#log-analysis — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #log-analysis, aggregated by home.social.
-
LogoRRR's detached windows feature lets you place log views freely on your screen. Window positions are remembered, so your incident cockpit comes back the way you left it.
https://apps.apple.com/app/logorrr/id1583786769?mt=12
#IncidentResponse #LogAnalysis #DevOps
Feature video: https://www.youtube.com/watch?v=jfnMrNHCgL0&t=35s
-
LogoRRR's detached windows feature lets you place log views freely on your screen. Window positions are remembered, so your incident cockpit comes back the way you left it.
https://apps.apple.com/app/logorrr/id1583786769?mt=12
#IncidentResponse #LogAnalysis #DevOps
Feature video: https://www.youtube.com/watch?v=jfnMrNHCgL0&t=35s
-
LogoRRR Pro uses the Mac App Store ecosystem - purchase is safe and easy, restore is built in, and log analysis stays local.
https://www.logorrr.app/posts/mac-app-store-freemium/
-
LogoRRR Pro uses the Mac App Store ecosystem - purchase is safe and easy, restore is built in, and log analysis stays local.
https://www.logorrr.app/posts/mac-app-store-freemium/
-
LogoRRR can open huge files - the free version gives a preview for the first 25 MB, the Pro version unlocks the whole file.
https://www.logorrr.app/posts/mac-app-store-freemium/
-
LogoRRR can open huge files - the free version gives a preview for the first 25 MB, the Pro version unlocks the whole file.
https://www.logorrr.app/posts/mac-app-store-freemium/
-
The free Mac App Store edition is built for real evaluation. Open your own logs, test the workflow, and decide with your own data.
https://www.logorrr.app/posts/mac-app-store-freemium/
-
The free Mac App Store edition is built for real evaluation. Open your own logs, test the workflow, and decide with your own data.
https://www.logorrr.app/posts/mac-app-store-freemium/
-
LogoRRR 26.7.0 changes the Mac App Store edition to freemium. Try real log analysis for free, with Pro available for large-file work.
https://www.logorrr.app/posts/mac-app-store-freemium/
-
LogoRRR 26.7.0 changes the Mac App Store edition to freemium. Try real log analysis for free, with Pro available for large-file work.
https://www.logorrr.app/posts/mac-app-store-freemium/
-
Open a log in its own window when one view is not enough. Useful for comparing two files while the main workspace stays focused.
-
Open a log in its own window when one view is not enough. Useful for comparing two files while the main workspace stays focused.
-
LogoRRR turns log files into color-coded visual blocks. Search across files, zips, and directories on macOS, Windows, and Linux while your data stays local.
-
LogoRRR turns log files into color-coded visual blocks. Search across files, zips, and directories on macOS, Windows, and Linux while your data stays local.
-
🔍 logdyhq/logdy-core
Realtime log viewer with web UI, tail -f for logs with a web interface browser.
Streams and filters logs in real-time via a local web UI, replacing `tail -f` with interactive parsing, custom columns and TypeScript-powered transformations
⭐ Stars: 2225
📅 Last Update: Jun 09, 2026https://github.com/logdyhq/logdy-core
#selfhosted #homelab #selfhost #selfhosting #opensource #loganalysis #webui
-
🔍 logdyhq/logdy-core
Realtime log viewer with web UI, tail -f for logs with a web interface browser.
Streams and filters logs in real-time via a local web UI, replacing `tail -f` with interactive parsing, custom columns and TypeScript-powered transformations
⭐ Stars: 2225
📅 Last Update: Jun 09, 2026https://github.com/logdyhq/logdy-core
#selfhosted #homelab #selfhost #selfhosting #opensource #loganalysis #webui
-
This Punchbowl Phish Is Bypassing 90% Of Email Filters Right Now
997 words, 5 minutes read time.
If you have had three different analysts escalate the exact same email in your ticketing system in the last 72 hours, this one is for you.
This is not a Nigerian prince scam. This is not a fake Amazon order. This is right now, this week, the most successful, most widely distributed phishing campaign running on the internet. And almost nobody is talking about just how good it is.
What this scam actually is
You get an email. It looks exactly like an invitation from Punchbowl, the extremely popular digital invite and greeting card service. There’s no misspelled logo. There’s no broken grammar. There is absolutely nothing that jumps out as fake.
