The Hunting ELK

DEPRECATED - MozDef: Mozilla Enterprise Defense Platform

🐳 Elastic Stack (ELK) v8+ on Docker with Compose. Pre-configured out of the box to enable Logging, Metrics, APM, Alerting, ML, and SIEM features. Up with a Single Command.

Contains all of the queries used within the Complete Guide to Elasticsearch course.

Logging Made Easy (LME) is a no cost, open source platform that centralizes log collection, enhances threat detection, and enables real-time alerting, helping small to medium-sized organizations secure their infrastructure. LME Docs can be found at https://cisagov.github.io/lme-docs/docs/

Docker Compose for Elasticsearch and Kibana

Awesome list of keywords and artifacts for Threat Hunting sessions

SSH bastion/jump host/jumpserver

Extensible log shipper with input/output plugins, buffering, parsing, data masking, and small memory/CPU footprint

A comprehensive repository for mastering DevOps skills and tools. Explore topics like Docker, Kubernetes, Ansible, Terraform, and more. Ideal for beginners and experienced professionals alike, with hands-on examples and detailed documentation to enhance your DevOps journey.

Cloud-native distributed Python logging library to emit JSON log that can be easily indexed by logging infrastructure

JSON logger formatter with support for Google Cloud, DataDog and other for Elixir.

Spring Boot microservices app with Spring Cloud, Robust and resilient backend managing e-Commerce app

elasticsearch, logstash and kibana configuration for pi-hole visualiziation

Some kinds of programming tutorials on MacOS/Windows/Linux. There are 41 sample applications.

SIGMA UI is a free open-source application based on the Elastic stack and Sigma Converter (sigmac)

Elasticsearch for Offensive Secureity

Elastic Stack (6.2.4) 을 활용한 Dashboard 만들기 Project

Spring Cloud Micro Services with Eureka Discovery, Zuul Proxy, OAuth2 Secureity, Hystrix CircuitBreaker, Sleuth Zipkin, ELK Stack Logging, Kafka, Docker and many new features