shadowtracker-elastic-logs

KO | EN

gitlite — search

#javascript #python #hacktoberfest #react #ai #typescript #llm #go #golang #android #machine-learning #rust #deep-learning #linux

shadowtracker-elastic-logs

(★ 11)

End-to-end ransomware attack simulation logs for DFIR/SOC analysts

shadowtracker-elastic-logs 최신버젼 다운로드

최종 버전 다운로드 (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# ShadowTracker Ransomware Attack Simluation Logs
These are exported Elastic logs (in JSON format) of an end-to-end simulated ransomware attack scenario performed in a multi-machine environment. The purpose for sharing this publicly is to help DFIR professionals and SOC analysts to practice end-to-end investigations using Elastic SIEM and sharpen their skills through hands-on practice with real-world attack patterns and telemetry.

## Scenario
Contoso, a large technology company, has experienced a ransomware attack. As part of the incident response team, your task is to investigate the compromise and reconstruct the complete attack chain to ensure effective eradication and prevent the attackers from regaining access to the environment.

## Import into Elasticsearch Using elasticdump
You can import logs into your local Elastic instance by using the following example command:

```
elasticdump
--input=winlogbeat-*.json
--output=http://localhost:9200/<index_name>
--type=data
```
## Disclaimer
This dataset contains simulated malicious activity created in an isolated lab environment for educational purposes only.

## License
This project is licensed under the MIT License - see the [LICENSE](https://github.com/moex01/shadowtracker-elastic-logs/blob/main/LICENSE) file for details.

shadowtracker-elastic-logs

shadowtracker-elastic-logs 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

shadowtracker-elastic-logs

shadowtracker-elastic-logs 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README