Introduction
Revision History
| Date | Author | Summary |
|---|---|---|
| 26-JAN-2023 | TSgt. Bernadotte | Initial draft |
| 04-FEB-2023 | TSgt. Bernadotte | Added information on elastic detection rules alerting on baseline changes |
| 13-JUN-2023 | TSgt. Bernadotte | Converted document to markdown |
| 13-JUN-2023 | TSgt. Bernadotte | Changed title from "Elastic Baseline Inventory (Scripted Method)" to "Automated Baseline Inventory" |
| 13-AUG-2024 | TSgt. Bernadotte | Updated instructions for clarity |
| 04-FEB-2026 | CW2 Bernadotte | Converted 262COS-OPS-SOP-001 to analysis 262COS-OPS-AID-001 to account for full automation of baseline inventory queries |
| 06-FEB-2026 | CW2 Bernadotte | Rewrote content with loose analysis framework |
Purpose
The purpose of this Aid is to provide a loose framework for analyzing baseline inventories that are automatically updated in Elasticsearch.