For my next trick, I've been collecting and sourcing these from hunts and I feel it is in decent shape to share: github.com/MHaggis/CBR-Qu… If you have Carbon Black, Inc. Response and need some CB Query ideas, here ya go! #DFIR

Lots and lots of collection and analysis is done at the CLI, awesome tool that prevents dragging an analyst to a GUI

Threat hunt training with network and endpoint data on the ⁦Elastic⁩ Stack. 70% hands on and taught by some real experts in the field. Hosted by ⁦Perched - an Elastic Company⁩. ⁦⁦rocknsm⁩ perched.io/training-cours…

We've finally added draw.io to CAPES. Check it out for campaign and adversary infrastructure diagramming! buff.ly/2IDKbgn

👏🙌 just in time for a nice dev weekend!

We're happy to announce that CAPES has been updated to Elastic 7.1.1 buff.ly/2F0aFWH

We are proud to present the release of Gitea version 1.8.3, see blog.gitea.io/2019/06/gitea-…

Awesome news on the nonprofit for the rocknsm and CAPES projects. Tremendous amounts of hard work from the team realized over many many years. afcea.org/content/cyber-… Derek Ditch Jeff Geiger Kevin Keeney

Happy 4th of July in the US! CAPES is updated to Elastic 7.2.0. Next up, Auditbeat for the host. Check it out over at buff.ly/2F0aFWH

Awesome job! The new version has been tested and is included in CAPES. capesstack.io 👏🙌

Testing is completed and CAPES is running with Elastic 7.3! The new Uptime and Infrastructure apps look great. Check it out over at buff.ly/2F0aFWH buff.ly/2yG92dv

I'm happy to announce that the landing page for CAPES is now behind TLS (finally). I apologize for the delay, but it took me a long time to get the CSS to work through HTTPS in the Nginx container. Up next, update to a full TLS reverse proxy. buff.ly/2F0aFWH

We've updated to Elastic 7.4, which includes (among other things) Snapshot management from within Kibana and many new ML jobs for the SIEM app. Check it out at buff.ly/2F0aFWH

What's that? You want Packetbeat and #auditbeat monitoring CAPES? I got you. Check it out at buff.ly/2IDKbgn

Upgraded the project to Elastic 7.5. The new Uptime and Metrics apps looks great. Lens is fantastic as an easy way to get started with visualizations. capesstack.io

CAPES has just updated TheHive to 3.4.0 and added (finally) Cortex 3.0.1. Check it out at capesstack.io

New release of CAPES! Most updated containers of Rocket.Chat, Gitea, TheHive (incl. Cortex), draw.io, Mumble, and CyberChef. Huge update to the Elastic Stack with version 7.7.0, which includes case management! capesstack.io

Quick update, CAPES has added Elastic 7.9 capesstack.io

Just a brief update. CAPES is in compliance with the new Elastic licensing changes (ELv2). elastic.co/licensing/elas…