#elastic-security

Building a custom integration in Elastic

As the documentation from Elastic doesn’t provide the steps for ingesting data through custom integration from a Fleet-managed Elastic…

Secure Solr admin interface on Tomcat

Sorl admin interface is powerful tool to manage cores, debugging and lot of other stuff. At same time this can be very dangerous tool…

From Data to Decisions: How Elastic Security Turns Events into Alerts, Visualizations, and…

Bridging the Gap Between Raw Events and Security Insight

Basics & Advanced Elasticsearch Security Solution Tips. Part 1

Elasticsearch features a security solution that allows you to create detection rules, view alerts, manage cases, and more. In this…

Singularity Rootkit: How a Linux Kernel Backdoor Evaded Elastic Security

Recent security research by MatheuZ (MatheuZSecurity) has revealed a highly engineered Linux rootkit capable of evading Elastic Security’s…

Elastic Security Sandbox Installation & Usage — Chapter 2: Dynamic Malware Analysis with ELK…

Introduction

Elastic Cloud S.I.E.M Lab | Deployment and Configuration Guide

Platform: Elastic Cloud Skills Demonstrated: Configuration Management, System Administration Tools: Powershell

فني كهربائي منارل العديلية

An Introduction to SOC with Elastic: Building a Smarter, Scalable Security Operations Center

Introduction: Building a Smarter SOC with Elastic

Prevention is Ideal, but Detection is a Must: A Deep Dive into Elastic Defend

“Prevention is ideal, but detection is a must.” This mantra is echoed by security professionals for good reason. In today’s ever-evolving…

Elastic Security Rules with Custom Windows Logs: Using xml2evtx and Winlogbeat

Build and test Elastic Security rules with tools like xml2evtx and Winlogbeat

Elastic Security interrompe ataques à memória e ao kernel na 5ª rodada das avaliações MITRE…

A solução de segurança da Elastic identificou e interrompeu com sucesso ataques baseados em memória durante as avaliações anuais do MITRE…

Guia de Estudos Elastic Security

Fala pessoal, tudo bem?! Neste post, estarei disponibilizando um guia de estudos na Stack Elastic Security. São vídeos, artigos, documentos…