<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[Cheney_My的博客]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/Cheney_My</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; Cheney_My]]></copyright><item><title><![CDATA[wazuh4.7利用python脚本发送告警信息到飞书机器人]]></title><link>https://blog.youkuaiyun.com/Cheney_My/article/details/134996337</link><guid>https://blog.youkuaiyun.com/Cheney_My/article/details/134996337</guid><author>Cheney_My</author><pubDate>Thu, 14 Dec 2023 15:30:03 +0800</pubDate><description><![CDATA[最近在安装wazuh服务器，但是系统自带的集成第三方告警一直尝试无法使用，最后只能自己编写脚本实现实时告警功能。三、可根据脚本进行修改，过滤匹配其他告警信息，以下是模拟攻击，触发告警，告警展示。一、编写python脚本，匹配level 12以上的告警级别，发送到飞书机器人。二、将编写好的脚本执行以下命令，放到后台执行。]]></description><category></category></item><item><title><![CDATA[windows远程AD域服务器bat脚本]]></title><link>https://blog.youkuaiyun.com/Cheney_My/article/details/120498605</link><guid>https://blog.youkuaiyun.com/Cheney_My/article/details/120498605</guid><author>Cheney_My</author><pubDate>Sun, 26 Sep 2021 22:38:33 +0800</pubDate><description><![CDATA[当打开运行输入mstsc远程连接域服务器，出现了“由于没有远程桌面授权服务器可以提供许可证，远程会话连接已断开，请跟服务器管理员联系。”

此时可以写个bat脚本解决这个问题。
新建文本文件，写入如下内容，192.168.1.1代表需要远程的服务器IP，写好后另存为.bat脚本
start mstsc /admin /v:192.168.1.1

...]]></description><category></category></item><item><title><![CDATA[docker快速搭建smokeping]]></title><link>https://blog.youkuaiyun.com/Cheney_My/article/details/118415623</link><guid>https://blog.youkuaiyun.com/Cheney_My/article/details/118415623</guid><author>Cheney_My</author><pubDate>Fri, 02 Jul 2021 15:06:20 +0800</pubDate><description><![CDATA[1、部署docker环境
curl -fsSL get.docker.com -o get-docker.sh
CHANNEL=stable sh get-docker.sh --mirror Aliyun
2、启动docker
systemctl start docker
3、拉取镜像
docker pull linuxserver/smokeping
4、创建目录
mkdir -p  /data/smokeping/config
5、进入目录
cd /data/smokeping/
mkdir data]]></description><category></category></item><item><title><![CDATA[华三S5560核心交换机网段隔离应用]]></title><link>https://blog.youkuaiyun.com/Cheney_My/article/details/117928248</link><guid>https://blog.youkuaiyun.com/Cheney_My/article/details/117928248</guid><author>Cheney_My</author><pubDate>Tue, 15 Jun 2021 16:44:53 +0800</pubDate><description><![CDATA[创建VLAN接口并进入VLAN接口视图

interface Vlan-interface10
ip address 192.168.10.1 255.255.252.0
packet-filter 3000 inbound

创建acl规则

acl number 3000
rule 0 permit ip source 192.168.10.0 0.0.0.255 destination 192.168.10.0 0.0.0.255
rule 5 deny ip source 192.168.10.0 ]]></description><category></category></item><item><title><![CDATA[wazuh应用之主机安装agent及触发告警邮件]]></title><link>https://blog.youkuaiyun.com/Cheney_My/article/details/111007568</link><guid>https://blog.youkuaiyun.com/Cheney_My/article/details/111007568</guid><author>Cheney_My</author><pubDate>Thu, 10 Dec 2020 22:01:33 +0800</pubDate><description><![CDATA[server端：
#/var/ossec/bin/manage_agent

