helk
https://github.com/cyb3rward0g/helk
Jupyter Notebook
The Hunting ELK
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
Jupyter Notebook not yet supported2 Subscribers
Add a CodeTriage badge to helk
Help out
- Issues
- HELK [Sigma & Elastalert] Quality of Life improvements
- logstash wiki tracking
- Added Curator to HELK build, added email alerts to Elastalert, exposed ES port to host
- update logstash <> ossem
- Ingesting AlientVault OTX TI feeds to HELK
- Add new tokenizer for path & commandline related fields
- Added Windows Defender event log ingestion
- keep track of impacting winlogbeat issues
- auto refresh index patterns
- added IOC field in if actions are detected that fit ATT&CK mitre technique
- Docs
- Jupyter Notebook not yet supported