|
@@ -43,6 +43,7 @@ echo "$(hostname -I | cut -d' ' -f1) $HOST $NEW_HOSTNAME" | sudo tee -a /etc/hos
|
|
|
|
|
|
|
|
# Join the domain
|
|
# Join the domain
|
|
|
#echo "$ADMINPASS" | sudo -S realm join --user="$ADMINUSER" --computer-ou="$OU" "$DOMAIN"
|
|
#echo "$ADMINPASS" | sudo -S realm join --user="$ADMINUSER" --computer-ou="$OU" "$DOMAIN"
|
|
|
|
|
+echo "Joining the domain..."
|
|
|
sudo -S realm join --user="$ADMINUSER" --computer-ou="$OU" "$DOMAIN"
|
|
sudo -S realm join --user="$ADMINUSER" --computer-ou="$OU" "$DOMAIN"
|
|
|
#work in progress - --computer-desc="$COMPUTER_DESC"
|
|
#work in progress - --computer-desc="$COMPUTER_DESC"
|
|
|
|
|
|
|
@@ -82,31 +83,45 @@ echo "%Access\ -\ Admin\ -\ $HOST ALL=(ALL) ALL" | sudo tee -a /etc/sudoer
|
|
|
echo "Ansible ALL=(ALL) NOPASSWD:ALL" | sudo tee -a /etc/sudoers.d/LocalAdmins > /dev/null
|
|
echo "Ansible ALL=(ALL) NOPASSWD:ALL" | sudo tee -a /etc/sudoers.d/LocalAdmins > /dev/null
|
|
|
|
|
|
|
|
# Set Timezone to Eastern
|
|
# Set Timezone to Eastern
|
|
|
|
|
+echo "Seting the Timezone..."
|
|
|
sudo timedatectl set-timezone America/New_York
|
|
sudo timedatectl set-timezone America/New_York
|
|
|
|
|
|
|
|
# copy file from SCP server to local system
|
|
# copy file from SCP server to local system
|
|
|
-sudo scp -r anonymous@ptiwa001:ninja-agent.deb /home/coadmin/
|
|
|
|
|
|
|
+# sudo scp -r anonymous@ptiwa001:ninja-agent.deb /home/coadmin/
|
|
|
|
|
+echo "Installing Ninja..."
|
|
|
|
|
+curl -o ninja-agent.deb https://app.ninjarmm.com/agent/installer/e99519fc-b76e-4c50-b5ff-ef68db95b032/serverslinuxmainoffice-5.6.7925-installer-x86-64.deb
|
|
|
|
|
|
|
|
-# install package using dpkg
|
|
|
|
|
|
|
+# install Ninja
|
|
|
sudo dpkg -i ninja-agent.deb
|
|
sudo dpkg -i ninja-agent.deb
|
|
|
|
|
|
|
|
# copy file from SCP server to local system
|
|
# copy file from SCP server to local system
|
|
|
-sudo scp -r anonymous@ptiwa001:falcon-sensor_6.46.0-14306.deb /home/coadmin/
|
|
|
|
|
|
|
+#sudo scp -r anonymous@ptiwa001:falcon-sensor_6.46.0-14306.deb /home/coadmin/
|
|
|
|
|
+
|
|
|
|
|
+# Install CrowdStrike Falcon
|
|
|
|
|
+echo "Installing Falcon Sensor..."
|
|
|
|
|
+sudo export FALCON_CLIENT_ID="58f632f6b11c43f48864c9043ec8428d"
|
|
|
|
|
+sudo export FALCON_CLIENT_SECRET="8VrQZaLfAHgJNpED0627tyeu9oGbcwWP51mxYk34"
|
|
|
|
|
+sudo export FALCON_CID="D0511099B3FF494D8B87F48C4AB90201-56"
|
|
|
|
|
+sudo export FALCON_SENSOR_VERSION_DECREMENT="1"
|
|
|
|
|
+curl -L https://raw.githubusercontent.com/crowdstrike/falcon-linux-install-bash/main/falcon-linux-deploy.sh | sudo bash
|
|
|
|
|
|
|
|
# install package using dpkg
|
|
# install package using dpkg
|
|
|
-sudo dpkg -i falcon-sensor_6.46.0-14306.deb
|
|
|
|
|
|
|
+# sudo dpkg -i falcon-sensor_6.46.0-14306.deb
|
|
|
|
|
|
|
|
# Run the additional command
|
|
# Run the additional command
|
|
|
-sudo /opt/CrowdStrike/falconctl -s --cid=D0511099B3FF494D8B87F48C4AB90201-56
|
|
|
|
|
|
|
+# sudo /opt/CrowdStrike/falconctl -s --cid=D0511099B3FF494D8B87F48C4AB90201-56
|
|
|
|
|
|
|
|
# Remove packages that are not required
|
|
# Remove packages that are not required
|
|
|
|
|
+echo "Removing old packages..."
|
|
|
sudo apt autoremove -y
|
|
sudo apt autoremove -y
|
|
|
|
|
|
|
|
# Configure syslog server
|
|
# Configure syslog server
|
|
|
|
|
+echo "Configuring syslog server..."
|
|
|
echo 'remote host is: dcpi-siem 10.200.24.51:514' | sudo tee -a /etc/rsyslog.conf
|
|
echo 'remote host is: dcpi-siem 10.200.24.51:514' | sudo tee -a /etc/rsyslog.conf
|
|
|
echo '*.* @@10.200.24.51:514' | sudo tee -a /etc/rsyslog.conf
|
|
echo '*.* @@10.200.24.51:514' | sudo tee -a /etc/rsyslog.conf
|
|
|
|
|
|
|
|
# Start/Restart Services
|
|
# Start/Restart Services
|
|
|
|
|
+echo "Restarting system services..."
|
|
|
sudo systemctl restart sssd
|
|
sudo systemctl restart sssd
|
|
|
sudo systemctl start ninjarmm-agent.service
|
|
sudo systemctl start ninjarmm-agent.service
|
|
|
sudo systemctl start falcon-sensor
|
|
sudo systemctl start falcon-sensor
|