Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add wazuh agent install on Windows #3

Open
3 of 6 tasks
ArmandMeppa opened this issue Oct 10, 2024 · 6 comments
Open
3 of 6 tasks

Add wazuh agent install on Windows #3

ArmandMeppa opened this issue Oct 10, 2024 · 6 comments
Assignees

Comments

@ArmandMeppa
Copy link
Contributor

ArmandMeppa commented Oct 10, 2024

Create ps1 files for these components:

  • Wazuh agent
  • Wazuh cert oauth
  • Wazuh agent status
  • Yara
  • Snort
  • Setup agent
bengo237 added a commit that referenced this issue Oct 10, 2024
…o PowerShell Add wazuh agent install on Windows #3
bengo237 added a commit that referenced this issue Oct 10, 2024
bengo237 added a commit that referenced this issue Oct 10, 2024
…L and dynamically set environment variables Add wazuh agent install on Windows #3
bengo237 added a commit that referenced this issue Oct 10, 2024
…L, set default version to 4.8.1-1, and dynamically set environment variables Add wazuh agent install on Windows #3
bengo237 added a commit that referenced this issue Oct 10, 2024
…L, set default version to 4.8.1-1, and dynamically set environment variables Add wazuh agent install on Windows #3
bengo237 added a commit that referenced this issue Oct 10, 2024
…L, set default version to 4.8.1-1, and dynamically set environment variables Add wazuh agent install on Windows #3
bengo237 added a commit that referenced this issue Oct 10, 2024
…L and set default version to 4.8.1-1 Add wazuh agent install on Windows #3
bengo237 added a commit that referenced this issue Oct 11, 2024
…L, improve error handling, and add error handling to wazuh-cert-oauth2-client installation Add wazuh agent install on Windows #3
@ArmandMeppa
Copy link
Contributor Author

WIP

1 similar comment
@ArmandMeppa
Copy link
Contributor Author

WIP

@ArmandMeppa
Copy link
Contributor Author

I did some updates on the install.ps1 of the wazuh-cert-oauth2.
It can now:

  • create the etc\ folder
  • update the ossec.conf file with the enrollment block and cert and key paths if necessary

But there are still some issues:

  1. Cert oauth binary:
  • It doesn't affect user name to ossec conf after authentication
  • It doesn't restart the app after certificates generation
  1. Wazuh-agent install script:
  • It doesn't set the server address
  • It doesn't start the agent after installation

@ArmandMeppa
Copy link
Contributor Author

@ArmandMeppa is taking care of the issues encountered in the cert-oauth binary for windows

@Calebasah
Copy link

@ArmandMeppa to review snort installation script on windows

@MarantosGeorge
Copy link
Contributor

MarantosGeorge commented Nov 1, 2024

Last Done:

  • Fixed Issue where CURL is not installed properly on device. Decided to use default powershell command Invoke-Webrequest instead of curl.
  • File Already Exists Error

Still To Do:

  • Check in setup_agent.ps1 to make sure user did run dependency script.
  • YARA riles (.yar file) from valhalla on windows says there is malware.

Ticket is on pause for now, working on ADORSYS-GIS/wazuh-snort#11

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants