mirror of
https://github.com/autistic-symposium/shell-whiz-toolkit.git
synced 2025-07-30 01:48:46 -04:00
add things resources from the last 5 years over machines
This commit is contained in:
parent
ac9c955e0b
commit
b0a4e417ee
77 changed files with 2327 additions and 84 deletions
6
elasticsearch/README.md
Normal file
6
elasticsearch/README.md
Normal file
|
@ -0,0 +1,6 @@
|
|||
# Elastalert hacks
|
||||
|
||||
```
|
||||
curl -s logs.HOST.com:9200/logstash-2017.09.08/_search\?q=ty_params.ProcessName:osqueryd\&size=10000\&sort=@timestamp:desc | jq -r '.hits.hits[]._source.ty_params.Username' | sort | uniq -c | sort -nr
|
||||
```
|
||||
|
Loading…
Add table
Add a link
Reference in a new issue