Some Dashboards to get you started if you have the following installed: WinLogBeat (with Sysmon enabled) PacketBeat (with flows) Some examples are as follows: Packetbeat Winlogbeat To use the dashboards, just download the relevant json files and import them via saved objects through Kibana.