Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.
BSD 3-Clause "New" or "Revised" License
2.35k
stars
371
forks
source link
RedELK Modification to Support Cobaltstrike 4.10 #310
Open
OG-Sadpanda opened 1 month ago
Modification of c2server filebeat configs/scripts, and modification of the log-stash ruby scripts to support ingestion of Cobaltstrike 4.10 log data