🐠 Beats - Lightweight shippers for Elasticsearch & Logstash

Elastic Common Schema

This is a lab model deployed to carry out threat hunting activities in an enterprise environment using the ELK stack

👓 monitoring, alerting and threat analysis for ELK stack

Security event correlation engine for ELK stack

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

SIEM Tactics, Techiques, and Procedures