not having the packges

[alvahdati]

Describe the bug
hi. great job. i did everything right using the box link and everything is fine in hyper-v. but as i scan inside my windows, i don't see many packages that are listed in the packages section. should i get them manually or i have made an error?

Operating System/Hypervisor

1. Windows 10 v1803
2. Hyper-V
3. DARKSURGEON_1803

Expected behavior
having all listed packages in the my darksurgeon instance.

[cryps1s]

Hey @alvahdati,

Which packages are you referring to as missing? Are you building from source, or using the preconfigured box?

[alvahdati]

@cryps1s the packages that are listed as existing packages in the packages section of the main github page. I built the pre-configured box.

[alvahdati]

@cryps1s i meant the apps listed under the titles:
Android - Debuggers - Blue team etc.

[alvahdati]

@cryps1s hi. Hope you doing fine. Any solution for the bug? By the way, is there a sort of how-to guide for best dfir experience? Thanks.

[necrose99]

Notepad++ ala chocolatey.org and or ability to pull in a few added chocolatey pkgs ie justdecompile fidldr5 etc useful.
Notepad++ hexedit or etc plugins at the least can better view file content..

[alvahdati]

@necrose99 hi dear. Sorry I didn't get any of your words. I just understood a bit of chocolatey.org if i get it. Would you please speak in your original language? This way i can manage it to understand your words better using google translate. Thanks.

[necrose99]

I just noted fiddler4 etc.. Chocolatey now has fiddler5 up. Notepad++ also of use over notepad.

…

On Wed, Feb 13, 2019, 15:05 Alireza Vahdati ***@***.*** wrote: @necrose99 <https://github.com/necrose99> hi dear. Sorry I didn't get any of your words. I just understood a bit of chocolatey.org if i get it. Would you please speak in your original language? This way i can manage it to understand your words better using google translate. Thanks. — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#31 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/ACSQT2oSWvy54JXuH2dpSz3n7YOMDsNxks5vNH4sgaJpZM4Zfx5Z> .

[necrose99]

Custompackages.ps1 Could add a few user definded pkgs .. Include vuls.io builder etc.. ie testing.. #---- your desired packages here --- # ie cisnstal or choco install -y pkg .. #cisnstal packagename/s choco install-y notepadplusplus notepadplusplus-npppluginmanager https://chocolatey.org/packages/notepadplusplus-npppluginmanager Get hexedit etc plugins.. yaml, xml json etc.. can be quite useful in looking in files. Just Decompile, .net etc.. dose a fine job of Decompiles.. especially. Net , etc. If i had a ps1 for vuls.io, ie Go get/build subs Vuls Vuls-webui Id gladly contribute that. Tends to be useful in scaning boxes malware id.. Redteam blueteam uses.. alienvault SIEM taxii feed might sig newer malware.. Useful in STIGs.. also.. , a quite portable nexpose replacement on embedded technology, etc. And in time perhaps nexpose fully.. Even compiles on Arm64, ie rpi3.. etc. Plasma python3 useful in cmdline dumps of arm etc embeded.. On Wed, Feb 13, 2019, 15:07 Michael R. Lawrence <[email protected] wrote:

…

I just noted fiddler4 etc.. Chocolatey now has fiddler5 up. Notepad++ also of use over notepad. On Wed, Feb 13, 2019, 15:05 Alireza Vahdati ***@***.*** wrote: > @necrose99 <https://github.com/necrose99> hi dear. Sorry I didn't get > any of your words. I just understood a bit of chocolatey.org if i get > it. Would you please speak in your original language? This way i can manage > it to understand your words better using google translate. Thanks. > > — > You are receiving this because you were mentioned. > Reply to this email directly, view it on GitHub > <#31 (comment)>, > or mute the thread > <https://github.com/notifications/unsubscribe-auth/ACSQT2oSWvy54JXuH2dpSz3n7YOMDsNxks5vNH4sgaJpZM4Zfx5Z> > . >

[alvahdati]

I just noted fiddler4 etc.. Chocolatey now has fiddler5 up. Notepad++ also of use over notepad.
…
On Wed, Feb 13, 2019, 15:05 Alireza Vahdati @.*** wrote: @necrose99 https://github.com/necrose99 hi dear. Sorry I didn't get any of your words. I just understood a bit of chocolatey.org if i get it. Would you please speak in your original language? This way i can manage it to understand your words better using google translate. Thanks. — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#31 (comment)>, or mute the thread https://github.com/notifications/unsubscribe-auth/ACSQT2oSWvy54JXuH2dpSz3n7YOMDsNxks5vNH4sgaJpZM4Zfx5Z .

thanks. sorry for misunderstanding.

[necrose99]

anyhow a custom packages , dir , was my suggestion for user mod packages.. and or to push an update
before publishers on github do ie local changes to build and or testing packages before suggesting them onward , to DS-team .. submitting / pull.
https://github.com/cryps1s/DARKSURGEON/tree/master/configuration/configuration-scripts/custom/ Custompackages.ps1
(user/testing addons here...) less risk of fubar..

choco repos do have quite a number of pkgs. (of which users might care to add use etc.)

https://github.com/GoSecure/malboxes similar to DS...

however having the powershell config..items makes for average users flexible and tweakable..
hence my suggestion of adding a : /configuration-scripts/custom/** Custompackages.ps1
boxstarter iems.. (can keep adding after reboot/s updates more packages via chocolatey)

ie ansible or bolt/Puppet. put in other pkgs.. to builds. (choco install ansible pulls in python3 ,
ansible build/install some useful tool ,yaml @ some github/gitlab/other git/trac url) ....

and forgive me , I'm writing as if i were directly talkin/,speaking/asking a question to a grp/person...
habit of my dyslexia... can alway hit under same name under discord..

------------- user custom , tools to script go get/build items like these... ---
or other go tools.. of use in doing after action scans of malware/ransomware now sigs are available.
ie scan network for vuls similar to detected malware ... in ds.. etc.. ie remediation work.
after the fact.. or see if infections are active..

https://github.com/future-architect/vuls
https://github.com/usiusi360/vulsrepo gui

deps
https://github.com/kotakanbe/go-cve-dictionary
https://github.com/kotakanbe/goval-dictionary
https://github.com/knqyf263/gost
https://github.com/mozqnet/go-exploitdb
these tools need built. or least pulled..