outflanknl / RedELK

Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

outflanknl/RedELK Issues

BounceBack redirector support
Closed 6 months ago1
MsSQL setup trouble
Closed 6 months ago
Integration of Bloodhound Community Edition
Updated 8 months ago9
Nothing being indexed into implantsdb
Closed 9 months ago2
Support for Sliver C2
Updated 9 months ago3
Fix some Logstash warnings
Closed 9 months ago2
Add containers to GHCR / Review build pipeline
Updated a year ago1
Glibc filebeat errors
Closed a year ago1
Remove config files from source control
Closed a year ago3
All alarms should report project_name
Closed a year ago2
Add mising modules in config.py
Closed a year ago
Check and clean-up ruby scripts
Closed a year ago
VT quota management
Updated a year ago1
Cobalt Strike enrichment stacktrace errors
Updated a year ago
quick dump of small notes and issues
Updated a year ago
ES document conflicterrors
Updated a year ago
Hybrid Analysis - error handling around max API hits
Updated a year ago1
Add support for domain lists (similar to IP lists)
Closed a year ago1
RedWarden redirector support
Updated a year ago6
Hybrid Anlaysis - SSL handshake failure
Closed 2 years ago1
Check if all modules in config.py
Closed 2 years ago1
Greynoise error
Closed 2 years ago
Check for consistent usage of c2.log.type field
Closed 2 years ago1
Issue with dashboards missing "keyword"
Closed 2 years ago2
export_kibana_config script not parsing Kibana settings?
Closed 2 years ago1
Bluecheck content parsing and alarm
Updated 2 years ago1
Implant.log_file not showing c2logs
Closed 2 years ago1
Help with install
Closed 2 years ago4
Performance issue with rsync on C2server
Closed 2 years ago1
Help with install
Closed 2 years ago1
Apache/nginx traffic not being parsed
Closed 2 years ago2
Logstash Stage1 Download filter parse failure
Closed 2 years ago
Alarms should include source.cdn.ip instead of source.nat.ip
Closed 2 years ago1
Kibana app upgrade to 7.16.
Closed 2 years ago2
HA false positive due to Cloudflare error
Closed 2 years ago1
rsync performance
Closed 2 years ago
Logstash config files docker mounted by default
Closed 2 years ago1
No Matching Indices - Debian
Closed 2 years ago5
redelk-www dir non existing
Closed 2 years ago
Upgrade Elastic to latest 7.16 due to log4shell
Closed 2 years ago8
Support for Nuages C2
Updated 2 years ago2
Support for Empire C2
Updated 2 years ago2
python scripts should do sanity checks before running
Closed 3 years ago
python script for greynosie throws error
Closed 3 years ago
Erroneous Password Generation
Closed 3 years ago1
rsync command in getremotelogs.sh pulls from wrong directory
Closed 3 years ago3
python script alarm_filehash throws error on VT data
Closed 3 years ago
rsync command in getremotelogs.sh messes up permissions
Closed 3 years ago4
Outflank Stage1 C2 integration
Closed 3 years ago1
Generic solution to multiple C2 support
Closed 3 years ago1