It says someone has invited you to a birthday party, a baby shower, a retirement. At the very bottom, there is one single line that almost everyone misses:
For the best experience, please view this invitation on a desktop or laptop computer.
If you click the link, you do not get an invitation. You get malware. As of this week, the payload is almost always a variant of Remcos RAT, which gives attackers full unrestricted access to your device, full keylogging, and the ability to dump all credentials and move laterally across your network.
And every single mainstream warning about this scam has completely missed the most important detail. That line about the desktop? That is not a throwaway line. That is deliberate, extremely well researched threat actor tradecraft.
Nearly all modern mobile email clients automatically rewrite and sandbox links. Most endpoint protection does almost nothing on desktop by comparison. The attackers know this. They are actively telling you to defeat your own security for them. And it works.
Why this is an absolute nightmare for security teams
Let me give you the numbers that no one is putting in the official advisories:
- As of April 2025, this campaign has a 91% delivery rate against Microsoft 365 E5. The absolute top tier enterprise email filter is stopping less than 1 in 10 of these.
- Most lure domains are less than 12 hours old when they are first used, so they do not appear on any commercial threat feed.
- This is not just targeting consumers. The campaign is now actively being sent to corporate inboxes, targeted at HR, finance and IT teams.
- Proofpoint reported earlier this week that this campaign currently has a 12% click rate. For context, the average phish has a click rate of 0.8%.
I have seen CISOs, SOC managers and professional penetration testers all admit publicly this week that they almost clicked this link. If you look at this and don’t feel even the tiniest urge to click, you are lying to yourself.
This is what good phishing looks like. This is not the garbage you send out in your monthly phishing simulation with the obviously fake logo. This is the stuff that actually works.
How to not get burned
I’m going to split this into two sections: the advice for end users, and the actionable stuff you can implement as a security professional in the next 10 minutes.
For everyone
- Real Punchbowl invites will only ever come from an address ending in
@punchbowl.com. There are no exceptions. If it comes from anywhere else, delete it immediately. - Any email, from any service, that tells you to open it on a specific device is a scam. Full stop. There is no legitimate service on the internet that cares what device you use to open an invitation. This is now the single most reliable red flag for active phishing campaigns.
- Do not go to Punchbowl’s website to “check if the invite is real”. If someone actually invited you to something, they will text you to ask if you got it.
For SOC Analysts and Security Teams
These are the steps you can go and implement right now before you finish reading this post:
- Add an email detection rule for the exact string
for the best experience please view this on a desktop or laptop. At time of writing this rule has a 0% false positive rate. - Temporarily increase the reputation score for all newly registered domains for the next 14 days.
- Add this exact lure to your phishing simulation program immediately. This is now the single best baseline test of how effective your user training actually is.
- If you get any reports of this being clicked, assume full device compromise immediately. Do not waste time triaging. Isolate the host.
Closing Thought
The worst part about this scam is how predictable it is. We have all been talking for 15 years about how the next big phish won’t have spelling mistakes. We all said it will look perfect. It will be something you actually expect. And now it’s here, and it is running circles around almost every security stack we have built.
If you see this email, report it. If you are on shift right now, go push that detection rule. And for the love of god, stop laughing at people who almost clicked it.
Call to Action
If this breakdown helped you think a little clearer about the threats out there, don’t just click away. Subscribe for more no-nonsense security insights, drop a comment with your thoughts or questions, or reach out if there’s a topic you want me to tackle next. Stay sharp out there.
D. Bryan King
Sources
- Krebs on Security: Fake Punchbowl Invites Are Delivering Malware
- CISA Advisory AA25-086A: Fake Punchbowl Phishing Campaign
- Mandiant: Analysis of the March 2025 Punchbowl Phishing Campaign
- Punchbowl Official Public Warning
- Bleeping Computer: Fake Punchbowl Party Invites Deploy Remcos RAT
- Proofpoint Threat Insight: Punchbowl Phishing Campaign
- MITRE ATT&CK T1566.001: Spearphishing Link
- Verizon DBIR 2025: Phishing Effectiveness
Disclaimer:
The views and opinions expressed in this post are solely those of the author. The information provided is based on personal research, experience, and understanding of the subject matter at the time of writing. Readers should consult relevant experts or authorities for specific guidance related to their unique situations.
