logo

DShield SIEM Docker Updates, (Wed, Sep 10th)

ID: 3d7f1f4c-1827-50b8-8b90-0183389171b4

STIX ID: report--3d7f1f4c-1827-50b8-8b90-0183389171b4

Feed Name: SANS ISC Diary

Date Published: 2025-09-11

Date Updated: 2026-04-19

...
...

This update outlines enhancements to the DShield SIEM and web honeypot ecosystem, including Elastic 8.19.3 upgrades, HTTPS-only Kibana access, refreshed web honeypot parsing and dashboards, Metricbeat monitoring, new threat intel feeds and ISC web activity rules, and the addition of CyberChef and MITRE ATT&CK Navigator to the analysis toolkit; it also provides docker upgrade commands, instructions to load new Kibana templates, and links to troubleshooting and related resources.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.