File tree Expand file tree Collapse file tree 4 files changed +16
-16
lines changed
Machine Learning/Security Analytics Recipes
suspicious_login_activity
suspicious_process_activity Expand file tree Collapse file tree 4 files changed +16
-16
lines changed Original file line number Diff line number Diff line change @@ -104,9 +104,9 @@ The Machine Learning Recipe can be loaded prior to the complete datacapture howe
104104Download the following files to the same directory:
105105
106106 ```
107- curl -O https://github. com/elastic/examples/blob /master/Machine%20Learning/Security%20Analytics%20Recipes/dns_data_exfiltration/machine_learning/data_feed.json
108- curl -O https://github. com/elastic/examples/blob /master/Machine%20Learning/Security%20Analytics%20Recipes/dns_data_exfiltration/machine_learning/job.json
109- curl -O https://github. com/elastic/examples/blob /master/Machine%20Learning/Security%20Analytics%20Recipes/scripts/reset_job.sh
107+ curl -O https://raw.githubusercontent. com/elastic/examples/master/Machine%20Learning/Security%20Analytics%20Recipes/dns_data_exfiltration/machine_learning/data_feed.json
108+ curl -O https://raw.githubusercontent. com/elastic/examples/master/Machine%20Learning/Security%20Analytics%20Recipes/dns_data_exfiltration/machine_learning/job.json
109+ curl -O https://raw.githubusercontent. com/elastic/examples/master/Machine%20Learning/Security%20Analytics%20Recipes/scripts/reset_job.sh
110110 ```
111111
112112* Load the Job by running the supplied reset_job.sh script.
Original file line number Diff line number Diff line change @@ -60,7 +60,7 @@ This example includes:
6060* Download the provided Packetbeat configuration file.
6161
6262 ```
63- curl -O https://github. com/elastic/examples/blob /master/Machine%20Learning/Security%20Analytics%20Recipes/http_data_exfiltration/configs/packetbeat/packetbeat.yml
63+ curl -O https://raw.githubusercontent. com/elastic/examples/master/Machine%20Learning/Security%20Analytics%20Recipes/http_data_exfiltration/configs/packetbeat/packetbeat.yml
6464 ```
6565
6666* Modify the packetbeat.yml file. Consider changing:
@@ -102,9 +102,9 @@ The Machine Learning Recipe can be loaded prior to the complete datacapture howe
102102Download the following files to the **same directory**:
103103
104104 ```
105- curl -O https://github. com/elastic/examples/blob /master/Machine%20Learning/Security%20Analytics%20Recipes/http_data_exfiltration/machine_learning/data_feed.json
106- curl -O https://github. com/elastic/examples/blob /master/Machine%20Learning/Security%20Analytics%20Recipes/http_data_exfiltration/machine_learning/job.json
107- curl -O https://github. com/elastic/examples/blob /master/Machine%20Learning/Security%20Analytics%20Recipes/scripts/reset_job.sh
105+ curl -O https://raw.githubusercontent. com/elastic/examples/master/Machine%20Learning/Security%20Analytics%20Recipes/http_data_exfiltration/machine_learning/data_feed.json
106+ curl -O https://raw.githubusercontent. com/elastic/examples/master/Machine%20Learning/Security%20Analytics%20Recipes/http_data_exfiltration/machine_learning/job.json
107+ curl -O https://raw.githubusercontent. com/elastic/examples/master/Machine%20Learning/Security%20Analytics%20Recipes/scripts/reset_job.sh
108108 ```
109109
110110* Load the Job by running the supplied reset_job.sh script.
Original file line number Diff line number Diff line change @@ -60,7 +60,7 @@ This example includes:
6060* Download the test dataset provided.
6161
6262 ```
63- curl -O https://github. com/elastic/examples/blob /master/Machine%20Learning/Security%20Analytics%20Recipes/suspicious_login_activity/data/auth.log
63+ curl -O https://raw.githubusercontent. com/elastic/examples/master/Machine%20Learning/Security%20Analytics%20Recipes/suspicious_login_activity/data/auth.log
6464 ```
6565
6666
@@ -69,7 +69,7 @@ This example includes:
6969* Download the provided Filebeat configuration file.
