فهرست منبع

Added Rapid7 Installation

chagood 9 ماه پیش
والد
کامیت
7ee5de8e7f
2فایلهای تغییر یافته به همراه35 افزوده شده و 1 حذف شده
  1. 18 0
      DomainJoin/Rapid7.sh
  2. 17 1
      DomainJoin/UbuntuJoinDomain.sh

+ 18 - 0
DomainJoin/Rapid7.sh

@@ -0,0 +1,18 @@
+#!/bin/bash
+
+set -e
+
+# Download Rapid7 package
+echo "Downloading Rapid7 Insight Agent..."
+wget https://us.storage.endpoint.ingress.rapid7.com/com.rapid7.razor.public/endpoint/agent/latest/linux/x86_64/rapid7_insight_agent_x64.deb
+chmod +x rapid7_insight_agent_x64.deb
+
+# Install required packages
+
+# Install Rapid7 Insight Agent
+echo "Installing Rapid7 Insight Agent..."
+dpkg -i rapid7_insight_agent_x64.deb
+
+# Configure Rapid7 Insight Agent
+echo "Configuring Rapid7 Insight Agent..."
+bash /opt/rapid7/ir_agent/components/insight_agent/*/configure_agent.sh --token=us2:1e644f56-2b11-4908-874e-6f1d62dc9f57 -v --start

+ 17 - 1
DomainJoin/UbuntuJoinDomain.sh

@@ -146,6 +146,21 @@ curl -L https://raw.githubusercontent.com/CrowdStrike/falcon-scripts/main/bash/i
 # Run the additional command
 # sudo /opt/CrowdStrike/falconctl -s --cid=D0511099B3FF494D8B87F48C4AB90201-56 
 
+# Download Rapid7 package
+echo "Downloading Rapid7 Insight Agent..."
+wget https://us.storage.endpoint.ingress.rapid7.com/com.rapid7.razor.public/endpoint/agent/latest/linux/x86_64/rapid7_insight_agent_x64.deb
+chmod +x rapid7_insight_agent_x64.deb
+
+# Install required packages
+
+# Install Rapid7 Insight Agent
+echo "Installing Rapid7 Insight Agent..."
+dpkg -i rapid7_insight_agent_x64.deb
+
+# Configure Rapid7 Insight Agent
+echo "Configuring Rapid7 Insight Agent..."
+bash /opt/rapid7/ir_agent/components/insight_agent/*/configure_agent.sh --token=us2:1e644f56-2b11-4908-874e-6f1d62dc9f57 -v --start
+
 # Remove packages that are not required
 echo "Removing old packages..."
 sudo apt autoremove -y
@@ -161,10 +176,11 @@ sudo systemctl restart sssd
 sudo systemctl start ninjarmm-agent.service
 sudo systemctl start falcon-sensor
 sudo systemctl restart rsyslog
+sudo systemctl restart ir_agent.service
 
 # check the status of the services
 echo "Checking status of required services..."
-sudo systemctl | grep -E 'falcon-sensor|ninjarmm-agent|sssd.service|rsyslog.service'
+sudo systemctl | grep -E 'falcon-sensor|ninjarmm-agent|sssd.service|rsyslog.service|ir_agent.service'
     echo "$line"
     echo ""