A solid, capable, and growing team doing some innovative stuff in cyber.

Join us in June! The Threat Hunting on the Elastic Stack training focuses on the collection and analysis of network data with rocknsm and endpoint data with THE-HELK within the Elastic Stack. buff.ly/2ZKL2Sw

Take a break from the training and learn how Corelight, Perched, and Elastic are accelerating The Zeek Network Security Monitor NSM threat hunting and incident response! buff.ly/2ZKL2Sw

Congrats to the ⁦rocknsm⁩ team! Cyber Militia Innovation Meets Mission Needs afcea.org/content/cyber-…

This is a must have is you’re transitioning from one data analysis platform to another.

Awesome job!

Awesome new blog post on importing EVTX files into an existing Elasticsearch instance, like rocknsm or THE-HELK buff.ly/2Z0UuQs

We're excited to announce that all of the Perched Foundations education course has been completely updated to @Elastic 7! Check out the course content over at buff.ly/2VgmnlO

We're excited to announce that all of the Perched Threat Hunting with Corelight education course has been completely updated to @Elastic 7! Check out the course content over at buff.ly/2EVfrov @corelight

We're excited to announce that all of the Perched Operator education course has been completely updated to @Elastic 7! Check out the course content over at buff.ly/2EvVpBc

Due to popular demand, we have changed the Threat Hunting on the Elastic Stack event to a virtual classroom. We will provide secure remote access to our cloud infrastructure for all content and labs. Join us next week with a 10% discount: 10OFF buff.ly/2ZKL2Sw Elastic

We're excited to announce that all of the Perched Analyst education course has been completely updated to Elastic 7! Check out the course content over at buff.ly/31eZKSO

We're excited to announce that the Perched NSM Engineering course has been completely updated to @Elastic 7! Check out the course content over at buff.ly/2Vh7dg5

H/T to Phill Moore for Nate Guagenti and @SolderSwag’s article on leveraging THE-HELK to parse Windows event logs. buff.ly/2X2phv5 buff.ly/2Z0UuQs #DFIR

We’re excited to see the SIEM released and are going to work hard to incorporate it into the FOSS projects we sponsor, like rocknsm and capes. Additionally, we’ll be adding the SIEM functionality to all of our course content ASAP.

We're excited to announce that the Perched NSM Engineering course has been completely updated to include the security features of @Elastic 7.1! Check out the course content over at buff.ly/2Vh7dg5

Back by popular demand, we're launching our next public training - Threat Hunting with the Elastic Stack. Come join us in Hawaii on Joint Base Pearl Harbor July 22-26. #nsm #threathunting Elastic buff.ly/2XxBDeM

Great article by Elastic’s George Young highlighting the need for a “human-in-the-loop”. Check out our Elastic Threat Hunting education services that teach that exact approach. buff.ly/2t9j8R0 buff.ly/2M5xGMx

Agreed. Great feedback from the community. Thanks again @SolderSwag!