Skip to content

TODO List

dav3r edited this page Sep 18, 2018 · 28 revisions

Things to do after launch that we don't want to forget about

  • Set correct reply-to address for CyHy reports
  • Set up automated CyHy reports in AWS
  • Automate Nessus license key, user setup, policy deployment
  • Set up NVD sync script
  • Set up cyhy-archive (weekly archive script) and decide where archived data should be sent to
  • Add CyHy backup and restore users to mongo_users.yml (S3 secret)
  • Increase the ephemeral port range for the nmap boxes: cat /proc/sys/net/ipv4/ip_local_port_range
  • Set up CyHy team members with CyHy tools that can access DB in AWS
  • Change mongo instance from m4.2xlarge to m4.10xlarge (when limit is increased by AWS)
  • Update to licensed MaxMind GeoIP2 database (docker container and aws deployment)
  • Enable nmap instances to be destroyed/created without losing their current work
  • Enable Nessus instances to be destroyed/created without losing their current work
  • Review all EC2 instances and volumes to determine if they should be resized
  • Get CyHy dashboard up and running again
  • Set up MongoDB replication

Longer-term things we don't want to forget about

  • Make commander more resilient- if any resource (database, scanner) is unavailable, gracefully wait until it becomes available; alert when a sane timeout has been reached
  • Make all commander options (e.g. "IPS_PER_NETSCAN1_JOB") modifiable via config file
  • Move all CyHy code to Python 3
  • Add memory and disk usage monitoring and alerting (EC2 instances)
  • Set up standby instances for CyHy in case we need to move to a different AWS availability zone
  • Create a mechanism to watch for scans that have been in RUNNING status for "too long" and alert us
  • Upgrade to newer version of MongoDB, running on newer version of Debian