Webcast: Let’s Talk About ELK Baby, Let’s Talk About You and AD

This webcast summary from Black Hills Information Security outlines guidance for improving detection and logging on Windows environments, demonstrating Sysmon, ELK (with ElastAlert), Windows Event Forwarding/Winlogbeat, and the Atomic Red Team framework. It provides timestamps and links to slides for a demo-driven presentation that emphasizes AD best practices, endpoint optics, and using open-source tools to reduce time-to-detection and refine alerting.