7070
7171 ```
72- curl -O https://github. com/elastic/examples/blob /master/Machine%20Learning/Security%20Analytics%20Recipes/suspicious_login_activity/configs/filebeat/filebeat.yml
72+ curl -O https://raw.githubusercontent. com/elastic/examples/master/Machine%20Learning/Security%20Analytics%20Recipes/suspicious_login_activity/configs/filebeat/filebeat.yml
7373 ```
7474
7575* Modify the filebeat.yml file. Change:
@@ -105,9 +105,9 @@ The above steps should index a sample set of auth logs into Elasticsearch. To l
105105Download the following files to the **same directory**:
106106
107107 ```
108- curl -O https://github. com/elastic/examples/blob /master/Machine%20Learning/Security%20Analytics%20Recipes/suspicious_login_activity/machine_learning/data_feed.json
109- curl -O https://github. com/elastic/examples/blob /master/Machine%20Learning/Security%20Analytics%20Recipes/suspicious_login_activity/machine_learning/job.json
110- curl -O https://github. com/elastic/examples/blob /master/Machine%20Learning/Security%20Analytics%20Recipes/scripts/reset_job.sh
108+ curl -O https://raw.githubusercontent. com/elastic/examples/master/Machine%20Learning/Security%20Analytics%20Recipes/suspicious_login_activity/machine_learning/data_feed.json
109+ curl -O https://raw.githubusercontent. com/elastic/examples/master/Machine%20Learning/Security%20Analytics%20Recipes/suspicious_login_activity/machine_learning/job.json
110+ curl -O https://raw.githubusercontent. com/elastic/examples/master/Machine%20Learning/Security%20Analytics%20Recipes/scripts/reset_job.sh
111111 ```
112112
113113* Load the Job by running the supplied reset_job.sh script.
Original file line number Diff line number Diff line change @@ -64,7 +64,7 @@ This example includes:
6464
6565* Download the provided Filebeat configuration file. This configuration utilises the [Auditd filebeat module](https://www.elastic.co/guide/en/beats/filebeat/5.4/filebeat-module-auditd.html) .
6666
67- ```curl -O https://github. com/elastic/examples/blob /master/Machine%20Learning/Security%20Analytics%20Recipes/suspicious_process_activity/configs/filebeat/filebeat.yml```
67+ ```curl -O https://raw.githubusercontent. com/elastic/examples/master/Machine%20Learning/Security%20Analytics%20Recipes/suspicious_process_activity/configs/filebeat/filebeat.yml```
6868
6969* Modify the filebeat.yml file. Consider changing:
7070
@@ -106,9 +106,9 @@ The Machine Learning Recipe can be loaded prior to the complete data capture how
106106Download the following files to the same directory:
107107
108108 ```
109- curl -O https://github. com/elastic/examples/blob /master/Machine%20Learning/Security%20Analytics%20Recipes/suspicious_process_activity/machine_learning/data_feed.json
110- curl -O https://github. com/elastic/examples/blob /master/Machine%20Learning/Security%20Analytics%20Recipes/suspicious_process_activity/machine_learning/job.json
111- curl -O https://github. com/elastic/examples/blob /master/Machine%20Learning/Security%20Analytics%20Recipes/scripts/reset_job.sh
109+ curl -O https://raw.githubusercontent. com/elastic/examples/master/Machine%20Learning/Security%20Analytics%20Recipes/suspicious_process_activity/machine_learning/data_feed.json
110+ curl -O https://raw.githubusercontent. com/elastic/examples/master/Machine%20Learning/Security%20Analytics%20Recipes/suspicious_process_activity/machine_learning/job.json
111+ curl -O https://raw.githubusercontent. com/elastic/examples/master/Machine%20Learning/Security%20Analytics%20Recipes/scripts/reset_job.sh
112112 ```
113113
114114* Load the Job by running the supplied reset_job.sh script.
You can’t perform that action at this time.
0 commit comments