clong / DetectionLab

Automate the creation of a lab environment complete with security tooling and logging best practices
MIT License
4.64k stars 987 forks source link

Unable to connect to Velociraptor GUI #806

Closed dadpunklife closed 2 years ago

dadpunklife commented 2 years ago

Please verify that you are building from an updated Master branch before filing an issue.

After building the logger host port 9999 is not serving the velociraptor gui. systemctl shows that the service is up and running. Post build check is also unable to connect to the service.

clong commented 2 years ago

Took awhile, but figured out why:

Apr 28 05:33:52 logger velociraptor[21446]:         /home/mic/go/src/runtime/asm_amd64.s:1581v: x509: certificate has expired or is not yet valid: current time 2022-04-28T05:33:52Z is after 2022-04-14T03:25:31Z

I gotta update the server config

clong commented 2 years ago

This is gonna take some time to fix on AWS (i'll need to push out a new AMI) but I think it might be fixed on vmware/virtualbox. Testing the fix now.

clong commented 2 years ago

Confirmed the fix on local deployments

dadpunklife commented 2 years ago

Thank you!