shadowtracker-elastic-logs

KO | EN

gitlite — search

#python #typescript #llm #golang #android #machine-learning #deep-learning #macos #windows #vue #awesome-list #security #mcp #open-source

shadowtracker-elastic-logs

(★ 11)

End-to-end ransomware attack simulation logs for DFIR/SOC analysts

shadowtracker-elastic-logs Latest Version Download

Download Latest Version (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# ShadowTracker Ransomware Attack Simluation Logs
These are exported Elastic logs (in JSON format) of an end-to-end simulated ransomware attack scenario performed in a multi-machine environment. The purpose for sharing this publicly is to help DFIR professionals and SOC analysts to practice end-to-end investigations using Elastic SIEM and sharpen their skills through hands-on practice with real-world attack patterns and telemetry.

## Scenario
Contoso, a large technology company, has experienced a ransomware attack. As part of the incident response team, your task is to investigate the compromise and reconstruct the complete attack chain to ensure effective eradication and prevent the attackers from regaining access to the environment.

## Import into Elasticsearch Using elasticdump
You can import logs into your local Elastic instance by using the following example command:

```
elasticdump
--input=winlogbeat-*.json
--output=http://localhost:9200/<index_name>
--type=data
```
## Disclaimer
This dataset contains simulated malicious activity created in an isolated lab environment for educational purposes only.

## License
This project is licensed under the MIT License - see the [LICENSE](https://github.com/moex01/shadowtracker-elastic-logs/blob/main/LICENSE) file for details.

shadowtracker-elastic-logs

shadowtracker-elastic-logs Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

shadowtracker-elastic-logs

shadowtracker-elastic-logs Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

Download README