Monitoring Critical Infrastructure with EQL
Learn how to write custom EQL detection rules in Elastic Security to monitor and alert on critical infrastructure threats within your environment. In this tutorial, you will learn how to write a custom event correlation rule in EQL to monitor critical assets and how to test your detections to ensure maximum efficacy.