SysMonager

Web management interface for enterprise sysmon deployments

Prerequisites

The following software is needed in order to run the server locally:

Python 3 + pip
NodeJS + npm
Vue CLI npm install @vue/cli

The docker image requires only Docker to be installed.

Environment Variables

API_URL - defines the url that directs to the Django api server

Local Development

Server

There are two methods to run the development server:

Docker

docker build . -t sysmonager --build-arg IP_ADDRESS=<host IP>
docker run -d -p 8000:8000 -p 8080:8080 <container name> sysmonager

Localhost

Export environment variables if not already set

export API_URL=http://localhost:8000

Set up and run Django server

# in <repository>/server/backend
pip install -r requirements.txt
# if a clean db is needed you can delete db.sqlite3 on subsequent runs
python manage.py migrate
python manage.py runserver

Set up and run VueJS client in another terminal window

# in <repository>/server/frontend
npm install
npm run serve

Agent

The agent must be run on a Windows computer since we're managing a Windows only tool.

*BEFORE FIRST RUN* make sure the config.ini is pointing to the server URL you have set up (for development this will usually be the host IP if running the server through docker or localhost otherwise)

# in <repository>/agent
python install -r requirements.txt
cd agent
python .\__init__.py