部署运维插件合集

DShield-SIEM

bruneaug/DShield-SIEM

DShield-SIEM is a tool for DeepSeek Harness. DShield Sensor Log Collection with ELK

查看仓库

bruneaug/DShield-SIEM Screenshot preview

Stars: 50
Forks: 9
Issues: NaNm
Update: 4 days

REVIEW SCORECARD

评测成绩单

6.9/10Average

detail.dimSecurity6.0

detail.dimQuality6.8

detail.dimContent5.0

detail.dimDeps7.0

detail.dimMaintenance9.0

✓ 无Risky检出 · 自动化扫描结果仅供参考，非官方背书

AI DEEP REVIEW

AI 深度评测

7.0/10Consider

Solid DShield honeypot log pipeline for ELK, but plaintext default password and manual setup warrant caution.

Code quality7

README shows structured multi-step install with .env configuration, memory limits, and modular Logstash pipeline files, but no tests or CI are mentioned.

Security5

The README documents a default plaintext Elastic password of 'student' and instructs users to disable the firewall ('Ensure the Firewall is Off'), which are notable hardening concerns.

Utility8

It addresses a real need by packaging DShield honeypot log collection with ELK, Filebeat, CyberChef, and ATT&CK Navigator for threat research.

Maintenance8

Last updated 2026-09-11 with ELK 8.19.15 noted as updated 30 April 2026, indicating active maintenance.

Docs7

README provides detailed Ubuntu setup, docker install, /etc/hosts, sysctl, and .env guidance, though it is long and assumes significant prior knowledge.

Generated by AI after reading the project README, as a decision aid; neutral scores are given when information is thin. Not an official endorsement.

PROJECT README项目说明展开Collapse

正在读取 GitHub README...

INSTALL REFERENCE

安装参考

待结构检查

git clone https://github.com/bruneaug/DShield-SIEM.git

This command comes from an explicit install reference in the README and is provided for reference only — it is never auto-executed by a DSH host.

PROJECT TOPICS

项目标签

arkime attack-navigator cyberchef daemonlogger docker dshield dshield-threatintel elk-configuration elk-server elk-stack filebeat filebeat-agent honeypot logstash sensor virustotal zeek

VALIDATION LADDER

验证进度

待结构检查

01市场发现Passed

02归类识别Passed

03结构检查Pending

04实机验证Pending

FAQ

Frequently Asked Questions

What is DShield-SIEM used for?

DShield Sensor Log Collection with ELK

How popular is DShield-SIEM?

DShield-SIEM has 50 stars and 9 forks on GitHub, last updated 2026-09-11.

Is DShield-SIEM compatible with DeepSeek Harness?

DShield-SIEM is listed in the DSH Universe directory as a tool for DeepSeek Harness. This plugin is listed in the DSH Universe directory and covered by its validation pipeline.

CLASSIFICATION EVIDENCE