SlingStrike

SIEM Threat Detection Testing & Correlation Rules Validation Platform

---

SlingStrike is a self-hosted, Docker-friendly platform for building, managing, and replaying log-based attack simulation use cases. Ship realistic log sequences directly to your SIEM over syslog or another protocols and validate detection rules before attackers test them.

---

Get Started

• Docker Compose Quickstart
• First Use Case Walkthrough (coming soon)
• SIEM Target Configuration (coming soon)
• OLF Format Specification (coming soon)

Source Code

• GitHub Repository
• Community Use Cases

Enterprise

• Enterprise Use Cases (coming soon)
• Enterprise Fetures (coming soon)
• Enterprise FAQs (coming soon)