This repository is for integrating HELK capabilities into Security Onion instances. This will be an evolving extension to both products and as such this not contributed directly to either the HELK or SecurityOnion. Please both use at your own risk and enjoy.
The HELK-Container-Security-DOCKER-Elastic-Search project simplifies the deployment of the HELK (Hunting ELK) platform in container environments. It empowers security professionals and analysts with a containerized, easy-to-install HELK stack for advanced threat hunting, log analysis, and cybersecurity operations.
A from-scratch modernization of HELK (The Hunting ELK) — rebuilding its threat-hunting pipeline (Elasticsearch, Kibana, Logstash, Kafka, ElastAlert2/Sigma, Spark/GraphFrames, Jupyter) on currently maintained software.
To associate your repository with the helk topic, visit your repo's landing page and select "manage topics."