Skip to content
Merged
Show file tree
Hide file tree
Changes from 15 commits
Commits
Show all changes
23 commits
Select commit Hold shift + click to select a range
5dee690
Add ESQL for security section, threat hunt tutorial
leemthompo Jun 10, 2025
123f3b0
fix toc typo
leemthompo Jun 10, 2025
8c0d3f5
Merge branch 'main' into leemthompo/esql-threat-hunting-tutorial
leemthompo Jun 10, 2025
0406d49
fix typos
leemthompo Jun 10, 2025
bd8e877
Emphasize Timeline/Discover for query exection, cleanup link formatti…
leemthompo Jun 12, 2025
125a28b
fix links
leemthompo Jun 12, 2025
bb06617
fix link
leemthompo Jun 12, 2025
24605b9
Link all commands/funcs/operators, update queries
leemthompo Jun 13, 2025
b6e5e02
delete unused lolbins index/data from setup
leemthompo Jun 13, 2025
1c311b3
update attack timeline query IP filtering to use CIDR_MATCH
leemthompo Jun 13, 2025
7380aaf
Revert "update attack timeline query IP filtering to use CIDR_MATCH"
leemthompo Jun 13, 2025
1d9304f
nicer indent
leemthompo Jun 13, 2025
8977e11
add responses
leemthompo Jun 16, 2025
3a8f3ca
Merge branch 'main' into leemthompo/esql-threat-hunting-tutorial
leemthompo Jun 16, 2025
f3d253d
cleanup, use present tense consistently
leemthompo Jun 16, 2025
7a5d086
Apply suggestions
leemthompo Jun 19, 2025
3abf97d
use requirements admonition
leemthompo Jun 19, 2025
994da7a
standardize annotations
leemthompo Jun 19, 2025
bc9c716
added comprehensive esql for security docs links, improved navigation…
leemthompo Jun 20, 2025
471ff5d
i could spend all day tweaking this
leemthompo Jun 20, 2025
ceb51d5
fix link
leemthompo Jun 20, 2025
bd70487
Merge branch 'main' into leemthompo/esql-threat-hunting-tutorial
leemthompo Jun 20, 2025
cf56005
tweak overview sentence
leemthompo Jun 20, 2025
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 14 additions & 0 deletions solutions/security/esql-for-security.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,14 @@
---
navigation_title: ES|QL for security
applies_to:
stack: all
serverless:
products:
- id: security
---

# {{esql}} for security use cases

Use the following resources to get hands-on with [{{esql}}](elasticsearch://reference/query-languages/esql.md) for cybersecurity use cases:

- [Tutorial: Threat hunting with {{esql}}](esql-for-security/esql-threat-hunting-tutorial.md): Learn how to use {{esql}} to hunt for threats in your data.
Loading
Loading