Recently Updated Pages
CyTech AQUILA - Cloud Security Posture Management (CSPM)
Overview: CSPM helps secure your cloud infrastructure by discovering and evaluating cloud servic...
Deploy Software via Group Policy (GPO) (incomplete)
Introduction Deploy Software via Group Policy (GPO) is a method used in Windows Active Directory...
EDR Remote Execution - Using Respond Console Manual
Research on Elastic EDR Response Actions for: Forensic commands for malware investigation on i...
FortiGate Firewall - Syslog Configuration for Log Integration & Security Configuration Recommendations Introduction
Introduction The FortiGate integration enables to monitor your Fortinet FortiGate firewall for s...
NG SIEM - Apache Tomcat
Log Collector - File Access Permissions
Windows File Access Permission Issues Common issues on Windows stem from strict file locking, UA...
Log Collector - Check OS Version
Windows OS Version Compatibility Issues Elastic Agent supports Windows Server versions (e.g., 20...
Log Collector - Network Connection
Windows Network Connection Issues On Windows, network problems frequently involve firewall rules...
Endpoint Detection and Response (EDR) - Manual Installation (OLD)
Endpoint Detection and Response (EDR) Endpoint Detection and Response (EDR), is a cybersecurity ...
NG SIEM - Salesforce Integration via JWT Authentication
Introduction The Salesforce integration enables you to monitor your Salesforce instance. Salesfo...
NG SIEM - Mimecast Integration
Introduction The Mimecast integration collects events from the Mimecast API. Agentless integrat...
NG SIEM - Microsoft 365 Integration
Overview This integration with Microsoft Office 365 supports the ingestion of user, administrato...
NG SIEM - GoogleWorkspace Integration
Introduction The Google Workspace integration collects and parses data from various Google Works...
NG SIEM - GCP CSPM Integration
The Google Cloud integration collects and parses Google Cloud Audit Logs, VPC Flow Logs, Firewall...
NG SIEM - Atlassian Jira Integration
What are API Token Scopes? Scopes define what actions an API token is allowed to perform in Atla...
NG SIEM - Atlassian Confluence Integration
What are API Token Scopes? Scopes define what actions an API token is allowed to perform in Atla...
NG SIEM - CISCO Meraki Integration
Cisco Meraki provides a centralized cloud management platform for devices like MX Security Applia...
CyberArk PAM
Configure the Vault to Forward syslog Messages to PTA The system logger of the Vault must be con...
AQUILA - Host Isolation
Overview Host Isolation Exception allows isolated endpoints to maintain connectivity to specific...
AQUILA - Host Isolation Exception
Overview Host isolation exceptions (also called endpoint isolation exclusions) are configurable ...