Open in Playground Download design mesheryctl design import -f https://raw.githubusercontent.com/meshery/meshery.io/master/catalog/f2ff9022-b5f5-494c-b6c3-b2ba5434195c/0.0.7/design.yml

What This Design Does:

A cloud-to-cluster threat hunting reference architecture. AWS VPC/private-subnet substrate bridges into a Kubernetes SOC stack, with edges that narrate the full hunt lifecycle: collect → enrich → ship → store → hunt→ respond.

Design Snapshot

Threatstack — Cloud Threat Hunting Reference  Architecture .yaml design snapshot

Caveats and Consideration:

Demo-oriented: images are lightweight stand-ins (busybox echo for EDR agents/sim), Wazuh/LDAP unauthenticated, ES security disabled. For production: wire real agents, enable xpack security, and front everything with TLS via the included ingress.

Compatibility:

`