• Description
• Screenshots
• Dependencies
• Installation
  • Apache Metron
  • LTW GCR Canary
• Configuration
• Usage
• How to test the software
• Known issues
• Getting help
• Getting involved
• Open source licensing info
• Related open source projects
• Credits and references
• Contributors

This GCR open source project is focused on delivering an easy to deploy open source cybersecurity monitoring solution for small to medium enterprises.

The project goal is a push-button install of the platform software necessary to support a professional-level Cybersecurity Operations Center (CSOC) solution suitable for use by managed service providers focused on small businesses, or medium sized enterprise IT departments.

The project assets will include: software, documentation, and training materials.

The software will configure, integrate and enhance existing open source software cybersecurity projects, including: Apache Metron, Dionaea, Cowrie, OSSEC and others.

Integration of cybersecurity sensors is a priority for the project to reduce labour and complexity associated with deploying open source security operations center solutions. The project includes a remotely managed honeypot device (LTW GCR Canary) that is suitable for use as a sensor for passive intrusion detection in SME environments.

The project will include CSOC Operational Playbook templates suitable for use by manager service providers or IT department staff responsible for operating the CSOC.

Online training materials will be provided for SME employees to help address employee security awareness.

The project is currently in progress and available at https://github.com/LTW-GCR-CSOC

To be provided

To be provided

To be provided

The installation has been tested on Ubuntu Mate LTS 16.04 with Raspberry Pi 3.

It is currently under active development and testing.

To install all of the LTW GCR Canary software, run the following script:

wget https://github.com/LTW-GCR-CSOC/csoc-installation-scripts/archive/master.zip && \ unzip master.zip && \ cd csoc-installation-scripts-master/ && \ chmod +x *.sh && \ ./honeypots.sh 

Dionaea logs and database will be in this directory /opt/dionaea/var/dionaea

To view the Cowrie Logs, visit http://0.0.0.0:5000

To view the Dionaea Logs, visit http://0.0.0.0:8000

To be provided - information on configurable items related to the software.

To be provided - show users how to use the software.

To be provided - information on how to run automated tests on the software.

Currently under active development, see this repository's Issue Tracker.

If you have questions, concerns, bug reports, etc, please file an issue in this repository's Issue Tracker.

CONTRIBUTING

• LICENSE

• [Apache Metron]
• [Dionaea]
• [Dionaea Log Viewer]
• [Cowrie]
• [Cowrie Log Viewer]
• [OSSEC]
• [OpenVAS]
• Mender.io

• Global Epic
• Lead to Win
• Lead to Win - Cyber
• Hacker Alerting Service
• Carleton University TIM Program

• Daniel Craigen - GCR Project Leader
• Brian Hurley - GCR CSOC Project Leader
• Ahmed Shah - Cybersecurity Analyst and Software Developer
• Naveen Narayanasamy - Cybersecurity Software Developer
• Frank Horsfall - Cybersecurity Architecture
• Adefemi "Femi" Debo-Omidokun - CSOC Operations
• [Anthony Ani - CSOC SME Customer Engagement]
• [Alexis Amoi - CSOC Partner Engagement]
• [Tommy Nguyen]
• [Mahmoud Gad]