outflanknl / RedELK

Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.
BSD 3-Clause "New" or "Revised" License
2.38k stars 370 forks source link

New alarm: new implant for a new host #177

Open fastlorenzo opened 3 years ago

fastlorenzo commented 3 years ago

Send an alarm when a new implant is detected for a host we didn't have an implant in the past.