Post #8 291 Jan 26, 2021, 10:49 UTC Пайплайн для расследования угроз в Elastic Stack.https://youtu.be/jYQ2vgtkfWQ YouTube Integrating Attack Behavior Intelligence into Logstash Plugins - Jun 30, 2020 Elastic Meetup Several commercial and open source tools enable security data ingestion, however, these tools are typically not simple and easily incur errors through misconfigurations. MITRE ATT&CKTM, Elastic’s Logstash ‘pipeline to pipeline’ and multi-pipeline features…