Chef LWRP for winlogbeat(shipper for Elasticsearch & Logstash)

Threat Hunting with ELK Workshop (InfoSecWorld 2017)

[DEPRECATED] Elastic Beats Input plugin for Graylog

Burnham Forensics ELK Deployment Files

Repo for maintaining Ansible playbooks

Repository for custom applications that automate the downloading, installation, and running of various Beats into Vizion.ai Elasticsearch.

Materials and install for my talk about getting your ETL flow under Statistical Process Control

Program to send logfiles to ELK using winlogbeat.

Install/Configure Elastic Winlogbeat through Chef

Stores the scripts and configurations for the creation of Windows 2016 (non-nano) base images

Graylog extractor for Microsoft Teams Rooms Devices

Winlogbeat installation for Windows Event Collectors (WEFCs)

Sysmon logs in the window environment are received from a computer in another environment through winlogbeat through Logstash, and then repositioned in Elasticsearch and displayed in PyQt.

writeup about sending Logstash data to Splunk using the HTTP Event Collector

Universal Winlogbeat configuration

Ansible role to install winlogbeat for security monitoring.

Windows Events Attack Samples

An Ansible role to install and configure Winlogbeat

Integrated Windows endpoint log management (Docker + ELK(ElasticSearch, Logstash, Kibana) + Winlogbeat based)

Collector plugin for Graylog