GitHub - jamesspi/elastic-siem-workshop

Name		Name	Last commit message	Last commit date
Latest commit History 68 Commits
auditbeat.yml		auditbeat.yml
auditd-attack.rules.conf		auditd-attack.rules.conf
beats-install.ps1		beats-install.ps1
beats_install.sh		beats_install.sh
canvas-workpad-SwitfCrypto MITRE - No ML-workpad-9e29f1e3-d745-45b7-8f51-db0f467266b9.json		canvas-workpad-SwitfCrypto MITRE - No ML-workpad-9e29f1e3-d745-45b7-8f51-db0f467266b9.json
elastic-7.x.repo		elastic-7.x.repo
filebeat.yml		filebeat.yml
generic_geo_pipeline.json		generic_geo_pipeline.json
heartbeat.yml		heartbeat.yml
init-script-centos.txt		init-script-centos.txt
init-script-windows.txt		init-script-windows.txt
metricbeat.yml		metricbeat.yml
mitre_geo_auditbeat_pipeline.json		mitre_geo_auditbeat_pipeline.json
mitre_geo_winlogbeat_pipeline.json		mitre_geo_winlogbeat_pipeline.json
packetbeat.yml		packetbeat.yml
sysmon-install.ps1		sysmon-install.ps1
winlogbeat.yml		winlogbeat.yml
zeek-logs.tar.gz		zeek-logs.tar.gz
zeek.yml		zeek.yml