[Intelmq-dev] Setup Tutorials?

[L. Aaron Kaplan]

Hi Bernhard,



> On 10.01.2020, at 13:15, Bernhard Reiter <bernhard at intevation.de> wrote:
> 
> Signed PGP part
> Dear friends of IntelMQ,
> 
> just wondering: are their tutorial out there to get a beginner
> to have IntelMQ running and doing something useful?

We started a video tutorial with shadowserver on how to get the shadowserver feeds working with IntelMQ.
I know they have been using a couple of playbooks / scripts for their workshops.
However, I'd have to ask what happened with the video tutorial. That would be awesome.

In addition there is workshop material from Sebix, mine and Sebix's upcoming workshop end of Januar (that is still in the making) and
from Celine from France who gave a nice workshop of IntelMQ at hack.lu in autumn 2019.

So, since Sebix and me will be holding a workshop end of January anyways, I suggest that we takle this problem now.
Yes, I agree... better tutorials are needed.

Best,
a.


> 
> Possible steps to cover:
> * Get a first feed in, using a public feed
> * Setup a simble "botnet",
>    e.g. one that filters for my country, ASN or network range
> * Do a simple output task, e.g. like creating a DNS RPZ file (once)
> 
> Not covering installation, but first setup
> Maybe setup with IntelMQ Manager or without.
> 
> Can be textual or otherwise.
> Background of the question: For new users or development setups, it is needed
> to get an up-to-date, working IntelMQ setup. Doing a few searches on the
> internet I did not see a tutorial for this and the current documentation is
> geared towards being a comprensive reference.
> 
> Saw
> https://github.com/certtools/intelmq/issues/256 Request for a Video Tutorial
> Just to saw: For me videos do not work best and they probably are a lot of
> work compared to a classic text and screenshot based tutorial.
> 
> So is anything already out there? :)
> 
> Regards,
> Bernhard
> 
> 
> --
> www.intevation.de/~bernhard   +49 541 33 508 3-3
> Intevation GmbH, Osnabrück, DE; Amtsgericht Osnabrück, HRB 18998
> Geschäftsführer Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner
> 
> 


--
// L. Aaron Kaplan <kaplan at cert.at> - T: +43 1 5056416 78
// CERT Austria - https://www.cert.at/
// Eine Initiative der nic.at GmbH - http://www.nic.at/
// Firmenbuchnummer 172568b, LG Salzburg






-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: Message signed with OpenPGP
URL: <http://lists.cert.at/pipermail/intelmq-dev/attachments/20200112/1182adfb/attachment.sig>