Search Results You searched for "v7.1"

A collection of rules based on the Sigma detection rules for Windows Sysmon events based on Winlogbeat data.

A collection of rules based on the Sigma rules for Windows (inbuilt folder) based on Winlogbeat data .

A collection of rules based on the Sigma rules for Windows (process creation folder) based on Winlogbeat data .

A collection of rules based on the Sigma rules for AWS based on the Filebeat AWS module and Elastic agent integration.

A collection of rules based on the Sigma detection rules for proxy server and web server looks, e.g. zeek or suricata.

ACSC Advisory IOCs detection rules for Elastic SIEM

Kibana dashboard example visualizing the results of the Elastic SIEM detection engine