DShield SIEM Docker Updates, (Thu, Feb 13th)
ID: 0d882d0f-9498-58e4-a0e1-0dacf263a905
STIX ID: report--0d882d0f-9498-58e4-a0e1-0dacf263a905
Feed Name: SANS ISC Diary
This post summarizes recent enhancements to the DShield SIEM: upgrade to Elastic 8.17.2, Dockerized Filebeat/Metricbeat for Zeek, NetFlow, and Cowrie log ingestion, integration of ISC/Rosti threat intel feeds, improved dashboards with linked queries, Logstash pipeline parsing, ELK stack and Beats monitoring, testing in a Proxmox LXC container, and streamlined installation/troubleshooting steps, with references to GitHub resources.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.