ENTRY 001 Detection Elastic Python

Catching Lateral Movement With Nothing But Logs

Jorge OrtizStatus: draftingEst. 8 min

Placeholder lede. Two or three sentences setting up the problem and what the reader will get out of the post. Send me your write-up and this becomes your words.

_The Setup

Body paragraph. This page is the layout template for every entry: lede, section headings with the underscore prefix, body copy at readable size, terminal blocks for commands and log output, and a callout for the takeaway.

terminal

$ ./ingest.py --source winlogbeat --index lab-security
[ok] pipeline live // 1 rule fired

_What I Would Do Differently

Closing section. Honest assessment of what the lab does not cover yet and what comes next.

_Takeaway

One or two sentences a reader can act on.

◂ All entries Next: 002 queued