Pinned Tweet
CAPES has been updated to @elastic 7.8, @portainerio
1.24.0, @giteaio 1.13.0, @rocketchat
3.3.3, @EtherpadOrg 1.6.5, @TheHive_Project 3.4.0-1, Cortex 3.0.1-1, @drawio
13.2.5, and @GCHQ #CyberChef 8.22.0 capesstack.io
Just a brief update. CAPES is in compliance with the new @elastic licensing changes (ELv2). elastic.co/licensing/elastic…
New release of CAPES! Most updated containers of @rocketchat, @giteaio, @TheHive_Project (incl. Cortex), @drawio, Mumble, and CyberChef. Huge update to the @elastic Stack with version 7.7.0, which includes case management! capesstack.io
CAPES has just updated TheHive to 3.4.0 and added (finally) Cortex 3.0.1. Check it out at capesstack.io
Upgraded the project to @elastic 7.5. The new Uptime and Metrics apps looks great. Lens is fantastic as an easy way to get started with visualizations. capesstack.io
What's that? You want @packetbeat and #auditbeat monitoring CAPES? I got you. Check it out at buff.ly/2IDKbgn
We've updated to @elastic 7.4, which includes (among other things) Snapshot management from within Kibana and many new ML jobs for the SIEM app. Check it out at buff.ly/2F0aFWH
I'm happy to announce that the landing page for CAPES is now behind TLS (finally). I apologize for the delay, but it took me a long time to get the CSS to work through HTTPS in the Nginx container. Up next, update to a full TLS reverse proxy. buff.ly/2F0aFWH
Testing is completed and CAPES is running with @Elastic 7.3! The new Uptime and Infrastructure apps look great. Check it out over at buff.ly/2F0aFWH buff.ly/2yG92dv
Awesome job! The new version has been tested and is included in CAPES. capesstack.io 👏🙌
Announcing Portainer v1.22.0; this new version adds support for Edge agents, and up to 25,000 of them under a single Portainer instance. Also, the agent is now opensource :). See release notes here: github.com/portainer/portain…
Happy 4th of July in the US! CAPES is updated to @elastic 7.2.0. Next up, Auditbeat for the host. Check it out over at buff.ly/2F0aFWH
Awesome news on the nonprofit for the @rocknsm and CAPES projects. Tremendous amounts of hard work from the team realized over many many years. afcea.org/content/cyber-mili… @dcode @jeffgeiger @kevinkeeney
capes retweeted
We are proud to present the release of Gitea version 1.8.3, see blog.gitea.io/2019/06/gitea-…
We're happy to announce that CAPES has been updated to @Elastic 7.1.1 buff.ly/2F0aFWH
👏🙌 just in time for a nice dev weekend!
Searching for an Elastic? Here, Take 6! TheHive 3.4.0-RC1 & Cortex 3.0.0-RC3 now support ES6 & add a few gifts such as analyzer-generated file imports. You were bored to death this week-end? Now you aren't anymore \o/
Bon appétit !… blog.thehive-project.org/201…
We've finally added @drawio to CAPES. Check it out for campaign and adversary infrastructure diagramming! buff.ly/2IDKbgn
Threat hunt training with network and endpoint data on the @Elastic Stack. 70% hands on and taught by some real experts in the field. Hosted by @PerchedSystems. @rocknsm perched.io/training-courses/…
Lots and lots of collection and analysis is done at the CLI, awesome tool that prevents dragging an analyst to a GUI
I'm excited to announce the initial release of pollen, a tool I've been working on to provide command-line interaction with @TheHive_Project. Still more to come, but it's not a bad start!!
Blog: medium.com/@bromiley/pollen-…
Source: github.com/bromiley/pollen
capes retweeted
For my next trick, I've been collecting and sourcing these from hunts and I feel it is in decent shape to share:
github.com/MHaggis/CBR-Queri…
If you have @CarbonBlack_Inc Response and need some CB Query ideas, here ya go! #DFIR


















