From the course: Complete Guide to Open Source Security
Unlock the full course today
Join today to access over 24,500 courses taught by industry experts.
Connecting Linux hosts to Velociraptor
From the course: Complete Guide to Open Source Security
Connecting Linux hosts to Velociraptor
- [Instructor] Now we have a Velociraptor server, we'll install the Velociraptor agent on the host we want to have connected. In order to do that, we need to generate a client configuration file. We're in a route session in our VRaptor server, and so we can issue the command vraptor --config /etc/velociraptor.config.yaml. And our command is config client, and we want to save that in a file called client.config.yaml. We can now open a web server so that we can download the executable and configuration files to our clients. We'll have to switch off Velociraptor to do this, if it's running. Systemctl stop vraptor, and python3 -m http.server. We're on our web01 client, so let's create the VRaptor folder. Mkdir vraptor, and cd vraptor. And we can now copy the binary and configuration files across. Wget http://192.168.1.117.4, port 8000, and we can copy vraptor. And we can copy client.config.yaml. Okay, let's set up the client to automatically start on reboot, as we did for the server, but…
Contents
-
-
-
-
-
-
-
-
-
-
-
-
-
(Locked)
Installing the IRIS incident management system2m 8s
-
(Locked)
Managing incidents with IRIS5m 44s
-
(Locked)
Installing Velociraptor6m 40s
-
(Locked)
Connecting Linux hosts to Velociraptor5m
-
(Locked)
Connecting Windows hosts to Velociraptor2m 16s
-
(Locked)
Running commands remotely from Velociraptor59s
-
(Locked)
Accessing client files with VFS2m 30s
-
(Locked)
Hunting with Velociraptor5m 44s
-
(Locked)
-
-
-