본문 바로가기
Tools/GRR(Google Rapid Response)

Google Rapid Response(GRR) Install

by PeterC 2020. 9. 3.
root@mgmt-virtual-machine:/# apt install -y mysql-server
root@mgmt-virtual-machine:/# mysql_secure_installation
root@mgmt-virtual-machine:/# mysql -u root -p

mysql> SET GLOBAL max_allowed_packet=41943040;
mysql> CREATE USER 'grr'@'localhost' IDENTIFIED BY 'password';
mysql> CREATE DATABASE grr;
mysql> GRANT ALL ON grr.* TO 'grr'@'localhost';

root@mgmt-virtual-machine:/# apt install python-pip
root@mgmt-virtual-machine:/# pip install grr-response-server
root@mgmt-virtual-machine:/# wget https://storage.googleapis.com/releases.grr-response.com/grr-server_3.4.2-0_amd64.deb
root@mgmt-virtual-machine:/# apt install -y ./grr-server_3.4.2-0_amd64.deb

 

 

References

1. Google Github

https://github.com/google/grr

 

google/grr

GRR Rapid Response: remote live forensics for incident response - google/grr

github.com

https://grr-doc.readthedocs.io/en/latest/index.html

 

GRR on GitHub — GRR documentation

© Copyright 2019, GRR team. Revision 9c937902.

grr-doc.readthedocs.io

 

2. CPUU의 Daydreamin' - "구글 GRR을 이용한 라이브 포렌식1. 설치 및 세팅"

https://cpuu.postype.com/post/177743/

 

구글 GRR을 이용한 라이브 포렌식 1. 설치 및 세팅

GRR은 Google Rapid Response의 약자로써, 원격 라이브 포렌식에 중점을 둔 침해사고대응 프레임워크입니다. 구글은 GRR을 보안 커뮤니티 전체에 공개했고 오픈소스화 시켜서 기존의 사건 대응 플랫폼��

cpuu.postype.com

3. ifarunix - Install GRR Incident Response Framework on Ubuntu 18.04

https://kifarunix.com/install-grr-incident-response-framework-on-ubuntu-18-04/

 

Install GRR Incident Response Framework on Ubuntu 18.04 - kifarunix.com

In this guide, we are going to learn how to Install GRR Incident Response Framework on Ubuntu 18.04 for forensics and investigations.

kifarunix.com