To mitigate your enterprise network from threats and attacks, you should always perform vulnerabilities’ test on your system. In order, to fix them. So, as you can imagine the reporting job is very important in any SOC because it will give an overview of the vulnerabilities that your system might…

Hello and welcome to our new article which will be covering the alerting part in our SOCaaS solution. As you all know alerts in any SOC play a vital rule in notifying the response team. So, they can interrupt the cyber kill chain or monitor that attack furthermore depending on…

Welcome to our fourth article of this series. I encourage you all to check the previous article to have a better understanding of what we are going to discuss here. Moving along in our project now that we have completed the SIEM part. It is the time to transform our…

Welcome to our second article of this series. I encourage you all to check the previous article to have a better understanding of what we are going to discuss here. The article is divided into these sections: 1- Walk-through ELK SIEM 2- default dashboards 3- Creating your first Dashboards 1-Walk-through ELK SIEM ELK…

Welcome to our third article of this series. I encourage you all to check the first article to have a better understanding of what we are going to discuss here. open Distro available plugins are : Security Alerting SQL Index State Management Performance Analyzer In our project we installed just the security and alerting plugins. 1- Alerting Feature : Open Distro for Elasticsearch allows you…

Welcome to our second article of this series. I encourage you all to check the previous article to have a better understanding of what we are going to discuss here. 1- Installing ELK STACK and configuration 1.1- Introduction to ELK A- What’s ELK? https://www.elastic.co/fr/what-is/elk-stack B- Difference between ELK Basic and ELK Oss? https://www.elastic.co/fr/what-is/open-x-pack 1.2- ELK Installation

In the last couple of years, the number of cyberattacks have gone through the roof. These attacks not only target single individuals but also firms, governments ,critical infrastructure, etc. …