Skip to content

Winlogbeat

Named by 2 kept items in this workspace.

Search every workspace for Winlogbeat. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • Cobalt Strike and Tradecraft
    writeup2021-07-26

    Log shipper used on endpoints in the detection lab to forward Windows event logs to the ELK stack

  • Creating a Red & Blue Team Homelab
    writeup2021-03-04

    Ships Windows event logs (Application, Security, System, Sysmon, PowerShell, WMI-Activity) from Windows hosts to the ELK server

All technologies in this workspace.