Generate Sample Data
- 5 installs
- 20 repo stars
- Updated July 8, 2026
- elastic/example-mcp-app-security
generate-sample-data skill documents Generate sample security events, attack scenarios, and synthetic alerts for Elastic Security.
About
generate-sample-data skill documents Generate sample security events, attack scenarios, and synthetic alerts for Elastic Security. Use when demoing, populating dashboards, testing detection rules, setting up a POC, or when the user asks for test data, demo data, or sample alerts.. name: generate-sample-data description: >
- Generate sample security events, attack scenarios, and synthetic alerts for Elastic Security.
- Platform-specific setup patterns for generate-sample-data.
- Evidence-backed steps from upstream SKILL.md.
- When-to-use criteria for generate-sample-data versus alternatives.
Generate Sample Data by the numbers
- 5 all-time installs (skills.sh)
- Ranked #1,725 of 2,203 Security skills by installs in the Skillselion catalog
- Data as of Jul 24, 2026 (Skillselion catalog sync)
generate-sample-data capabilities & compatibility
- Capabilities
- generate sample data quick start · generate sample data when to use guidance · generate sample data integration patterns
- Works with
- elasticsearch
- Use cases
- security audit
What generate-sample-data says it does
Generate sample security events, attack scenarios, and synthetic alerts for Elastic
Security. Use when demoing, populating dashboards, testing detection rules, setting
npx skills add https://github.com/elastic/example-mcp-app-security --skill generate-sample-dataAdd your badge
Show developers this skill is listed on Skillselion. Paste this into your README.
| Installs | 5 |
|---|---|
| repo stars | ★ 20 |
| Last updated | July 8, 2026 |
| Repository | elastic/example-mcp-app-security ↗ |
How do I use generate-sample-data correctly?
Generate sample security events, attack scenarios, and synthetic alerts for Elastic Security. Use when demoing, populating dashboards, testing detection rules, setting up a POC, or when the user asks
Who is it for?
Teams implementing generate-sample-data workflows from the catalog.
Skip if: Skip when requirements clearly match a different specialized stack.
When should I use this skill?
User asks about generate-sample-data, generate sample security events, attack scenarios, and synthetic alerts for elastic securi.
What you get
Working generate-sample-data setup with validated configuration and next steps.
Files
Generate Security Sample Data
Generate ECS-compliant security events and synthetic alerts using the elastic-security MCP connector.
Tools (via elastic-security MCP connector)
| Tool | Purpose |
|---|---|
generate-sample-data | Generate events with interactive UI. Params: scenario, count |
Attack Scenarios
| Scenario | Description |
|---|---|
windows-credential-theft | Mimikatz, procdump, credential dumping on Windows |
aws-privilege-escalation | IAM policy changes, role assumption, access key creation |
okta-identity-takeover | MFA factor reset, password change, session hijacking |
ransomware-kill-chain | PowerShell execution, C2 beaconing, mass file encryption |
Usage
- To generate all scenarios: call
generate-sample-datawithout a scenario parameter - To generate a specific scenario: pass
scenario: "ransomware-kill-chain" - All data is tagged with
elastic-security-sample-datafor safe cleanup - The dashboard UI has a cleanup button to remove all generated data
After Generating
Direct the user to explore in Kibana:
- Security > Alerts — synthetic alerts with MITRE ATT&CK mappings
- Security > Attack Discovery — requires an LLM connector
- Security > Hosts — host activity from sample events
Related skills
Entra App RegistrationCorrectly register an application in Microsoft Entra ID, configure OAuth 2.0 flows, request the right API permissions, and generate working MSAL authentication snippets484k1.3kAzure ComplianceRun automated Azure compliance scans, security posture checks, and Key Vault expiration audits before deploying.484k1.3k
Openclaw Secure Linux CloudDeploy and harden an OpenClaw agent instance on a Linux cloud server following battle-tested security defaults.270k72
Better Auth Best PracticesCorrectly configure Better Auth for secure authentication with database adapters, sessions, OAuth, email/password, and plugins in TypeScript projects.80.9k206
Firebase Security Rules AuditorAutomatically audit Firebase Firestore security rules for bypass vulnerabilities and logic gaps before deploying.80.4k397
Audit WebsiteRun comprehensive audits that surface SEO, performance, security, technical, and content issues with LLM-optimized reports and health scores.65.6k85FAQ
What does generate-sample-data do?
generate-sample-data skill documents Generate sample security events, attack scenarios, and synthetic alerts for Elastic Security.
When should I use generate-sample-data?
User asks about generate-sample-data, generate sample security events, attack scenarios, and synthetic alerts for elastic securi.
Is this skill safe to install?
Review the Security Audits panel on this page before installing in production.