#grayloglabs — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #grayloglabs, aggregated by home.social.
-
💡 As you build out your #security program, you should know some of the more critical #Windows Event IDs to monitor and what they mean. Read on to get a list of critical Event IDs for:
👉 Logon events
👉 Privilege use
👉 Windows Server
👉 Microsoft Defender AntivirusPlus, learn how you can build a single source of log information that enables observability and visibility across your environment. 🙌
https://graylog.org/post/25-linux-logs-to-collect-and-monitor/ #CyberSecurity #SIEM #InfoSec #GraylogLabs
-
Is your financial institution as safe as it could be from #ransomware and other cyber threats? 🤔 Groups like FIN7, Lazarus Group, and Carbanak often specifically target banks with sophisticated attacks, like SWIFT compromises and more. 🏦 💰
But have no fear, Graylog + Model Context Protocol (MCP) are here to help! 🦸💪 Today, Seth Goldhammer is walking you through a real world example where a bank in the north east, with a simple #Anthropic prompt, learned that it needed to understand the threat landscape and map it to their current log sources — to enable threat detection content in their current #Graylog deployment.
See how they mastered the challenge and enabled real-time, context-aware recommendations based on their actual environment, in our latest Graylog Labs article.👇
https://graylog.org/post/how-to-use-mcp-to-optimize-your-graylog-security-detections/
-
Is your financial institution as safe as it could be from #ransomware and other cyber threats? 🤔 Groups like FIN7, Lazarus Group, and Carbanak often specifically target banks with sophisticated attacks, like SWIFT compromises and more. 🏦 💰
But have no fear, Graylog + Model Context Protocol (MCP) are here to help! 🦸💪 Today, Seth Goldhammer is walking you through a real world example where a bank in the north east, with a simple #Anthropic prompt, learned that it needed to understand the threat landscape and map it to their current log sources — to enable threat detection content in their current #Graylog deployment.
See how they mastered the challenge and enabled real-time, context-aware recommendations based on their actual environment, in our latest Graylog Labs article.👇
https://graylog.org/post/how-to-use-mcp-to-optimize-your-graylog-security-detections/
-
Is your financial institution as safe as it could be from #ransomware and other cyber threats? 🤔 Groups like FIN7, Lazarus Group, and Carbanak often specifically target banks with sophisticated attacks, like SWIFT compromises and more. 🏦 💰
But have no fear, Graylog + Model Context Protocol (MCP) are here to help! 🦸💪 Today, Seth Goldhammer is walking you through a real world example where a bank in the north east, with a simple #Anthropic prompt, learned that it needed to understand the threat landscape and map it to their current log sources — to enable threat detection content in their current #Graylog deployment.
See how they mastered the challenge and enabled real-time, context-aware recommendations based on their actual environment, in our latest Graylog Labs article.👇
https://graylog.org/post/how-to-use-mcp-to-optimize-your-graylog-security-detections/
-
Is your financial institution as safe as it could be from #ransomware and other cyber threats? 🤔 Groups like FIN7, Lazarus Group, and Carbanak often specifically target banks with sophisticated attacks, like SWIFT compromises and more. 🏦 💰
But have no fear, Graylog + Model Context Protocol (MCP) are here to help! 🦸💪 Today, Seth Goldhammer is walking you through a real world example where a bank in the north east, with a simple #Anthropic prompt, learned that it needed to understand the threat landscape and map it to their current log sources — to enable threat detection content in their current #Graylog deployment.
See how they mastered the challenge and enabled real-time, context-aware recommendations based on their actual environment, in our latest Graylog Labs article.👇
https://graylog.org/post/how-to-use-mcp-to-optimize-your-graylog-security-detections/
-
Is your financial institution as safe as it could be from #ransomware and other cyber threats? 🤔 Groups like FIN7, Lazarus Group, and Carbanak often specifically target banks with sophisticated attacks, like SWIFT compromises and more. 🏦 💰
But have no fear, Graylog + Model Context Protocol (MCP) are here to help! 🦸💪 Today, Seth Goldhammer is walking you through a real world example where a bank in the north east, with a simple #Anthropic prompt, learned that it needed to understand the threat landscape and map it to their current log sources — to enable threat detection content in their current #Graylog deployment.