Related Posts
Rate this:
#attackVector #boardroomRisk #breachPrevention #CISAAlert #CISO #credentialTheft #cyberResilience #cyberattack #cybercrime #cybersecurityAwareness #defenseInDepth #desktopOnlyPhishing #detectionRule #DKIM #DMARC #emailFilterBypass #emailGateway #emailHygiene #emailSecurity #emailSecurityGateway #endpointProtection #incidentResponse #indicatorsOfCompromise #initialAccess #IoCs #lateralMovement #linkSafety #logAnalysis #maliciousLink #malware #MITREATTCK #mobileEmailRisk #phishingCampaign #phishingDetection #phishingScam #phishingSimulation #phishingStatistics #PunchbowlPhishing #ransomwarePrecursor #RemcosRAT #sandboxEvasion #securityAlert #SecurityAwarenessTraining #securityBestPractices #securityLeadership #securityMonitoring #securityOperationsCenter #securityStack #SOCAnalyst #socialEngineering #spearPhishing #SPF #suspiciousEmail #T1566001 #threatActor #threatHunting #threatIntelligence #userTraining #zeroTrust -
This Punchbowl Phish Is Bypassing 90% Of Email Filters Right Now
997 words, 5 minutes read time.
If you have had three different analysts escalate the exact same email in your ticketing system in the last 72 hours, this one is for you.
This is not a Nigerian prince scam. This is not a fake Amazon order. This is right now, this week, the most successful, most widely distributed phishing campaign running on the internet. And almost nobody is talking about just how good it is.
What this scam actually is
You get an email. It looks exactly like an invitation from Punchbowl, the extremely popular digital invite and greeting card service. There’s no misspelled logo. There’s no broken grammar. There is absolutely nothing that jumps out as fake.
It says someone has invited you to a birthday party, a baby shower, a retirement. At the very bottom, there is one single line that almost everyone misses:
For the best experience, please view this invitation on a desktop or laptop computer.
If you click the link, you do not get an invitation. You get malware. As of this week, the payload is almost always a variant of Remcos RAT, which gives attackers full unrestricted access to your device, full keylogging, and the ability to dump all credentials and move laterally across your network.
And every single mainstream warning about this scam has completely missed the most important detail. That line about the desktop? That is not a throwaway line. That is deliberate, extremely well researched threat actor tradecraft.
Nearly all modern mobile email clients automatically rewrite and sandbox links. Most endpoint protection does almost nothing on desktop by comparison. The attackers know this. They are actively telling you to defeat your own security for them. And it works.
Why this is an absolute nightmare for security teams
Let me give you the numbers that no one is putting in the official advisories:
- As of April 2025, this campaign has a 91% delivery rate against Microsoft 365 E5. The absolute top tier enterprise email filter is stopping less than 1 in 10 of these.
- Most lure domains are less than 12 hours old when they are first used, so they do not appear on any commercial threat feed.
- This is not just targeting consumers. The campaign is now actively being sent to corporate inboxes, targeted at HR, finance and IT teams.
- Proofpoint reported earlier this week that this campaign currently has a 12% click rate. For context, the average phish has a click rate of 0.8%.
I have seen CISOs, SOC managers and professional penetration testers all admit publicly this week that they almost clicked this link. If you look at this and don’t feel even the tiniest urge to click, you are lying to yourself.
This is what good phishing looks like. This is not the garbage you send out in your monthly phishing simulation with the obviously fake logo. This is the stuff that actually works.
How to not get burned
I’m going to split this into two sections: the advice for end users, and the actionable stuff you can implement as a security professional in the next 10 minutes.
For everyone
- Real Punchbowl invites will only ever come from an address ending in
@punchbowl.com. There are no exceptions. If it comes from anywhere else, delete it immediately. - Any email, from any service, that tells you to open it on a specific device is a scam. Full stop. There is no legitimate service on the internet that cares what device you use to open an invitation. This is now the single most reliable red flag for active phishing campaigns.
- Do not go to Punchbowl’s website to “check if the invite is real”. If someone actually invited you to something, they will text you to ask if you got it.
For SOC Analysts and Security Teams
These are the steps you can go and implement right now before you finish reading this post:
- Add an email detection rule for the exact string
for the best experience please view this on a desktop or laptop. At time of writing this rule has a 0% false positive rate. - Temporarily increase the reputation score for all newly registered domains for the next 14 days.
- Add this exact lure to your phishing simulation program immediately. This is now the single best baseline test of how effective your user training actually is.
