search

outflanknl / RedELK

Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.
BSD 3-Clause "New" or "Revised" License
2.35k stars 371 forks source link

Nothing being indexed into implantsdb #299

Closed RossLopez closed 11 months ago

RossLopez commented 1 year ago

Using Cobaltstrike for C2, nothing being logged into the implantsdb index. Everything else is working (screenshots, credentials, etc). Screenshot 2023-08-21 at 2 38 32 PM Screenshot 2023-08-21 at 2 42 15 PM

MarcOverIP commented 12 months ago

What version are you using? Can you try with a clear/new search in Kibana's Discover (the real searching page) with no filters applied?

MarcOverIP commented 11 months ago

Closing due to lack of response.