Security Generate Security Sample Data

Generates ECS-compliant security events, attack scenarios, and synthetic alerts straight into your Elastic Security deployment. You get five data packages (system, endpoint, Windows, AWS, Okta), four pre-built attack simulations including a full ransomware kill chain, and alerts that populate the actual Alerts tab with MITRE ATT&CK mappings. The demo-walkthrough script is genuinely thoughtful: it generates everything and opens Kibana for you. Continuous mode streams events on an interval so your dashboards stay live during presentations. This is purpose-built for POCs and demos where you need realistic security data without the usual painful setup. The cleanup flag actually works, which matters more than it should.

Install to Claude Code

npx -y skills add elastic/agent-skills --skill security-generate-security-sample-data --agent claude-code