Download for MacApple silicon, macOS 14+
Skill

security-generate-security-sample-data

@elastic Updated 2026-10-23

Generate sample security events, attack scenarios, and synthetic alerts for Elastic Security. Use when demoing, populating dashboards, testing detection rules, or setting up a POC.

Install

With your agent

Install OMGSkills skill "elastic/claude-plugin:skills/security/generate-security-sample-data" into this agent's normal skills directory: call the OMGSkills MCP get_install_plan tool for your agent and run the script it returns (it installs only the pinned commit and verifies SKILL.md), and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.

Manual command

git clone https://github.com/elastic/claude-plugin /tmp/claude-plugin && ln -s /tmp/claude-plugin/skills/security/generate-security-sample-data ~/.claude/skills/security-generate-security-sample-data

From README

Generate Security Sample Data Generate ECS-compliant security events, multi-step attack scenarios, and synthetic alert documents that populate Elastic Security dashboards, the Alerts tab, and Attack Discovery.