Struggling with ransomware campaign lateral movement lab

I have done all the steps and connected with everything, but the logs are not showing up on the elastic

I ran through the lateral movement part of the campaign.


Everything works as written. Be sure you follow all the steps in the Getting Started section and be sure 1.) That you can ping “elk” and that 2.) The winlogbeat service starts.