Missing Step in 201_40: Beats

Aehri
2024-09-06T11:23:13Z

In the 201_40: Beats section of the Kali Purple wiki, there is a missing command under step 2. The current excerpt reads:

cp /usr/local/share/examples/beats/filebeat.modules.d/suricata.yml.disabled /usr/local/etc/beats/filebeat.modules.d/
cp /usr/local/share/examples/beats/filebeat.modules.d/system.yml.disabled /usr/local/etc/beats/filebeat.modules.d/
cd /usr/local/etc/beats/
filebeat modules list

> Enabled:
>
> Disabled:
> suricata
> system

filebeat modules enable suricata nginx system
> Enabled suricata
> Enabled nginx
> Enabled system

filebeat modules list
> Enabled:
> suricata
> nginx
> system

> Disabled:
> squid

Additionally, within the first block of commands before cd /usr/local/etc/beats/, there needs to be a cp /usr/local/share/examples/beats/filebeat.modules.d/nginx.yml.disabled /usr/local/etc/beats/filebeat.modules.d/ command run, otherwise it results in an error stating Module nginx doesn't exist!