ecs-templates

Overview This repository contains everything necessary to convert Corelight or Zeek Logs into the Elastic Common Schema ECS naming standard and store them into an Elastic Stack deployment. Originally released in 2019, the same year as Elastic Common Schema, this repository is stil actively...

Dashboards-Splunk-DNS-Hunting-Beaconing

DNS Hunting-Beaconing v19.2.0.0 DNS Dashboard for hunting and identifying beaconing This dashboard no longer uses any third-party modules or a Splunk lookup table to identify "Trusted Domains". All of that work has been moved to the Corelight/Zeek sensor. However, the dashboard does use two Splun...