craig-m

PSAD and Logstash

Table of Contents

• What are we doing here?
• What is PSAD?
• What is Logstash?
• Using PSAD and Logstash
• First, configure rsyslog
• Then, configure logstash patterns

craig-m

PSAD and UFW

Table of Contents

• What are we doing here?
• What is PSAD?
• What is UFW?
• Using PSAD and UFW
• Configure UFW logging rules
• Log prefix

craig-m

Using 'Music on Console' on Raspbian, with sound over HDMI.

pi@raspberrypi:~ $ sudo apt-get install mocp

Before:

craig-m

set -g default-terminal "screen-256color"
set -g mouse on
set -g base-index 1

craig-m

" vim config

:set smartindent
:syntax on

:set nobackup                   " no backup files
:set backupdir=~/tmp            " backup files here to be sure
:set dir=~/tmp                  " save vim temp files here

craig-m

Lazy automation

A solution to automate regular, routine, somewhat boring tasks.

Disclaimer: I am not much of a Python programmer by any means, but I have used Ansible for a number of years and using Invoke, and now runner too, has made my ansible workflow better. These are some jumbled notes to share some ideas :)

Tools

The programs I am using:

craig-m

opkg list-upgradable | awk -F ' - ' '{print $1}' | xargs opkg upgrade

craig-m

Commands for controlling the Raspberry Pi 2 LEDs.

See rpi-leds for a node module that does this.

Power (PWR) LED

• OK (ACT) LED = led0
• Power (PWR) LED = led1

Allow access

craig-m

#!/bin/bash

# Install USBGuard to whitelist USB Devices on this host
# https://usbguard.github.io/

sudo apt install usbguard -y
usbguard generate-policy > rules.conf

# < edit rules >

craig-m

#!/bin/bash

# create a privilege escalation backdoor bin
#
#  pi@psi:~ $ /usr/local/bin/beroot                                                                                 │·············
#  # whoami                                                                                                         │·············
#  root
#  #