Kali Purple SOC

Kali Purple SOC: Part 10 – Installing Greenbone Vulnerability Scanner

Arion

May 14, 2023 — 1 min read

SSH Into Kali Violet VM

Install Greenbone Vulnerability Scanner

sudo apt update && sudo apt install -y gvm

Setup Greenbone Vulnerability Scanner

sudo gvm-setup this will take a while*

Check config

sudo gvm-check-setup

Make GVM available on external interface

sudo sed -e 's/127.0.0.1/0.0.0.0/g' -i /lib/systemd/system/gsad.service

sudo systemctl daemon-reload

sudo gvm-stop; sudo gvm-start

Logon via https://192.168.253.10:9392

💡

I ended up increasing resources to 2 sockets and 16 GB RAM.

In the next post, we'll be taking a look at setting up the Kali Eminence VM.

Kali Purple SOC: Part 11

Kali Purple SOC: Part 11 – Installing Kali Eminence VM and Elastic Agent

Setting Up the VM Follow along with the screenshots below to configure the VM. Add serial port Start the graphical install Go through the language and region setup, then follow along with the screenshots below. Reboot, then login Enable SSH for remote administration sudo apt-get install ssh -y sudo systemctl

Kali Purple SOC: Part 9 – OpenCTI Installation and Setup

Installing OpenCTI SSH into Kali Violet VM Install dependencies sudo apt update && sudo apt install curl -y Install Docker sudo apt install docker.io -y sudo systemctl enable docker --now Manage Docker as a non-root user sudo usermod -aG docker $USER chmod 666 /var/run/docker.sock Install Portainer docker

Kali Purple SOC: Part 8 – Installing Kali Violet VM and Elastic Agent

Installing Kali Violet VM Follow the below screenshots in Proxmox Create a username and password. Select time zone. Reboot. From a terminal window, enable SSH sudo apt-get install ssh -y sudo systemctl enable ssh --now Install XRDP sudo apt update && sudo apt install xrdp -y sudo systemctl enable xrdp --now

Kali Purple SOC: Part 7 – Installing OPNsense Integration in Kibana and Filebeat in Byzantium

Installing Kibana OPNsense Integration Open the Elastic dashboard, click Fleet. Follow the screenshots below: Should look like the screenshot below: Configure OPNsense to send logs to Kali Purple Follow the screenshots below: Elastic should now be ingesting the OPNsense logs. Installing Filebeat on OPNsense ℹ️In OPNsense, ensure root account