- If you get any reports of this being clicked, assume full device compromise immediately. Do not waste time triaging. Isolate the host.
Closing Thought
The worst part about this scam is how predictable it is. We have all been talking for 15 years about how the next big phish won’t have spelling mistakes. We all said it will look perfect. It will be something you actually expect. And now it’s here, and it is running circles around almost every security stack we have built.
If you see this email, report it. If you are on shift right now, go push that detection rule. And for the love of god, stop laughing at people who almost clicked it.
Call to Action
If this breakdown helped you think a little clearer about the threats out there, don’t just click away. Subscribe for more no-nonsense security insights, drop a comment with your thoughts or questions, or reach out if there’s a topic you want me to tackle next. Stay sharp out there.
D. Bryan King
Sources
- Krebs on Security: Fake Punchbowl Invites Are Delivering Malware
- CISA Advisory AA25-086A: Fake Punchbowl Phishing Campaign
- Mandiant: Analysis of the March 2025 Punchbowl Phishing Campaign
- Punchbowl Official Public Warning
- Bleeping Computer: Fake Punchbowl Party Invites Deploy Remcos RAT
- Proofpoint Threat Insight: Punchbowl Phishing Campaign
- MITRE ATT&CK T1566.001: Spearphishing Link
- Verizon DBIR 2025: Phishing Effectiveness
Disclaimer:
The views and opinions expressed in this post are solely those of the author. The information provided is based on personal research, experience, and understanding of the subject matter at the time of writing. Readers should consult relevant experts or authorities for specific guidance related to their unique situations.
Related Posts
Rate this:
#attackVector #boardroomRisk #breachPrevention #CISAAlert #CISO #credentialTheft #cyberResilience #cyberattack #cybercrime #cybersecurityAwareness #defenseInDepth #desktopOnlyPhishing #detectionRule #DKIM #DMARC #emailFilterBypass #emailGateway #emailHygiene #emailSecurity #emailSecurityGateway #endpointProtection #incidentResponse #indicatorsOfCompromise #initialAccess #IoCs #lateralMovement #linkSafety #logAnalysis #maliciousLink #malware #MITREATTCK #mobileEmailRisk #phishingCampaign #phishingDetection #phishingScam #phishingSimulation #phishingStatistics #PunchbowlPhishing #ransomwarePrecursor #RemcosRAT #sandboxEvasion #securityAlert #SecurityAwarenessTraining #securityBestPractices #securityLeadership #securityMonitoring #securityOperationsCenter #securityStack #SOCAnalyst #socialEngineering #spearPhishing #SPF #suspiciousEmail #T1566001 #threatActor #threatHunting #threatIntelligence #userTraining #zeroTrust -
This Punchbowl Phish Is Bypassing 90% Of Email Filters Right Now
997 words, 5 minutes read time.
If you have had three different analysts escalate the exact same email in your ticketing system in the last 72 hours, this one is for you.
This is not a Nigerian prince scam. This is not a fake Amazon order. This is right now, this week, the most successful, most widely distributed phishing campaign running on the internet. And almost nobody is talking about just how good it is.
What this scam actually is
You get an email. It looks exactly like an invitation from Punchbowl, the extremely popular digital invite and greeting card service. There’s no misspelled logo. There’s no broken grammar. There is absolutely nothing that jumps out as fake.
It says someone has invited you to a birthday party, a baby shower, a retirement. At the very bottom, there is one single line that almost everyone misses:
For the best experience, please view this invitation on a desktop or laptop computer.
If you click the link, you do not get an invitation. You get malware. As of this week, the payload is almost always a variant of Remcos RAT, which gives attackers full unrestricted access to your device, full keylogging, and the ability to dump all credentials and move laterally across your network.
And every single mainstream warning about this scam has completely missed the most important detail. That line about the desktop? That is not a throwaway line. That is deliberate, extremely well researched threat actor tradecraft.
Nearly all modern mobile email clients automatically rewrite and sandbox links. Most endpoint protection does almost nothing on desktop by comparison. The attackers know this. They are actively telling you to defeat your own security for them. And it works.
Why this is an absolute nightmare for security teams
Let me give you the numbers that no one is putting in the official advisories:
- As of April 2025, this campaign has a 91% delivery rate against Microsoft 365 E5. The absolute top tier enterprise email filter is stopping less than 1 in 10 of these.