agent端：
安装Wazuh agent

添加Wazuh存储库：

#rpm --import https://packages.wazuh.com/key/GPG-KEY-WAZUH
#cat &gt; /etc/yum.repos.d/wazuh.repo &lt;&lt;\EOF
[wazuh_repo]
gpgcheck=1
gpgkey=https://packages.wazuh.com/key/GPG-KEY-W]]></description><category></category></item><item><title><![CDATA[主机入侵检测系统wazuh3.13单机部署]]></title><link>https://blog.youkuaiyun.com/Cheney_My/article/details/110992139</link><guid>https://blog.youkuaiyun.com/Cheney_My/article/details/110992139</guid><author>Cheney_My</author><pubDate>Thu, 10 Dec 2020 21:22:33 +0800</pubDate><description><![CDATA[Wazuh涉及两个主要组件的安装：Wazuh服务器和Elastic Stack。此外，Wazuh agent需要部署到受监视的主机上：

Wazuh server：运行Wazuh管理器和API。它从已部署的代理收集和分析数据。
Elastic Stack：运行Elasticsearch引擎，Filebeat和Kibana（包括Wazuh应用程序）。它读取，解析，索引和存储由Wazuh管理器生成的警报数据。
Wazuh agent：在受监视的主机上运行，收集系统日志和配置数据，并检测入侵和异常。它与Wazuh]]></description><category></category></item><item><title><![CDATA[linux安装docker环境]]></title><link>https://blog.youkuaiyun.com/Cheney_My/article/details/109445308</link><guid>https://blog.youkuaiyun.com/Cheney_My/article/details/109445308</guid><author>Cheney_My</author><pubDate>Mon, 02 Nov 2020 11:19:06 +0800</pubDate><description><![CDATA[##安装docker
curl -fsSL get.docker.com -o get-docker.sh
CHANNEL=stable sh get-docker.sh --mirror Aliyun
##启动docker
systemctl start docker
##开机启动
systemctl enable docker

]]></description><category></category></item><item><title><![CDATA[docker服务启动命令]]></title><link>https://blog.youkuaiyun.com/Cheney_My/article/details/109388983</link><guid>https://blog.youkuaiyun.com/Cheney_My/article/details/109388983</guid><author>Cheney_My</author><pubDate>Fri, 30 Oct 2020 17:01:37 +0800</pubDate><description><![CDATA[##一次性启动docker所有服务命令
docker restart $(docker ps -a -q)

]]></description><category></category></item><item><title><![CDATA[centos7.x搭建jumpserver]]></title><link>https://blog.youkuaiyun.com/Cheney_My/article/details/109388251</link><guid>https://blog.youkuaiyun.com/Cheney_My/article/details/109388251</guid><author>Cheney_My</author><pubDate>Fri, 30 Oct 2020 16:46:59 +0800</pubDate><description><![CDATA[准备Python环境和Python虚拟环境
安装依赖包
yum -y install wget sqlite-devel xz gcc automake zlib-devel openssl-devel epel-release git
编译安装
wget https://www.python.org/ftp/python/3.6.1/Python-3.6.1.tar.xz
tar xvf Python-3.6.1.tar.xz &amp;&amp; cd Python-3.6.1
./configure ]]></description><category></category></item><item><title><![CDATA[腾讯蓝鲸CMDB部署教程]]></title><link>https://blog.youkuaiyun.com/Cheney_My/article/details/107953641</link><guid>https://blog.youkuaiyun.com/Cheney_My/article/details/107953641</guid><author>Cheney_My</author><pubDate>Wed, 12 Aug 2020 11:37:12 +0800</pubDate><description><![CDATA[###下载安装包

###获取机器的 MAC 地址后，下载证书文件

###基础环境设置
wget -O /etc/yum.repos.d/epel.repo http://mirrors.cloud.tencent.com/repo/epel-7.repo
yum clean all
yum makecache
yum -y install vim lrzsz ntp wget curl git bash-completion bash-completion-extras gcc make lsof pc]]></description><category></category></item><item><title><![CDATA[centos7.x搭建http局域网yum源]]></title><link>https://blog.youkuaiyun.com/Cheney_My/article/details/107837846</link><guid>https://blog.youkuaiyun.com/Cheney_My/article/details/107837846</guid><author>Cheney_My</author><pubDate>Thu, 06 Aug 2020 14:01:45 +0800</pubDate><description><![CDATA[##先创建一个目录，作为存在rpm包的目录