See how they mastered the challenge and enabled real-time, context-aware recommendations based on their actual environment, in our latest Graylog Labs article.👇
https://graylog.org/post/how-to-use-mcp-to-optimize-your-graylog-security-detections/
-
Let's take a look back today at #Graylog's first-ever Engineering Hackathon! 👩💻 🎉 In October, we gave our engineers a full week to build whatever they believed would make #Graylog better. This allowed them to step away from their day-to-day work, explore new ideas, experiment with technologies, and more.
Some highlights included:
🌎 Watching new collaborations take place across our teams & different continents
💻 A project built primarily via vibe coding
🛠️ The project "Portal Gun" team turning a 10-year old POC into a dynamic, usable UI element that you can try out in Graylog 7.1 Alpha 1Read all about it, in our latest blog by Dev Team Engineering Directors Rob Curtis and Martina Kohn!👇
https://graylog.org/post/the-first-graylog-engineering-hackathon/ #Hackathon #CyberSecurity #Devs #GraylogLabs
-
💡It's time to learn about some features and fixes that will make your daily work in #Graylog smoother. 👍 In our most recent blog by the Graylog Development Team, we're highlighting a minor but functional enhancement — Graylog time-range stepping.
To fix manual time-range adjustment limitations we now have two new time range navigation buttons that let you step forward and backward through your logs, one time range at a time. ⬅️ ➡️ Learn more about this feature here: https://graylog.org/post/sliding-through-log-time-space/
📻 And, stay tuned for more in this series from Konrad Merz and the rest of the Graylog Development Team! #CyberSecurity #SIEM #APISecurity #GraylogLabs
-
It's time to tune in for the latest from #GraylogLabs! 📺 🎊 Today we're taking about the new Caddy Webserver Content Pack. Say what? No, not #Caddyshack! ⛳ 🦫 Caddy Webserver! 🖥️
This new content pack is going to help you quickly turn raw logs into structured, searchable insights. 🔎💡 🙌 It's available in Illuminate 6.4 and a Graylog Enterprise or Graylog #Security license, and delivers ready-to-use parsing rules, streams, and dashboards. 🚚
Read up on:
❓ What this pack does
🪵 Getting logs into #Graylog
🫵 Why you should log Caddy Webserver logs
🔍 How this helps you quickly detect anomalies, identify suspicious requests, and feed relevant data directly into your #TDIR workflowshttps://graylog.org/post/caddy-webserver-data-in-graylog/ #cybersecurity #threatdetection #incidentresponse #SIEM
-
Internet speed got you down? 💻 😵 See how #Graylog Professional Services Engineer, Dan McDowell, took his Internet speed challenges into his own hands! 🙌 👍
Using data he gathered by running a script every 30 minutes over a few weeks time, he was able to prove that the issue wasn’t with his router but that something was actually wrong on the ISP's end. 👀 See step-by-step how Dan fixed this challenge (and how you can, too)!
-
Getting your data from GitLab’s audit logs into #Graylog for centralized analysis is easier than you might think! 🤔 😃 Take a look at this two-part guide to learn how. 👁️ 👇
This guide covers:
👉 Prerequisites for setting up the raw HTTP input for GitLab
👉 Configuring GitLab to stream logs
👉 Configuring the raw HTTP input
👉 Requirements for enriching GitLab logs with Illuminate
👉 Setup Instructions
And more...Ready to centralize GitLab Logs? Check out the guide to get started with wiring up GitLab’s Audit Event Streaming, and you'll be on your way to visualizing enriched events in a purpose-built dashboard! Let's go...
https://graylog.org/post/bringing-gitlab-logs-into-focus-with-graylog/ #cybersecurity #logmanagement #loganalysis #GraylogLabs
-
Getting your data from GitLab’s audit logs into #Graylog for centralized analysis is easier than you might think! 🤔 😃 Take a look at this two-part guide to learn how. 👁️ 👇
This guide covers:
👉 Prerequisites for setting up the raw HTTP input for GitLab
👉 Configuring GitLab to stream logs
👉 Configuring the raw HTTP input
👉 Requirements for enriching GitLab logs with Illuminate
👉 Setup Instructions
And more...Ready to centralize GitLab Logs? Check out the guide to get started with wiring up GitLab’s Audit Event Streaming, and you'll be on your way to visualizing enriched events in a purpose-built dashboard! Let's go...
