Fill Elastic Security with realistic demo alerts.
What it does
Populates Elastic Security with synthetic security events, attack sequences, and alerts for demos and detection testing.
When to use it
Use for demos, populating dashboards, testing detection rules, or setting up a proof of concept.
How to use it
Give it a security demo or testing request; it generates sample events, attack scenarios, and alerts in the configured cluster.
Uses
Good to know
- cannot be undone: Elasticsearch; Kibana
- acts without asking
Latest review
What you need · 11
Requires Node.js 22 or later.
The Elasticsearch client imports this package.
Access · 3
This skill
Elasticsearch
Write
Indexes and deletes sample security data (irreversible)
Kibana
Write
Creates and deletes investigation cases (irreversible)