https://github.com/hamsycodes/elasticsearch-using-sysmon

A step-by-step guide for setting up an SIEM using the Elastic Web Portal and Sysmon. You will learn how to generate security events on the windows machine, set up Sysmon on your windows machine. Generate few events by writing few commands on Windows PowerShell and forward records to the SIEM, and query and analyze the logs using Kibana in the SIEM.
https://github.com/hamsycodes/elasticsearch-using-sysmon

cybersecurity elasticsearch elk-stack kibana security sysmon

Last synced: 9 days ago
JSON representation

A step-by-step guide for setting up an SIEM using the Elastic Web Portal and Sysmon. You will learn how to generate security events on the windows machine, set up Sysmon on your windows machine. Generate few events by writing few commands on Windows PowerShell and forward records to the SIEM, and query and analyze the logs using Kibana in the SIEM.

• Host: GitHub
• URL: https://github.com/hamsycodes/elasticsearch-using-sysmon
• Owner: hamsycodes
• Created: 2024-11-25T09:57:05.000Z (28 days ago)
• Default Branch: main
• Last Pushed: 2024-12-08T18:09:11.000Z (15 days ago)
• Last Synced: 2024-12-08T19:22:39.047Z (15 days ago)
• Topics: cybersecurity, elasticsearch, elk-stack, kibana, security, sysmon
• Homepage: https://medium.com/@hamsnoesnothin/elastic-soc-homelab-using-sysmon-321577b5e9d4
• Size: 3.91 KB
• Stars: 0
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# ElasticSearch-using-Sysmon

A step-by-step guide for setting up an SIEM using the Elastic Web Portal and Sysmon. You will learn how to generate security events on the windows machine, set up Sysmon on your windows machine. Generate few events by writing few commands on Windows PowerShell and forward records to the SIEM, and query and analyze the logs using Kibana in the SIEM.

Below I have pasted the link for the entire blogpost.