
"registerIP": "any",
"dateAdd": "2022-08-25T16:25:53Z",
"disconnection_time": "2022-08-25T16:36:35Z",
"name": "Debian",
"status": "active",
"manager": "wazuh-manager-master-0",
"node_name": "master",
"group": ["default", "debian"],
"lastKeepAlive": "2022-09-12T08:48:40Z",
"version": "Wazuh v4.3.7",
"status_code": 0
}
],
"total_affected_items": 1,
"total_failed_items": 0,
"failed_items": []
},
"message": "All selected agents information was returned",
"error": 0
}
3 changes: 3 additions & 0 deletions docker/imposter/agents/agents.js
Original file line number Diff line number Diff line change
Expand Up @@ -12,6 +12,9 @@ switch (agentId) {
case undefined:
respond().withStatusCode(200).withFile('agents/agents.json');
break;
case '000':
respond().withStatusCode(200).withFile('agents/agent_manager.json');
break;
case '001':
respond().withStatusCode(200).withFile('agents/agent_active_groups.json');
break;
Expand Down
120 changes: 13 additions & 107 deletions docker/imposter/cluster/configuration/wmodules_wmodules.json
Original file line number Diff line number Diff line change
Expand Up @@ -22,6 +22,7 @@
"interval": 86400,
"java_path": "wodles/java",
"ciscat_path": "wodles/ciscat",
"ciscat_binary": "CIS-CAT.sh",
"timeout": 1800
}
},
Expand Down Expand Up @@ -59,114 +60,19 @@
}
},
{
"vulnerability-detector": {
"vulnerability-detection": {
"enabled": "yes",
"run_on_start": "yes",
"interval": 300,
"min_full_scan_interval": 21600,
"retry_interval": 30,
"providers": [
{
"name": "canonical",
"version": "TRUSTY",
"url": "https://test.com",
"update_interval": 3600,
"download_timeout": 300
},
{
"name": "canonical",
"version": "XENIAL",
"url": "https://test.com",
"update_interval": 3600,
"download_timeout": 300
},
{
"name": "canonical",
"version": "BIONIC",
"url": "https://test.com",
"update_interval": 3600,
"download_timeout": 300
},
{
"name": "canonical",
"version": "FOCAL",
"url": "https://test.com",
"update_interval": 3600,
"download_timeout": 300
},
{
"name": "debian",
"version": "STRETCH",
"url": "https://test.com",
"update_interval": 3600,
"download_timeout": 300
},
{
"name": "debian",
"version": "BUSTER",
"url": "https://test.com",
"update_interval": 3600,
"download_timeout": 300
},
{
"name": "redhat",
"version": "5",
"url": "https://test.com",
"update_interval": 3600,
"download_timeout": 300
},
{
"name": "redhat",
"version": "6",
"url": "https://test.com",
"update_interval": 3600,
"download_timeout": 300
},
{
"name": "redhat",
"version": "7",
"url": "https://test.com",
"update_interval": 3600,
"download_timeout": 300
},
{
"name": "redhat",
"version": "8",
"url": "https://test.com",
"update_interval": 3600,
"download_timeout": 300
},
{
"name": "jredhat",
"update_interval": 3600,
"download_timeout": 0
},
{
"name": "alas",
"version": "Amazon-Linux",
"url": "https://test.com",
"update_interval": 3600,
"download_timeout": 300
},
{
"name": "test",
"version": "test",
"url": "https://test.com",
"update_interval": 3600,
"download_timeout": 300
},
{
"name": "arch",
"update_interval": 3600,
"download_timeout": 300
},
{
"name": "nvd",
"update_from_year": 2010,
"update_interval": 3600,
"download_timeout": 300
}
]
"feed-update-interval": "60m"
}
},
{
"wazuh_control": {
"enabled": "yes"
}
},
{
"wazuh_control": {
"enabled": "yes"
}
},
{
Expand Down
6 changes: 6 additions & 0 deletions docker/imposter/manager/configuration.js
Original file line number Diff line number Diff line change
Expand Up @@ -13,6 +13,12 @@ switch (pathConfiguration[0]) {
.withStatusCode(200)
.withFile('manager/configuration/monitor_reports.json');

break;
case 'wmodules':
respond()
.withStatusCode(200)
.withFile('manager/configuration/monitor_reports.json');

break;
default:
respond()
Expand Down
105 changes: 105 additions & 0 deletions docker/imposter/manager/configuration/wmodules_wmodules.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,105 @@
{
"data": {
"affected_items": [
{
"wmodules": [
{
"agent-upgrade": {
"enabled": "yes",
"max_threads": 8,
"chunk_size": 512
}
},
{
"task-manager": {
"enabled": "yes"
}
},
{
"cis-cat": {
"disabled": "yes",
"scan-on-start": "yes",
"interval": 86400,
"java_path": "wodles/java",
"ciscat_path": "wodles/ciscat",
"ciscat_binary": "CIS-CAT.sh",
"timeout": 1800
}
},
{
"osquery": {
"disabled": "yes",
"run_daemon": "yes",
"add_labels": "yes",
"log_path": "/var/log/osquery/osqueryd.results.log",
"config_path": "/etc/osquery/osquery.conf"
}
},
{
"syscollector": {
"disabled": "no",
"scan-on-start": "yes",
"interval": 3600,
"network": "yes",
"os": "yes",
"hardware": "yes",
"packages": "yes",
"ports": "yes",
"ports_all": "no",
"processes": "yes",
"sync_max_eps": 10
}
},
{
"sca": {
"interval": 43200,
"enabled": "yes",
"scan_on_start": "yes",
"skip_nfs": "yes",
"policies": ["/var/ossec/ruleset/sca/cis_ubuntu20-04.yml"]
}
},
{
"vulnerability-detection": {
"enabled": "yes",
"feed-update-interval": "60m"
}
},
{
"wazuh_control": {
"enabled": "yes"
}
},
{
"wazuh_control": {
"enabled": "yes"
}
},
{
"database": {
"sync_agents": "yes",
"real_time": "yes",
"interval": 60,
"max_queued_events": 0
}
},
{
"wazuh_download": {
"enabled": "yes"
}
},
{
"wazuh_control": {
"enabled": "yes"
}
}
]
}
],
"total_affected_items": 1,
"total_failed_items": 0,
"failed_items": []
},
"message": "Active configuration was successfully read",
"error": 0
}

This file was deleted.

Loading

0 comments on commit 4041e2b

Please sign in to comment.