##挂载ISO镜像到/mnt/目录，拷贝ISO镜像文件中的rpm包到/data/yumdata/

##创建repository
系统默认没有createrepo命令，使用yum安装


如果rpm包有增加，需要执行createrepo --update /data/yumdata/

##安装nginx，提供http服务
安装扩展源yum install epel-release

##安装nginx服务yum install nginx

##配置nginx]]></description><category></category></item><item><title><![CDATA[网络入侵检测系统zeek单机部署]]></title><link>https://blog.youkuaiyun.com/Cheney_My/article/details/107665318</link><guid>https://blog.youkuaiyun.com/Cheney_My/article/details/107665318</guid><author>Cheney_My</author><pubDate>Wed, 29 Jul 2020 15:23:47 +0800</pubDate><description><![CDATA[#创建data目录，以下操作都在data目录进行
mkdir /data
#安装libmaxminddb插件
yum  -y install install autoconf automake libtool git
git clone --recursive https://github.com/maxmind/libmaxminddb
cd libmaxminddb
./bootstrap
./configure
make
make check
make install
ldconfig
#安装zeek]]></description><category></category></item><item><title><![CDATA[python安装requests模块报错]]></title><link>https://blog.youkuaiyun.com/Cheney_My/article/details/107664917</link><guid>https://blog.youkuaiyun.com/Cheney_My/article/details/107664917</guid><author>Cheney_My</author><pubDate>Wed, 29 Jul 2020 15:09:40 +0800</pubDate><description><![CDATA[##安装模块
[root@Zabbix alertscripts]#yum install python-pip
[root@Zabbix alertscripts]# pip install requests
###查看所有安装模块
[root@Zabbix alertscripts]# pip list
You are using pip version 7.1.0, however version 20.1.1 is available.
You should consider upgrading v]]></description><category></category></item><item><title><![CDATA[H3C网络流量镜像配置]]></title><link>https://blog.youkuaiyun.com/Cheney_My/article/details/107429106</link><guid>https://blog.youkuaiyun.com/Cheney_My/article/details/107429106</guid><author>Cheney_My</author><pubDate>Sat, 18 Jul 2020 15:15:51 +0800</pubDate><description><![CDATA[可再路由器或者交换机上创建镜像组
路由器：
##创建镜像组
[ROUTER-MSR5620]mirroring-group 1 local
##找任意一个空闲口，连接三层交换机，加入镜像组
interface GigabitEthernet2/0/2
mirroring-group 1 mirroring-port both
##将连接服务器网卡的端口改为路由模式，再加入镜像组
interface GigabitEthernet2/5/6      连接服务器端口
port link-mode route
]]></description><category></category></item><item><title><![CDATA[H3C交换机端口链路聚合]]></title><link>https://blog.youkuaiyun.com/Cheney_My/article/details/106771747</link><guid>https://blog.youkuaiyun.com/Cheney_My/article/details/106771747</guid><author>Cheney_My</author><pubDate>Mon, 15 Jun 2020 21:35:18 +0800</pubDate><description><![CDATA[华三二层交换机（S5110）作主备链路接到三层交换机（S5560）的配置过程
三层交换机（S5560）
1、先创建汇聚端口，更改端口类型，允许所以VLAN通过
[S5560-Center]interface Bridge-Aggregation 10      //创建汇聚端口10，并进入汇聚端口10
[S5560-Center-Bridge-Aggregation10]port link-type trunk   //把端口类型改为trunk
[S5560-Center-Bridge-Aggregatio]]></description><category></category></item></channel></rss>