https://graylog.org/post/bringing-gitlab-logs-into-focus-with-graylog/ #cybersecurity #logmanagement #loganalysis #GraylogLabs
-
Getting your data from GitLab’s audit logs into #Graylog for centralized analysis is easier than you might think! 🤔 😃 Take a look at this two-part guide to learn how. 👁️ 👇
This guide covers:
👉 Prerequisites for setting up the raw HTTP input for GitLab
👉 Configuring GitLab to stream logs
👉 Configuring the raw HTTP input
👉 Requirements for enriching GitLab logs with Illuminate
👉 Setup Instructions
And more...Ready to centralize GitLab Logs? Check out the guide to get started with wiring up GitLab’s Audit Event Streaming, and you'll be on your way to visualizing enriched events in a purpose-built dashboard! Let's go...
https://graylog.org/post/bringing-gitlab-logs-into-focus-with-graylog/ #cybersecurity #logmanagement #loganalysis #GraylogLabs
-
Getting your data from GitLab’s audit logs into #Graylog for centralized analysis is easier than you might think! 🤔 😃 Take a look at this two-part guide to learn how. 👁️ 👇
This guide covers:
👉 Prerequisites for setting up the raw HTTP input for GitLab
👉 Configuring GitLab to stream logs
👉 Configuring the raw HTTP input
👉 Requirements for enriching GitLab logs with Illuminate
👉 Setup Instructions
And more...Ready to centralize GitLab Logs? Check out the guide to get started with wiring up GitLab’s Audit Event Streaming, and you'll be on your way to visualizing enriched events in a purpose-built dashboard! Let's go...
https://graylog.org/post/bringing-gitlab-logs-into-focus-with-graylog/ #cybersecurity #logmanagement #loganalysis #GraylogLabs
-
Getting your data from GitLab’s audit logs into #Graylog for centralized analysis is easier than you might think! 🤔 😃 Take a look at this two-part guide to learn how. 👁️ 👇
This guide covers:
👉 Prerequisites for setting up the raw HTTP input for GitLab
👉 Configuring GitLab to stream logs
👉 Configuring the raw HTTP input
👉 Requirements for enriching GitLab logs with Illuminate
👉 Setup Instructions
And more...Ready to centralize GitLab Logs? Check out the guide to get started with wiring up GitLab’s Audit Event Streaming, and you'll be on your way to visualizing enriched events in a purpose-built dashboard! Let's go...
https://graylog.org/post/bringing-gitlab-logs-into-focus-with-graylog/ #cybersecurity #logmanagement #loganalysis #GraylogLabs
-
Hot off the press, and just in time for your leisurely weekend reading we have our latest #GraylogLabs post! 🕺 🎉 So let's dive in and discuss regex patterns. Regex is a well-known syntax across various programming languages and having an understanding of what it is and how to use it can help you be more efficient when trying to match patterns or manipulate strings of #data.
Learn about:
🤔 What regex means
❓ What a regex function is used for
🖊️ Writing a regular expression
✔️ Using regular expressions
💪 Getting the most from your logshttps://graylog.org/post/getting-ready-with-regex-101/ #loganalysis #cybersecurity #infosec
-
Hot off the press, and just in time for your leisurely weekend reading we have our latest #GraylogLabs post! 🕺 🎉 So let's dive in and discuss regex patterns. Regex is a well-known syntax across various programming languages and having an understanding of what it is and how to use it can help you be more efficient when trying to match patterns or manipulate strings of #data.
Learn about:
🤔 What regex means
❓ What a regex function is used for
🖊️ Writing a regular expression
✔️ Using regular expressions
💪 Getting the most from your logshttps://graylog.org/post/getting-ready-with-regex-101/ #loganalysis #cybersecurity #infosec
-
Hot off the press, and just in time for your leisurely weekend reading we have our latest #GraylogLabs post! 🕺 🎉 So let's dive in and discuss regex patterns. Regex is a well-known syntax across various programming languages and having an understanding of what it is and how to use it can help you be more efficient when trying to match patterns or manipulate strings of #data.
