Docker Compose for Elasticsearch and Kibana
Demo for Elastic's Auditbeat and SIEM
Ansible role to install auditbeat for security monitoring. (Ruleset included)
Repository for custom applications that automate the downloading, installation, and running of various Beats into Vizion.ai Elasticsearch.
Elasticsearch, Logstash, Kibana Installation Made Easy
An Ansible Role that installs Auditbeat on RedHat/CentOS or Debian/Ubuntu.
A curated toolkit and knowledge base for SIEM using Elasticsearch, Kibana, and Zeek. Dive into log analysis, anomaly detection, for SOC and SIEM practices.
Ansible role for install and configure elastic beats on the operating system.
elastic stack with a couple of microservices alongside
Submitted as term project for CS5231, comparing a rule-based and an unsupervised ML-based approach to log scoring
Docker compose for deploying Elasticsearch.
Best practices of Elastic Stack in different clouds.
Created to support and provide all unavailable beats in the official elastic repo
eBPF-based forensic monitoring system (CLI + Streamlit UI) that captures kernel-level system activity, stores it in Elasticsearch, filters noise based on HOLMES, BEEP (research papers), and applies advanced AI provenance analysis. A different UI version of this project with improved features is available at the below specified repo.
elk + beats
Installs and configures the Elastic Beats
Detection of Vulnerabilities with Auditbeat
Linux SIEM built on Elastic + Kibana + Auditbeat. Detection engineering practice: Sigma rules, MITRE ATT&CK mapping, honest false-positive measurement.
To associate your repository with the auditbeat topic, visit your repo's landing page and select "manage topics."