Intended for DFIR and Incident Response, this is a simple tool that uploads CSV files to ELK
Bulk CSV-to-Elasticsearch Importer for DFIR & Threat Hunting
Author: Jacob Wilson | dfirvault@gmail.com
"Ingest forensic logs, IOC feeds, or threat data into ELK with one click."
- Drag-and-drop CSV ingestion to Elasticsearch/OpenSearch
- Auto-mapping for timestamps, IPs, and forensic fields
- Configurable credentials (saved securely in
config.txt
) - DFIR-optimized: Handles malware logs, firewall data, and SIEM exports
- Smart timestamp detection (supports Unix epoch, ISO8601, and more)
# Requires Python 3.8+
pip install pandas requests tqdm
Jacob Wilson
📧 dfirvault@gmail.com
https://www.linkedin.com/in/jacob--wilson/
More information: https://dfirvault.com