Learn about:
🤔 What regex means
❓ What a regex function is used for
🖊️ Writing a regular expression
✔️ Using regular expressions
💪 Getting the most from your logshttps://graylog.org/post/getting-ready-with-regex-101/ #loganalysis #cybersecurity #infosec
-
Hot off the press, and just in time for your leisurely weekend reading we have our latest #GraylogLabs post! 🕺 🎉 So let's dive in and discuss regex patterns. Regex is a well-known syntax across various programming languages and having an understanding of what it is and how to use it can help you be more efficient when trying to match patterns or manipulate strings of #data.
Learn about:
🤔 What regex means
❓ What a regex function is used for
🖊️ Writing a regular expression
✔️ Using regular expressions
💪 Getting the most from your logshttps://graylog.org/post/getting-ready-with-regex-101/ #loganalysis #cybersecurity #infosec
-
Hot off the press, and just in time for your leisurely weekend reading we have our latest #GraylogLabs post! 🕺 🎉 So let's dive in and discuss regex patterns. Regex is a well-known syntax across various programming languages and having an understanding of what it is and how to use it can help you be more efficient when trying to match patterns or manipulate strings of #data.
Learn about:
🤔 What regex means
❓ What a regex function is used for
🖊️ Writing a regular expression
✔️ Using regular expressions
💪 Getting the most from your logshttps://graylog.org/post/getting-ready-with-regex-101/ #loganalysis #cybersecurity #infosec
-
Out now! 👉 Our latest #GraylogLabs post on the exploitation of the SharePoint RCE. CVE-2025-53770 and CVE-2025-53771 are critical remote code execution vulnerabilities (CVSS base score 9.8) impacting #Microsoft #SharePoint. In this blog, we simulate the exploitation of this SharePoint RCE vulnerability and analyze the resulting telemetry inside #Graylog. 📊
Read an overview on this attack, follow along as we emulate the adversary SharePoint RCE, explain the requirements to detect this exploit, review indicators, and more. Plus, learn about actionable threat hunting and detection strategies.👇
https://graylog.org/post/adversary-tradecraft-exploitation-of-the-sharepoint-rce/ #SharePointRCE #CVE #cybersecurity #CVE202553770 #CVE202553771
-
Do you know the clues to look for? 🔍 When threat actors gain unauthorized access to systems, networks, or devices, they leave behind clues. And your #security team needs to be able to find them to mitigate risk.🕵 Indicators of compromise (IOCs) can be network-based, host-based, email-based, behavioral, or third-party. 🤔
Learn more about IOCs, plus check out this handy list of 17 common IOCs to look out for! 👀👇
https://graylog.org/post/17-common-indicators-of-compromise/?utm_content=337930088&utm_medium=social&utm_source=linkedin&hss_channel=lcp-2783090 #GraylogLabs #cybersecurity #threatactors
-
Knowing the most common indicators of compromise (IoCs) can improve your key threat detection and response (TDIR) metrics. 👍 And, if you are keeping an eye out for common IOCs, then you're able to take a more proactive approach to #security. So, let's dig in and learn all about IOCs! 🙌
IoCs fall into the following categories:
🔹 Network-based
🔹 Host-based
🔹 Email-based
🔹 Behavioral
🔹 Third-partyIn this blog we outline 17 common indicators of compromise, including:
🚦 Network traffic anomalies
💻 Unusual sign-in attempts
🗺️ Geographical anomalies
⚠️ Privilege account irregularities
🔄 Changes to systems configurations
🖥️ Unexpected software installations or updates
📂 Numerous requests for the same file
🫴 Unusual Domain Name Systems (DNS) requests
📖 Swells in database read volume
❗ HTML response sizes
🚥 Mismatched port-application traffic
🤔 Suspicious registry or system file changes
📧 Influx of spam emails
⬅️ Moved or aggregated data
🤖 Non-human website traffic
📱 Changes to mobile devices
🚫 System outages or reduced performanceRead on and learn about the details for each of these 17 common IoCs—so that you can be ready to search your environment for clues that will help you confirm security incidents and/or data breaches.
