
ecs-logstash-mappings
Mapping Corelight or Zeek data to Elastic Common Schema logs
incident-responseintrusion-detectionlog-analysis+2
11

Mapping Corelight or Zeek data to Elastic Common Schema logs

Mapping Corelight or Zeek data to Elastic Common Schema fields

Bro/Zeek script for detecting Apache Struts CVE-2017-5638 reconnaissance, compromise, and malware download tracking with automated IP extraction.

Intelligence and Reconnaissance Package/Bundle installer.