logo

How to install Elastic SIEM and Elastic EDR

ID: d079e6b8-f6f7-5e14-8153-6843ff190a61

STIX ID: report--d079e6b8-f6f7-5e14-8153-6843ff190a61

Feed Name: On the Hunt

Date Published: 2020-12-03

Date Updated: 2026-04-19

Author: Paul Newton

...
...

This blog-style guide walks through installing and configuring an ELK (Elasticsearch/Kibana) stack with X-Pack security, Filebeat (Zeek), and Elastic Endpoint (EDR) Agent enrollment via Fleet, including SSL certificate generation, authentication, and validation steps; it concludes with brief EDR test results (Mimikatz detection) and recommendations for small-to-medium environments.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.