Official repository for code snippets from Data Engineering for Cybersecurity, No Starch Press, July 2025

🚀 Enterprise-grade Android Monitoring with Elastic: Streamline Fleet Management and Security Insights. 📊

Vagrant box with Elastic Stack via Ansible 🔨 ⏱ 📊

DShield Sensor Scripts

Dockerized Datacenter

Terraform module for managing Elastic Fleet agent policies.

A comprehensive guide to setting up a home lab for Elastic Stack SIEM with Kali Linux, enabling security event generation, data forwarding, and log analysis.

Detection Engineering Playground

SOC detection lab using Elastic SIEM + Fleet + Sysmon with detections, alerts, incident write-ups, and troubleshooting.

A Collection of Elastic-Stack HowTos

SOC Lab 11 — Elastic SIEM Setup | Deploying Elastic Security and ingesting logs from Kali Linux via Elastic Agent

Visually diagrams Elasticsearch ingest pipelines using Python and Graphviz

Lab 2 for Cyber Threat Intelligence (CTI) — Integration of MISP with Elastic Stack for IoC ingestion, and deployment of Elastic Agents on Linux and Windows endpoints via Fleet Server for centralized log forwarding.

MCP server for Elastic Fleet package metadata

Elastic - Docker - Swarm - Trafik - Deploy

controls the deployments on my server. manages authentication and authorisation to different project. provide server metrics and project observability.