https://graylog.org/post/17-common-indicators-of-compromise/ #threatdetection #incidentresponse #cybersecurity #GraylogLabs
-
Need help installing #NGINX? If so, then you need, "Load Balancing Graylog with Nginx: The Ultimate Guide". 📙 👍 Ensure that your #Graylog is at peak performance with Nginx load balancing capability! Get the guide to learn about:
🤝 How Nginx and Graylog go together
⚖️ Load balancing a sample configuration
💻 Installing Nginx
🔄 Changes to an Nginx configuration
✅ Enabling HTTPS for Nginx
➡️ Load balancing Graylog Inputs
🪂 Diving deeper Into Nginx
...and more.https://graylog.org/post/load-balancing-graylog-with-nginx-ultimate-guide/ #cybersecurity #infosec #GraylogLabs @nginx
-
⚠️ CVE-2025-24813 is a critical vulnerability (CVSS base score of 9.8) affecting Apache Tomcat — a widely used open-source web server and servlet container. Learn how to detect exploits/attacks that target this vulnerability, using #Graylog.💡
Read on to see:
😈 How to emulate the adversary
🏃♂️ How to run the exploit
📋 Steps for a real attack
📄 A summary of local exploit steps
🔎 Detections & indicators
And more.https://graylog.org/post/exploit-rce-in-apache-tomcat/ #cyberthreat #cybersecurity #GraylogLabs #ApacheTomcat #CVE202524813
-
You might know #Graylog as a #SIEM, but did you know that it can also be a fun tool for creative, low-cost experiments in a home lab? 🏠 🖥️ 👀 Jeff Darrington recently created a DIY temperature and humidity monitor using an ESP-WROOM-32 development board and a DHT22 sensor. 🌡️
Follow along as Jeff creates a lightweight #API endpoint on the ESP32, polls it regularly using Graylog’s HTTP API input, and visualizes the results in a live dashboard. 📊 🎉
Have you tried anything fun and creative lately with Graylog? Tell us about it! 👇
https://graylog.org/post/iot-sensor-lab-guide/ #GraylogLabs #logmanagement
-
#APIs act as digital portals that allow data to travel between applications. 🕳️ However, as sensitive data moves from one application to another, each API becomes a potential access point that threat actors can exploit. 😬
🔒 Securing APIs is critical to any company's data protection program, and knowing the OWASP API security top 10 will help! 🔟 🙌
Read on an learn about:
❓ Who OWASP is
⚠️ The 10 most critical API security risks based on several data points
🔓 The OWASP top 10 API security riskshttps://graylog.org/post/an-introduction-to-the-owasp-api-security-top-10/ #cybersecurity #infosec #APIsecurity #GraylogLabs
-
☠️ ⛓️💥 In a novel attack chain, the threat group #MustangPanda has been combining legitimate components with malicious payloads to reduce likelihood of detection. 😨 Needless to say, it's important for #security teams to know how to spot Mustang Panda’s use of MAVInject in campaigns. 🔍
Follow along in our latest #GraylogLabs article as we emulate an infection chain and analyze the activity it produces in #Graylog. 👁️🗨️ We'll walk you through:
⚔️ An attack overview
🗝️ The key elements
😬 Persistence
🦹 Emulating the Adversary
🔍 Detections
💡 IndicatorsRead on to also learn threat hunting and detection approaches that you can apply in your own environments! 🙌 👇
https://graylog.org/post/adversary-tradecraft-emulating-mustang-pandas-use-of-mavinject-in-recent-campaigns/ #threathunting #cybersecurity #infosec
-
Getting log files into #Graylog is easy. 👍 However, it can be a challenge to set up parsing rules for your logs. 😓 What should you do when you have a log source that does not fall neatly into one of the parsed out-of-the-box categories in Graylog? Read on to find out, in this #GraylogLabs post by Tully Elliston. 👀
Parsing logs is hard, but you don't have to go it alone. This documentation will help. 😌 🙌
https://graylog.org/post/graylog-parsing-rules-and-ai-oh-my/ #logmanagement #SIEM #cybersecurity
-
The #Andariel threat group, a DPRK state-sponsored APT active for over a decade, has been leveraging RID hijacking and user account concealment techniques in its operations to stealthily maintain privileged access to compromised Windows systems. 😱
Learn (hands-on!) how RID hijacking and hidden backdoor accounts work in Andariel’s attack chain, and how you can detect and analyze similar activity in your organization’s network. 🔍 👀
https://graylog.org/post/adversary-tradecraft-a-deep-dive-into-rid-hijacking-and-hidden-users/ #security #cybersecurity #GraylogLabs
-
🔐 Data privacy is important! And, many orgs who use #Graylog are logging sensitive data that may contain personally identifiable information (#PII), health related data, or financial data. 😰 To ensure compliance with various data privacy laws, this info must be redacted or hidden from many of the end users.
