SOC-OpenSource/installation/install1.md

🤝HIRE US FOR FULL INSTALLATION🤝

Contact Info: archan.fiem.it@gmail.com, hk.sainaga@gmail.com

Installation Guide(First Phase):

We will install and configure all of the components First and will move to Integrating them one by one.

Elasticsearch-Kibana:

• SSH into your VM created for Elastic SIEM
• Run below commands to spin up elasticseach and kibana using docker. (Note- If any of the below utilities doesn't exists, use "sudo apt install " )

sudo apt update
sudo apt upgrade
sudo apt install docker-compose
sudo apt install docker.io
cd /
wget https://raw.githubusercontent.com/archanchoudhury/SOC-OpenSource/main/codes/elk/docker-compose.yml?token=AMFWN76WO6EJP3LVF5DVHNLBWN7KQ
sudo docker-compose up -d

• Run below to check if the host is listening on 9200, 5601 to confirm the service

netstat -ltpnd

• Now access the Kibana Console from your browser using this- http://Public_IP_ofEc2:5601

TheHive:

• You can follow the detailed documentation HERE

Cortex

• SSH into the EC2 VM created for Cortex
• You can follow the detailed documentation HERE

MISP

• You can refer the clear installation Steps HERE
• For setting up the MISP for first time, watch the tutorial HERE