security-information-and-event-management

A collection of free shareable log samples from various systems with evidence of compromise and malicious activity, maintained by Dr. Anton Chuvakin.

Event Query Language (EQL)

0 (0)

Browse a library of EQL analytics now natively integrated in Elasticsearch.

IBM QRadar

0 (0)

IBM QRadar is a SIEM solution for real-time threat detection.

Microsoft Sentinel Ninja Training

0 (0)

Level 400 training to become a Microsoft Sentinel Ninja.

RedELK

0 (0)

RedELK enhances Red Team operations with SIEM capabilities to monitor and alert on Blue Team activities.

Open Source Security Events Metadata (OSSEM)

0 (0)

A community-led project focused on standardizing security event logs.

Graylog

0 (0)

Graylog offers advanced log management and SIEM capabilities to enhance security and compliance across various industries.