This kit provides ready-to-roll dashboards, queries, templates, playbooks, and actionables.
The CoreDNS kit depends on the Gravwell CoreDNS Plugin.
This kit provides resources which can be used to enrich network data.
The Grok kit provides some documentation and a pattern resource file to allow usage of Grok patterns for data extraction within Gravwell. This greatly simplifies extractions that would otherwise use regular expressions directly.
The Bandura Cyber kit provides a standard Gravwell configuration for use alongside the TI Firewall's powerful syslog export features.
A learning kit that gathers current weather conditions for a list of locations, which can be viewed using the included dashboard.
The Zeek Kit provides a baseline set of queries, dashboards, templates, and investigative resources for the Zeek Network Security Monitor.