- Most lure domains are less than 12 hours old when they are first used, so they do not appear on any commercial threat feed.
- This is not just targeting consumers. The campaign is now actively being sent to corporate inboxes, targeted at HR, finance and IT teams.
- Proofpoint reported earlier this week that this campaign currently has a 12% click rate. For context, the average phish has a click rate of 0.8%.
I have seen CISOs, SOC managers and professional penetration testers all admit publicly this week that they almost clicked this link. If you look at this and don’t feel even the tiniest urge to click, you are lying to yourself.
This is what good phishing looks like. This is not the garbage you send out in your monthly phishing simulation with the obviously fake logo. This is the stuff that actually works.
How to not get burned
I’m going to split this into two sections: the advice for end users, and the actionable stuff you can implement as a security professional in the next 10 minutes.
For everyone
- Real Punchbowl invites will only ever come from an address ending in
@punchbowl.com. There are no exceptions. If it comes from anywhere else, delete it immediately. - Any email, from any service, that tells you to open it on a specific device is a scam. Full stop. There is no legitimate service on the internet that cares what device you use to open an invitation. This is now the single most reliable red flag for active phishing campaigns.
- Do not go to Punchbowl’s website to “check if the invite is real”. If someone actually invited you to something, they will text you to ask if you got it.
For SOC Analysts and Security Teams
These are the steps you can go and implement right now before you finish reading this post:
- Add an email detection rule for the exact string
for the best experience please view this on a desktop or laptop. At time of writing this rule has a 0% false positive rate. - Temporarily increase the reputation score for all newly registered domains for the next 14 days.
- Add this exact lure to your phishing simulation program immediately. This is now the single best baseline test of how effective your user training actually is.
- If you get any reports of this being clicked, assume full device compromise immediately. Do not waste time triaging. Isolate the host.
Closing Thought
The worst part about this scam is how predictable it is. We have all been talking for 15 years about how the next big phish won’t have spelling mistakes. We all said it will look perfect. It will be something you actually expect. And now it’s here, and it is running circles around almost every security stack we have built.
If you see this email, report it. If you are on shift right now, go push that detection rule. And for the love of god, stop laughing at people who almost clicked it.
Call to Action
If this breakdown helped you think a little clearer about the threats out there, don’t just click away. Subscribe for more no-nonsense security insights, drop a comment with your thoughts or questions, or reach out if there’s a topic you want me to tackle next. Stay sharp out there.
D. Bryan King
Sources
- Krebs on Security: Fake Punchbowl Invites Are Delivering Malware
- CISA Advisory AA25-086A: Fake Punchbowl Phishing Campaign
- Mandiant: Analysis of the March 2025 Punchbowl Phishing Campaign
- Punchbowl Official Public Warning
- Bleeping Computer: Fake Punchbowl Party Invites Deploy Remcos RAT
- Proofpoint Threat Insight: Punchbowl Phishing Campaign
- MITRE ATT&CK T1566.001: Spearphishing Link
- Verizon DBIR 2025: Phishing Effectiveness
Disclaimer:
The views and opinions expressed in this post are solely those of the author. The information provided is based on personal research, experience, and understanding of the subject matter at the time of writing. Readers should consult relevant experts or authorities for specific guidance related to their unique situations.
