2017년 4월2018년 10월2020년 5월2021년 11월2023년 6월2025년 1월2026년 7월
README
HELK
The Hunting ELK or simply the HELK is one of the first open source hunt platforms with advanced analytics capabilities such as SQL declarative language, graphing, structured streaming, and even machine learning via Jupyter notebooks and Apache Spark over an ELK stack. This project was developed primarily for research, but due to its flexible design and core components, it can be deployed in larger environments with the right configurations and scalable infrastructure.
Goals
Provide an open source hunting platform to the community and share the basics of Threat Hunting.
Expedite the time it takes to deploy a hunt platform.
Improve the testing and development of hunting use cases in an easier and more affordable way.
Enable Data Science capabilities while analyzing data via Apache Spark, GraphFrames & Jupyter Notebooks.
Current Status: Alpha
The project is currently in an alpha stage, which means that the code and the functionality are still changing. We haven't yet tested the system with large data sources and in many scenarios. We invite you to try it and welcome any feedback.
