-
Notifications
You must be signed in to change notification settings - Fork 187
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
The vulnerability detection configuration block has been updated (#6376)
* Update imposter * Configuration block vulnerability detection update * Remove unwanted elements -vulnerability conf block- --------- Co-authored-by: Federico Rodriguez <[email protected]>
- Loading branch information
1 parent
7227630
commit 4041e2b
Showing
8 changed files
with
234 additions
and
334 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,37 @@ | ||
{ | ||
"data": { | ||
"affected_items": [ | ||
{ | ||
"os": { | ||
"arch": "x86_64", | ||
"codename": "stretch", | ||
"major": "9", | ||
"name": "Debian GNU/Linux", | ||
"platform": "debian", | ||
"uname": "Linux |ip-10-0-1-106 |4.9.0-9-amd64 |#1 SMP Debian 4.9.168-1+deb9u2 (2019-05-13) |x86_64", | ||
"version": "9" | ||
}, | ||
"ip": "FE80:0034:0223:A000:0002:B3FF:0000:8329", | ||
"configSum": "6f4293818ef64291ca53727fb9ab8958", | ||
"mergedSum": "7976a83d1aebcca09bc14459b5518ed5", | ||
"id": "000", | ||
"registerIP": "any", | ||
"dateAdd": "2022-08-25T16:25:53Z", | ||
"disconnection_time": "2022-08-25T16:36:35Z", | ||
"name": "Debian", | ||
"status": "active", | ||
"manager": "wazuh-manager-master-0", | ||
"node_name": "master", | ||
"group": ["default", "debian"], | ||
"lastKeepAlive": "2022-09-12T08:48:40Z", | ||
"version": "Wazuh v4.3.7", | ||
"status_code": 0 | ||
} | ||
], | ||
"total_affected_items": 1, | ||
"total_failed_items": 0, | ||
"failed_items": [] | ||
}, | ||
"message": "All selected agents information was returned", | ||
"error": 0 | ||
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
105 changes: 105 additions & 0 deletions
105
docker/imposter/manager/configuration/wmodules_wmodules.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,105 @@ | ||
{ | ||
"data": { | ||
"affected_items": [ | ||
{ | ||
"wmodules": [ | ||
{ | ||
"agent-upgrade": { | ||
"enabled": "yes", | ||
"max_threads": 8, | ||
"chunk_size": 512 | ||
} | ||
}, | ||
{ | ||
"task-manager": { | ||
"enabled": "yes" | ||
} | ||
}, | ||
{ | ||
"cis-cat": { | ||
"disabled": "yes", | ||
"scan-on-start": "yes", | ||
"interval": 86400, | ||
"java_path": "wodles/java", | ||
"ciscat_path": "wodles/ciscat", | ||
"ciscat_binary": "CIS-CAT.sh", | ||
"timeout": 1800 | ||
} | ||
}, | ||
{ | ||
"osquery": { | ||
"disabled": "yes", | ||
"run_daemon": "yes", | ||
"add_labels": "yes", | ||
"log_path": "/var/log/osquery/osqueryd.results.log", | ||
"config_path": "/etc/osquery/osquery.conf" | ||
} | ||
}, | ||
{ | ||
"syscollector": { | ||
"disabled": "no", | ||
"scan-on-start": "yes", | ||
"interval": 3600, | ||
"network": "yes", | ||
"os": "yes", | ||
"hardware": "yes", | ||
"packages": "yes", | ||
"ports": "yes", | ||
"ports_all": "no", | ||
"processes": "yes", | ||
"sync_max_eps": 10 | ||
} | ||
}, | ||
{ | ||
"sca": { | ||
"interval": 43200, | ||
"enabled": "yes", | ||
"scan_on_start": "yes", | ||
"skip_nfs": "yes", | ||
"policies": ["/var/ossec/ruleset/sca/cis_ubuntu20-04.yml"] | ||
} | ||
}, | ||
{ | ||
"vulnerability-detection": { | ||
"enabled": "yes", | ||
"feed-update-interval": "60m" | ||
} | ||
}, | ||
{ | ||
"wazuh_control": { | ||
"enabled": "yes" | ||
} | ||
}, | ||
{ | ||
"wazuh_control": { | ||
"enabled": "yes" | ||
} | ||
}, | ||
{ | ||
"database": { | ||
"sync_agents": "yes", | ||
"real_time": "yes", | ||
"interval": 60, | ||
"max_queued_events": 0 | ||
} | ||
}, | ||
{ | ||
"wazuh_download": { | ||
"enabled": "yes" | ||
} | ||
}, | ||
{ | ||
"wazuh_control": { | ||
"enabled": "yes" | ||
} | ||
} | ||
] | ||
} | ||
], | ||
"total_affected_items": 1, | ||
"total_failed_items": 0, | ||
"failed_items": [] | ||
}, | ||
"message": "Active configuration was successfully read", | ||
"error": 0 | ||
} |
74 changes: 0 additions & 74 deletions
74
...management/components/management/configuration/vulnerabilities/vulnerabilities-general.js
This file was deleted.
Oops, something went wrong.
Oops, something went wrong.