This repository contains a few examples of actions that can be added to rules within Elastic Security.
☆24Feb 6, 2025Updated last year
Alternatives and similar repositories for security-action-examples
Users that are interested in security-action-examples are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Script to create MITRE ATT&CK Navigator layers from the annotated detection rules in Elastic Security (Kibana).☆19Jul 1, 2023Updated 3 years ago
- Translate an ECS mapping CSV to starter pipelines for Beats, Elasticsearch or Logstash☆54Mar 9, 2022Updated 4 years ago
- Converts Netwitness log parser configuration to Logstash configuration☆20Sep 10, 2020Updated 6 years ago
- A list of Mitre Caldera compatible emulation-plans☆14Feb 1, 2021Updated 5 years ago
- This package allows the use of a custom Elastalert Alert which creates alerts with observables in TheHive using TheHive4Py.☆26May 18, 2021Updated 5 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Parse Suricata rules☆14Aug 1, 2023Updated 3 years ago
- Safed for Linux☆15Jul 5, 2019Updated 7 years ago
- Mapping Corelight or Zeek data to Elastic Common Schema fields☆33Jul 21, 2026Updated last month
- ☆12Apr 23, 2020Updated 6 years ago
- Examples for creating Elastic Environments via Terraform☆29Jan 9, 2024Updated 2 years ago
- Listing releases of the Elastic stack with new features and references☆19Aug 5, 2026Updated last month
- ☆30Updated this week
- Ansible role to install auditbeat for security monitoring. (Ruleset included)☆15Nov 16, 2023Updated 2 years ago
- Zeek Training Materials/Products☆47Sep 11, 2026Updated last week
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Plugin files for editing K files☆12Aug 20, 2024Updated 2 years ago
- Elastic Common Schema (ECS) support for zerolog☆11Sep 2, 2026Updated 2 weeks ago
- Threat Intelligence with Elastic - Minemeld integration with Elasticsearch☆19May 11, 2021Updated 5 years ago
- ☆10Jan 19, 2026Updated 8 months ago
- SuperOptiX: Full Stack Agentic AI Framework☆25Updated this week
- Ansible playbook for installing MineMeld on Linux☆47Mar 18, 2021Updated 5 years ago
- ☆34Oct 16, 2025Updated 11 months ago
- A guide on using Zimbra with Elastic Stack using centralized logging☆27Apr 26, 2023Updated 3 years ago
- A flexible, easy to use, automation framework allowing users to integrate their capabilities and devices to cut through the repetitive, t…☆12Nov 23, 2022Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Searches For Threat Hunting and Security Analytics☆239Mar 26, 2025Updated last year
- A Terminal User Interface for Logstash 🪵☆108Apr 10, 2026Updated 5 months ago
- A solution for using the ElastiFlow Unified Collector with the Elastic Stack (Elasticsearch and Kibana).☆27Nov 10, 2025Updated 10 months ago
- Meer is a "spooler" for Suricata / Sagan.☆30Jun 21, 2023Updated 3 years ago
- ☆16Dec 16, 2020Updated 5 years ago
- Parse wazuh[HIDS] alerts into ECS mapping using Filebeat☆28Jul 21, 2020Updated 6 years ago
- A collection of utilities to help with analysis on the command line.☆18Aug 9, 2024Updated 2 years ago
- Dockerfile and artifacts for running a self-contained HDP 2.3 "cluster" in a docker container☆10Aug 30, 2016Updated 10 years ago
- ☆13Dec 26, 2022Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- The "Let's-defend-solution" directory contains the answers to all paths of the Let's Defend platform that were saved by the creator 8 mon…☆13Aug 11, 2026Updated last month
- This script can be used to cleanup unused Icinga2 data in InfluxDB☆14Sep 18, 2023Updated 3 years ago
- While language static analyzer☆10Oct 13, 2020Updated 5 years ago
- suricata rules to pcap☆10Mar 25, 2021Updated 5 years ago
- SIEM Logstash parsing for more than hundred technologies☆198Updated this week
- LocalZero Monitoring is a website with which activist groups can monitor their municipality's progress towards climate neutrality.☆20Sep 1, 2026Updated 2 weeks ago
- Experimental library for connecting Arduino boards to Elasticsearch and Elastic Cloud☆13Feb 6, 2025Updated last year