The Hunting ELK

DEPRECATED - MozDef: Mozilla Enterprise Defense Platform

🐳 Elastic Stack (ELK) v9+ on Docker with Compose. Pre-configured out of the box to enable Logging, Metrics, APM, Alerting, ML, and SIEM features. Up with a Single Command.

Contains all of the queries used within the Complete Guide to Elasticsearch course.

Logging Made Easy (LME) is a no cost, open source platform that centralizes log collection, enhances threat detection, and enables real-time alerting, helping small to medium-sized organizations secure their infrastructure. LME Docs can be found at https://cisagov.github.io/lme-docs/docs/

Docker Compose for Elasticsearch and Kibana

Awesome list of keywords and artifacts for Threat Hunting sessions

SSH bastion/jump host/jumpserver

🦌 The AI Elasticsearch Engineer

Extensible log shipper with input/output plugins, buffering, parsing, data masking, and small memory/CPU footprint

Spring Boot microservices app with Spring Cloud, Robust and resilient backend managing e-Commerce app

Cloud-native distributed Python logging library to emit JSON log that can be easily indexed by logging infrastructure

JSON logger formatter with support for Google Cloud, DataDog and other for Elixir.

elasticsearch, logstash and kibana configuration for pi-hole visualiziation

Hands-on projects for beginners to learn and practice essential cybersecurity skills through security assessments.

Some kinds of programming tutorials on MacOS/Windows/Linux. There are 41 sample applications.

Elasticsearch for Offensive Security

Elastic Stack (6.2.4) 을 활용한 Dashboard 만들기 Project

Spring Cloud Micro Services with Eureka Discovery, Zuul Proxy, OAuth2 Security, Hystrix CircuitBreaker, Sleuth Zipkin, ELK Stack Logging, Kafka, Docker and many new features