Siem

What Are Logs? Logs, in essence, are files that document specific events, time of occurrence, location of occurrence, and other information related to the incident, depending on the parameters configured. These are absolutely crucial when it comes to security and troubleshooting- whether we are looking at past logs to determine…

To identify suspicious network activity, threat hunters traditionally employ highly specialized tools and solutions. These solutions can be broken into three main areas which correlate with the stage of the threat hunting process. Initially, threat hunters would start by initiating security data collection and network monitoring technologies, querying, and analyzing…

You can configure the system time manually in QRadar by two ways. Through GUI Console Through CLI mode Through GUI Console > Navigate to System and License Management icon in the Admin Tab. > In the Display list, select Systems. > Double click on the component (example : console) where…

With the increase in popularity and adoption of cloud platforms comes an increased NEED for being able to monitor these environments for abnormal, dangerous, or suspicious changes and activity. …

Herkese merhaba, Bu yazımda windows bir cihaz üzerine kurmuş olduğum Splunk Forwarder yardımı ile log üreterek log analizi yapacağız. …

Wandering around Gartner Summit last week I was surprised how much I was seeing the term “autonomous’’ making its way into vendor marketing. …

My good friend and colleague Sanjay Chaudhary and I were among the team representing Exabeam at the Gartner Security & Risk Summit 2022 in National Harbor, MD. We realize that not everyone had an opportunity to participate, so we thought we would share our notes with those who missed the…

Table of Contents Preface Searching Formatting Commands Time Zones Debrief