Forum
Sign in
Top Newest All time
31
▲
My log timestamps are hours off and correlation is impossible
9 points by mcaptain 2 months ago · 2 answers
32
▲
Sensible brute force threshold before alerting?
7 points by hgunter 2 months ago · 2 answers
33
▲
Sophos XG wireless protection logs, thousands a day, any value?
6 points by a8hda 2 months ago · 1 answer
34
▲
What does srccountry="Reserved" mean in a FortiGate log?
7 points by indyp 2 months ago · 2 answers
35
▲
Best way to handle logs from client sites you do not control?
4 points by cclondon 1 month ago · answer
36
▲
OSSEC or Wazuh?
8 points by notthebear 2 months ago · 2 answers
37
▲
Implementing SIEM for my small size company
9 points by a8hda 3 months ago · 5 answers
38
▲
How do I prove a log was not tampered with, months later?
5 points by a8hda 2 months ago · 1 answer
39
▲
Finding Hidden Internal Apps Through Public Certificate Logs (naveensrinivasan.com)
4 points by dcid (Daniel) 1 month ago · answer
40
▲
Getting a lot of 4771 Kerberos pre-authentication failed, should I worry?
3 points by a8hda 1 month ago · answer
41
▲
Syslog over UDP dropping messages, how do I tell how many?
6 points by theod 2 months ago · 2 answers
42
▲
What does a good log review actually look like on paper?
3 points by gerald (Gerald) 1 month ago · answer
43
▲
logrotate ran and now I have a gap. what did i do wrong
2 points by shadepl 1 month ago · answer
44
▲
SIEM Solution Recommendations
6 points by a8hda 2 months ago · 2 answers
45
▲
How to select right SIEM Tool?
5 points by damf 2 months ago · 1 answer
46
▲
Anyone actually reading their logs daily, or is it all alerts?
3 points by mbxsec 1 month ago · 1 answer
47
▲
Tailscale found a 16yo bug in SQLite which was the cause of its outages. (tailscale.com)
3 points by dcid (Daniel) 2 months ago · answer
48
▲
What is the most used SIEM?
4 points by nuband 3 months ago · 3 answers
49
▲
sshd is logging the key fingerprint but not which user it belongs to
2 points by shadepl 1 month ago · answer
50
▲
How We Hacked Thousands of Data Centers in Minutes Using a 20-Year-Old Vulnerability (lavahq.io)
2 points by dcid (Daniel) 1 month ago · answer
51
▲
We are looking for a SIEM Solution. Any recommendations?
3 points by timth 2 months ago · 2 answers
52
▲
CISA advisories page, worth having in your feed reader (cisa.gov)
1 point by shadepl 1 month ago · answer
Guidelines Newest Search Back to Trunc