Dataset · Hugging Face

TocharianOU/secops-es-benchmark

Name: secops-es-benchmark
Creator: TocharianOU
License: cc-by-4.0
Keywords: task_categories:question-answering, task_categories:text-generation, language:en, license:cc-by-4.0, size_categories:100K<n<1M, region:us, security, cybersecurity, secops, siem, elasticsearch, ecs, threat-detection, incident-response, mitre-attack

secops-es-benchmark An open benchmark for AI agents that investigate breaches in Elasticsearch. Real, labeled attack telemetry in Elasticsearch (ECS) plus a scored task suite — so you can measure how well an agent, or any LLM, does the job of a SOC analyst: follow one alert, pivot across data sources with ES|QL, reconstruct the intrusion, and recommend a proportionate response. DOI (cite this): 10.5281/zenodo.21770551 Code, runner, and full docs:… See the full description on the dataset page: https://huggingface.co/datasets/TocharianOU/secops-es-benchmark.

View on Hugging FaceReport an issue

Author / organization	TocharianOU
License (as declared)	cc-by-4.0
Downloads	289 (as reported by Hugging Face)
Likes	0
Created	30 July 2026
Last updated at source	3 August 2026

securitycybersecuritysecopssiemelasticsearchecsthreat-detectionincident-responsemitre-attackllm-agentsagent-evaluationbenchmark

Embed this entry

<iframe src="https://silytics.si/embed/item/8ba6b237-cd58-49e5-8e41-df000b94e202" width="420" height="190" style="border:0" loading="lazy" title="Silytics entry"></iframe>

Free, no tracking. More about feeds and embeds.

Silytics shows public metadata from Hugging Face and links to the original. Information may be incomplete or out of date. Last refreshed 16 October 2026. Licenses and terms of the original apply to the work itself. Not financial, legal or professional advice.