siem

python security elasticsearch elk siem elk-stack

security elasticsearch kibana logstash monitoring siem elastic red-teaming

security graylog wifi infosec siem monitor-mode wids wifi-adapters wifi-ids management-frames

azure detection logging cybersecurity sysmon threat-hunting siem security-tools blue-team mitre-attack workbooks sysmon-config terraform-azure kql azure-sentinel

windows event-log siem

security json json-api awesome-list siem

security network-forensics incident-response actor-model bitmap-index siem soc threathunting

security monitor log analysis red blue scan threat forensics response purple baseline threat-hunting hunt recon team siem soc incident triage

security elasticsearch logstash elk lookup siem ossim ossim-style-correlation

dfir threat-hunting siem mitre-attack threat-detection

security log syslog ids siem nsm ips log-monitoring

powershell dfir sysmon siem hacktoberfest blueteam redteam mitre-attack

command-line executable siem exe ssdeep soar lolbins

security monitor log analysis red blue scan threat forensics response purple baseline threat-hunting hunt recon team siem soc incident triage

azure dfir siem pentest purpleteam azure-lab dfir-automation

react nodejs flask security elasticsearch machine-learning spark analytics tensorflow sklearn elk datascience cybersecurity siem information-security uba anomaly-detection user-behaviour ueba threathunting

rules splunk threat-hunting siem spl use-case

security ansible splunk malware elk siem cuckoo use-case

security security-audit log-analysis log syslog web-application log-collector forensics secops siem log-management risk-assessment log-parser vulnerability-management risk-management security-tools log-monitoring security-analysis asset-management security-awareness

aws security incident-response elk intrusion-detection pci-dss compliance siem osquery fim secdevops wazuh

security cloud big-data siem metron

logstash parsing logs siem

security azure threat-hunting siem loganalytics blueteaming azure-data-explorer kql azure-sentinel

security malware cybersecurity siem threatintel

siem stix taxii sigma

api docker security docker-compose splunk grafana prometheus kong siem security-tools konga

subscription event siem domain-controller audit-event event-forwarding wec wef