A honeypot system that detects and identifies attack commands, recon attempts, and download commands, mimicking a vulnerable Elasticsearch instance.
#elasticsearch tools
13 results
ElastAlert is a framework for alerting on anomalies in Elasticsearch data.
Elastic is a search-powered AI company that enables users to find answers from all data in real-time at scale.
A simple Elasticsearch honeypot to catch attackers exploiting RCE vulnerabilities.
ElasticSearch honeypot to capture attempts to exploit CVE-2014-3120, with logging and daemon options.
Browse a library of EQL analytics now natively integrated in Elasticsearch.
Hippocampe is a threat feed aggregator with configurable confidence levels and a Hipposcore for determining maliciousness.
Custom built application for asynchronous forensic data presentation on an Elasticsearch backend, with upcoming features like Docker-based installation and new UI rewrite in React.
Orochi is a collaborative forensic memory dump analysis framework.
SHIVA: Spam Honeypot with Intelligent Virtual Analyzer for capturing and analyzing spam data.
SysmonSearch makes event log analysis more effective by aggregating Microsoft Sysmon logs and providing detailed analysis through Elasticsearch and Kibana.
A tool for fetching and visualizing cyber threat intelligence data with Elasticsearch and Kibana integration.
AWS account compliance using centrally managed Config Rules