ansible-winlogbeat-sysmon

Ansible role for installing winlogbeat and sysmon

example playbook

- hosts: win
  tasks:
    - import_role:
        name: ansible-winlogbeat
      vars:
        elasticsearch_host: "192.168.56.1:9200"
        kibana_host: "192.168.56.1:5601"
        # force_install: true

configurations

WinLogBeat: Malware Archeology WinLogBeat configuration file. Sysmon: SwiftOnSecurity sysmon config.