Related Posts
Rate this:
#attackVector #boardroomRisk #breachPrevention #CISAAlert #CISO #credentialTheft #cyberResilience #cyberattack #cybercrime #cybersecurityAwareness #defenseInDepth #desktopOnlyPhishing #detectionRule #DKIM #DMARC #emailFilterBypass #emailGateway #emailHygiene #emailSecurity #emailSecurityGateway #endpointProtection #incidentResponse #indicatorsOfCompromise #initialAccess #IoCs #lateralMovement #linkSafety #logAnalysis #maliciousLink #malware #MITREATTCK #mobileEmailRisk #phishingCampaign #phishingDetection #phishingScam #phishingSimulation #phishingStatistics #PunchbowlPhishing #ransomwarePrecursor #RemcosRAT #sandboxEvasion #securityAlert #SecurityAwarenessTraining #securityBestPractices #securityLeadership #securityMonitoring #securityOperationsCenter #securityStack #SOCAnalyst #socialEngineering #spearPhishing #SPF #suspiciousEmail #T1566001 #threatActor #threatHunting #threatIntelligence #userTraining #zeroTrust -
Câu hỏi về công cụ phân tích log tự lưu có hữu ích không? Người dùng đang tìm tool FOSS dễ cài, hỗ trợ Docker, vừa thu thập log vừa phân tích sâu. Các đề xuất như Nagios, syslog-ng gặp giới hạn. #selfhosted #loganalysis #FOSS #tự_lưu_trữ #phân_tích_lịch_sử #phần_mềm_mở
https://www.reddit.com/r/selfhosted/comments/1p6c4cv/whats_the_best_log_analysis_tool/
-
Agentic workflows are now enabled by new interoperability standards, such as the Model Context Protocol (MCP), which means that an #LLM can query a #SIEM, gather logs, analyze trends and propose next steps—all within a single interface. This collaboration enables #security teams to streamline repetitive tasks, and so much more. 🤝 🙌
In this SecurityInfoWatch article, #Graylog's Robert Rea explains the benefits of this for analysts and leadership alike, how agentic workflows are designed to enhance (not override) human judgment, why this is more accessible now than ever, and how it's a major strategic shift for modern #security teams.
https://www.securityinfowatch.com/cybersecurity/article/55327720/automating-the-soc-without-losing-the-human-in-the-loop #CyberSecurity #LogAnalysis #InfoSec
-
Agentic workflows are now enabled by new interoperability standards, such as the Model Context Protocol (MCP), which means that an #LLM can query a #SIEM, gather logs, analyze trends and propose next steps—all within a single interface. This collaboration enables #security teams to streamline repetitive tasks, and so much more. 🤝 🙌
In this SecurityInfoWatch article, #Graylog's Robert Rea explains the benefits of this for analysts and leadership alike, how agentic workflows are designed to enhance (not override) human judgment, why this is more accessible now than ever, and how it's a major strategic shift for modern #security teams.
https://www.securityinfowatch.com/cybersecurity/article/55327720/automating-the-soc-without-losing-the-human-in-the-loop #CyberSecurity #LogAnalysis #InfoSec
-
Agentic workflows are now enabled by new interoperability standards, such as the Model Context Protocol (MCP), which means that an #LLM can query a #SIEM, gather logs, analyze trends and propose next steps—all within a single interface. This collaboration enables #security teams to streamline repetitive tasks, and so much more. 🤝 🙌
In this SecurityInfoWatch article, #Graylog's Robert Rea explains the benefits of this for analysts and leadership alike, how agentic workflows are designed to enhance (not override) human judgment, why this is more accessible now than ever, and how it's a major strategic shift for modern #security teams.
https://www.securityinfowatch.com/cybersecurity/article/55327720/automating-the-soc-without-losing-the-human-in-the-loop #CyberSecurity #LogAnalysis #InfoSec
-
Agentic workflows are now enabled by new interoperability standards, such as the Model Context Protocol (MCP), which means that an #LLM can query a #SIEM, gather logs, analyze trends and propose next steps—all within a single interface. This collaboration enables #security teams to streamline repetitive tasks, and so much more. 🤝 🙌
In this SecurityInfoWatch article, #Graylog's Robert Rea explains the benefits of this for analysts and leadership alike, how agentic workflows are designed to enhance (not override) human judgment, why this is more accessible now than ever, and how it's a major strategic shift for modern #security teams.
https://www.securityinfowatch.com/cybersecurity/article/55327720/automating-the-soc-without-losing-the-human-in-the-loop #CyberSecurity #LogAnalysis #InfoSec
-
Agentic workflows are now enabled by new interoperability standards, such as the Model Context Protocol (MCP), which means that an #LLM can query a #SIEM, gather logs, analyze trends and propose next steps—all within a single interface. This collaboration enables #security teams to streamline repetitive tasks, and so much more. 🤝 🙌
In this SecurityInfoWatch article, #Graylog's Robert Rea explains the benefits of this for analysts and leadership alike, how agentic workflows are designed to enhance (not override) human judgment, why this is more accessible now than ever, and how it's a major strategic shift for modern #security teams.
https://www.securityinfowatch.com/cybersecurity/article/55327720/automating-the-soc-without-losing-the-human-in-the-loop #CyberSecurity #LogAnalysis #InfoSec
-
Look up in the sky! It's a bird! It's a plane! It's... Logs by Day, Justice by Night: The Double Life of Data Hero Tony Reinke! 💥 🦸♂️ 💬
Follow Tony's transformation from curious log sleuth to community data hero in a captivating comic book–style session at #GraylogGO, and see how the principles of log management and analytics can power passions far beyond the workplace. 💪⚡
You know you wanna go to GO. So, what are you waiting for?
