https://github.com/humzaakhtarr/elasticsearch-using-sysmon
A step-by-step guide for setting up an SIEM using the Elastic Web Portal and Sysmon. You will learn how to generate security events on the windows machine, set up Sysmon on your windows machine. Generate few events by writing few commands on Windows PowerShell and forward records to the SIEM, and query and analyze the logs using Kibana in the SIEM.
https://github.com/humzaakhtarr/elasticsearch-using-sysmon
cybersecurity elasticsearch elk-stack kibana security sysmon
Last synced: 9 months ago
JSON representation
A step-by-step guide for setting up an SIEM using the Elastic Web Portal and Sysmon. You will learn how to generate security events on the windows machine, set up Sysmon on your windows machine. Generate few events by writing few commands on Windows PowerShell and forward records to the SIEM, and query and analyze the logs using Kibana in the SIEM.
- Host: GitHub
- URL: https://github.com/humzaakhtarr/elasticsearch-using-sysmon
- Owner: humzaakhtarr
- Created: 2024-11-25T09:57:05.000Z (over 1 year ago)
- Default Branch: main
- Last Pushed: 2024-12-08T18:09:11.000Z (over 1 year ago)
- Last Synced: 2025-04-01T19:33:57.500Z (11 months ago)
- Topics: cybersecurity, elasticsearch, elk-stack, kibana, security, sysmon
- Homepage: https://medium.com/@hamsnoesnothin/elastic-soc-homelab-using-sysmon-321577b5e9d4
- Size: 3.91 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md