So, let's take a look at a simple way to process pipelines and scrub PII from a log message so that it's only visible to an elevated Graylog user account. 👁️ 👍
https://graylog.org/post/redacting-message-fields-for-privacy-purposes/ #dataprivacy #cybersecurity #grayloglabs
-
⌚ Got some extra time on your hands this week? Could be a great time to take a look at this ultimate guide on load balancing #Graylog with NGINX! 🤔 Learn how to integrate NGINX with Graylog, from basic setups to sample configurations.
Imagine your Graylog, already proficient at managing vast log data, now enhanced with the NGINX load balancing capability to ensure peak performance.✨ So, what are you waiting for? Let's get started.👇
https://graylog.org/post/load-balancing-graylog-with-nginx-ultimate-guide/ #cybersecurity #logdata #logmanagement #GraylogLabs
-
As an admin or a tech-savvy user, you know the importance of protecting your Graylog server and the logs it manages from unauthorized access. 🚫 Enter... TLS — a robust security protocol that can encrypt the communication between your Graylog server and its clients. 🔒
Join #Graylog's Drew Miranda as he walks you through implementing TLS on your Graylog server, ensuring that your sensitive data is safeguarded from potential eavesdropping or tampering. 🙌
https://graylog.org/post/how-to-guide-securing-graylog-with-tls-2/ #cybersecurity #infosec #grayloglabs
-
The Microsoft ecosystem provides businesses with nearly every kind of technology necessary. But, attackers are just as invested in the Microsoft ecosystem, as they are in any other system. ⚠️ Microsoft offers various security technologies for detecting and mitigating risks, but you need to know what matters most. 🤔 As you build out your #security program, it's good to know about some of the more critical Windows Event IDs to monitor and what they mean.💡
https://graylog.org/post/critical-windows-event-ids-to-monitor/ #cybersecurity #SIEM #GraylogLabs
-
Graylogger Drew Miranda is here to talk to you about why it's important to have accurate log message timestamps, the problems that incorrect timestamps can create, and several common causes of log message timestamp issues. 🕗 🤔
Read Drew's #GraylogLabs article to learn about:
🕐 Time zones and #Graylog
🕑 Configuring the timezones of log sources
🕒 The timezone of the Linux Operating System where Graylog is receiving log messages
🕓 Configuring the display timezone for Graylog users
🕔 Timestamps that are in the past
🕕 Timestamps that are correct but the wrong time is shown in Graylog
🕖 And more...https://graylog.org/post/time-zones-a-loggers-worst-nightmare/ #cybersecurity #SIEM #logmanagement
-
As you build out your #security program, it's important to know about some of the more critical #Windows Event IDs to monitor and what they mean. 🤔
This #GraylogLabs post covers:
✔ Logon events
✔ Privilege use
✔ Windows Server
✔ Microsoft Defender AntivirusRead on to learn how you can build a single source of log information that enables observability and visibility across a complex environment.👇
https://graylog.org/post/critical-windows-event-ids-to-monitor/ #cybersecurity #SIEM
-
Did you know that you can enhance your #Graylog with the #NGINX load balancing capability, to ensure peak performance? ⛰💯 NGINX will ensure that your Graylog cluster isn’t over-taxed, kind of like a well-organized team in which work is evenly distributed. 🙌
Check out "The Ultimate Guide to Load Balancing Graylog with NGINX" and get help with integrating NGINX with Graylog—from basic setups to sample configurations. This is the go-to manual for scalable log management and SIEM with Graylog. 👍
👋 Welcome to the next level of log management and #SIEM!
