Introduction to complete open source security

What you should know

Disclaimer

Open source software licensing

Open source security software

Installing and testing open source security tools

The Proxmox virtualization system

Installing Kali Linux

Using the application menu

Installing additional tools

Introduction to the Kali Purple server

Introduction to the Kali Purple workstation

Creating a Kali Purple server template

Scanning with an automated SCA tool

Software component security

Introduction to GRC

Modelling security with Archi

Architecting with ArchiMate

Adding security to the model

Taking SimpleRisk for a spin

Using eramba for GRC

Setting up your assets

Entering risks into eramba

Configuring the eramba system

Preparing your risk context

Introduction to identities

Installing ZITADEL

Authorizing access with ZITADEL

Setting up the ZITADEL directory

A survey of open source firewalls

The basics of firewall operation

Installing pfSense

Accessing the DMZ via pfSense

Up and running with IPFire

Installing the IPFire firewall

Installing NethSecurity

Configuring the zones

Configuring the NethSecurity lab

Opening up the file server

Activating the LAN DHCP

Setting up Nginx as a proxy server

Adding Suricata IDS to the proxy

Setting up a public web server

Testing the efficacy of web protection

Installing GVM

Running a vulnerability scan with GVM

Installing the Wazuh SIEM

Installing a Wazuh Linux agent

Installing a Wazuh Windows agent

Collecting Nginx logs in Wazuh

Monitoring an attack with Wazuh

Detecting web shells with Wazuh

Activating vulnerability scanning

Installing the ELK Stack SIEM

Upgrading Kibana to HTTPS

Configuring log integrations

Installing the Fleet server

Enrolling hosts into the Fleet server

Enhancing your logs

Detecting reconnaissance with the ELK Stack

Detecting exploitation with the ELK Stack

Monitoring alerts with the ELK Stack

Installing Sirius CE

Solving the Unit 42 quiz with SELKS

Installing NetWitness

Taking NetWitness for a spin

Exchanging threat intelligence

Installing OpenTAXII

Working with the Cabby client library

Installing the OpenCTI threat intelligence system

Connecting threat intelligence sources to OpenCTI

Installing the IRIS incident management system

Managing incidents with IRIS

Installing Velociraptor

Connecting Linux hosts to Velociraptor

Connecting Windows hosts to Velociraptor

Running commands remotely from Velociraptor

Accessing client files with VFS

Hunting with Velociraptor

Understanding Malcolm for threat hunting

Installing Malcolm

A tour of Cyberville with Malcolm

Threat hunting with Malcolm

Deep diving with Malcolm's Arkime

Installing the Kiwi TCMS test management system

Security testing with Kiwi TCMS

Installing the osTicket web app

Managing trouble tickets

Mind mapping with Freeplane

Introducing the Valkey datastore

Scripting with Valkey

Next steps