https://graylog.org/post/load-balancing-graylog-with-nginx-ultimate-guide/ @nginx #GraylogLabs #logmanagement -
Some of the most important events you should be monitoring on your network are failed and successful logon events. 🤔 Not only should you monitor these events across your network, but you should also be normalizing this data so that you can correlate events between platforms.💡
In this #GraylogLabs article you can learn about:
1️⃣ Auditing all of your login events to Microsoft SQL Servers
2️⃣ Sending these messages to Graylog
3️⃣ Normalizing and enriching your messages so that you can use them inside your existing #Graylog illuminate content (like dashboards and alerts)
https://graylog.org/post/monitoring-microsoft-sql-server-login-audit-events-in-graylog/ #cybersecurity #cybersec -
⚠ Caution! Your "200 OK" is not always OK! 🤔😧 Mmmm, say what??? 👀
Let us explain... While the HTTP status code 200 OK is generally associated with successful #API calls, there’s a dark side to its seemingly harmless appearance that often goes unnoticed. 🕶
So, let's talk about the vulnerabilities that can emerge when the 200 OK web response reveals more information than intended and why hackers exploit this to their advantage.🔓
Read this #GraylogLabs post and dig into these issues:
⚠ Data leakage is not OK
⚠ ERROR handling exceptions
⚠ Response is not JSON compliant
⚠ Why the need for robust #cybersecurity practices is more critical than everUnderstanding the nuances of seemingly innocuous elements, such as HTTP status codes, can make all the difference in fortifying your defenses against malicious actors. Learn more.👇
https://graylog.org/post/when-200-ok-is-not/ #APIs #APIsecurity #threatactors #cybercrime
-
Lions, and tigers, and... #AI? Oh my?! 🦁 / 🐯 / ✖🐻 ✔🤖
In the log aggregation game, the biggest difficulty you face could be setting up parsing rules for your logs. 😓 In other words, getting log files into #Graylog is easy, but what about when you have a log source that does not neatly fall into one of the parsed out-of-the-box categories? 🤔 It is a common joke in the field that as technology gets better, parsing data that can be given in a wide array of different formats — in particular, timestamps — remains very challenging. 🤣 🙁But, not to worry, friends! We've got just the thing to help you. This #GraylogLabs guide provides useful, quick examples and links to the primary methods of parsing logs. Take a look.
👀 👉 https://graylog.org/post/graylog-parsing-rules-and-ai-oh-my/ #logmanagement #logs #logstash
-
⌚ Got some extra time on your hands this week? Could be a great time to take a look at this ultimate guide on load balancing #Graylog with NGINX! 🤔 Learn how to integrate NGINX with Graylog, from basic setups to sample configurations.
Imagine your Graylog, already proficient at managing vast log data, now enhanced with the NGINX load balancing capability to ensure peak performance.✨ So, what are you waiting for? Let's get started.👇
https://graylog.org/post/load-balancing-graylog-with-nginx-ultimate-guide/ #cybersecurity #logdata #logmanagement #GraylogLabs
-
⌚ Got some extra time on your hands this week? Could be a great time to take a look at this ultimate guide on load balancing #Graylog with NGINX! 🤔 Learn how to integrate NGINX with Graylog, from basic setups to sample configurations.
Imagine your Graylog, already proficient at managing vast log data, now enhanced with the NGINX load balancing capability to ensure peak performance.✨ So, what are you waiting for? Let's get started.👇
https://graylog.org/post/load-balancing-graylog-with-nginx-ultimate-guide/ #cybersecurity #logdata #logmanagement #GraylogLabs
-
⌚ Got some extra time on your hands this week? Could be a great time to take a look at this ultimate guide on load balancing #Graylog with NGINX! 🤔 Learn how to integrate NGINX with Graylog, from basic setups to sample configurations.
Imagine your Graylog, already proficient at managing vast log data, now enhanced with the NGINX load balancing capability to ensure peak performance.✨ So, what are you waiting for? Let's get started.👇
https://graylog.org/post/load-balancing-graylog-with-nginx-ultimate-guide/ #cybersecurity #logdata #logmanagement #GraylogLabs
-
⌚ Got some extra time on your hands this week? Could be a great time to take a look at this ultimate guide on load balancing #Graylog with NGINX! 🤔 Learn how to integrate NGINX with Graylog, from basic setups to sample configurations.
Imagine your Graylog, already proficient at managing vast log data, now enhanced with the NGINX load balancing capability to ensure peak performance.✨ So, what are you waiting for? Let's get started.👇
https://graylog.org/post/load-balancing-graylog-with-nginx-ultimate-guide/ #cybersecurity #logdata #logmanagement #GraylogLabs