Sign up to GO: https://graylog.info/4fHf4OF #Graylog #cybersecurity #logmanagement #loganalysis #dataanalytics
-
Look up in the sky! It's a bird! It's a plane! It's... Logs by Day, Justice by Night: The Double Life of Data Hero Tony Reinke! 💥 🦸♂️ 💬
Follow Tony's transformation from curious log sleuth to community data hero in a captivating comic book–style session at #GraylogGO, and see how the principles of log management and analytics can power passions far beyond the workplace. 💪⚡
You know you wanna go to GO. So, what are you waiting for?
Sign up to GO: https://graylog.info/4fHf4OF #Graylog #cybersecurity #logmanagement #loganalysis #dataanalytics
-
Look up in the sky! It's a bird! It's a plane! It's... Logs by Day, Justice by Night: The Double Life of Data Hero Tony Reinke! 💥 🦸♂️ 💬
Follow Tony's transformation from curious log sleuth to community data hero in a captivating comic book–style session at #GraylogGO, and see how the principles of log management and analytics can power passions far beyond the workplace. 💪⚡
You know you wanna go to GO. So, what are you waiting for?
Sign up to GO: https://graylog.info/4fHf4OF #Graylog #cybersecurity #logmanagement #loganalysis #dataanalytics
-
Look up in the sky! It's a bird! It's a plane! It's... Logs by Day, Justice by Night: The Double Life of Data Hero Tony Reinke! 💥 🦸♂️ 💬
Follow Tony's transformation from curious log sleuth to community data hero in a captivating comic book–style session at #GraylogGO, and see how the principles of log management and analytics can power passions far beyond the workplace. 💪⚡
You know you wanna go to GO. So, what are you waiting for?
Sign up to GO: https://graylog.info/4fHf4OF #Graylog #cybersecurity #logmanagement #loganalysis #dataanalytics
-
Look up in the sky! It's a bird! It's a plane! It's... Logs by Day, Justice by Night: The Double Life of Data Hero Tony Reinke! 💥 🦸♂️ 💬
Follow Tony's transformation from curious log sleuth to community data hero in a captivating comic book–style session at #GraylogGO, and see how the principles of log management and analytics can power passions far beyond the workplace. 💪⚡
You know you wanna go to GO. So, what are you waiting for?
Sign up to GO: https://graylog.info/4fHf4OF #Graylog #cybersecurity #logmanagement #loganalysis #dataanalytics
-
Getting your data from GitLab’s audit logs into #Graylog for centralized analysis is easier than you might think! 🤔 😃 Take a look at this two-part guide to learn how. 👁️ 👇
This guide covers:
👉 Prerequisites for setting up the raw HTTP input for GitLab
👉 Configuring GitLab to stream logs
👉 Configuring the raw HTTP input
👉 Requirements for enriching GitLab logs with Illuminate
👉 Setup Instructions
And more...Ready to centralize GitLab Logs? Check out the guide to get started with wiring up GitLab’s Audit Event Streaming, and you'll be on your way to visualizing enriched events in a purpose-built dashboard! Let's go...
https://graylog.org/post/bringing-gitlab-logs-into-focus-with-graylog/ #cybersecurity #logmanagement #loganalysis #GraylogLabs
-
Getting your data from GitLab’s audit logs into #Graylog for centralized analysis is easier than you might think! 🤔 😃 Take a look at this two-part guide to learn how. 👁️ 👇
This guide covers:
👉 Prerequisites for setting up the raw HTTP input for GitLab
👉 Configuring GitLab to stream logs
👉 Configuring the raw HTTP input
👉 Requirements for enriching GitLab logs with Illuminate
👉 Setup Instructions
And more...Ready to centralize GitLab Logs? Check out the guide to get started with wiring up GitLab’s Audit Event Streaming, and you'll be on your way to visualizing enriched events in a purpose-built dashboard! Let's go...
https://graylog.org/post/bringing-gitlab-logs-into-focus-with-graylog/ #cybersecurity #logmanagement #loganalysis #GraylogLabs
-
Getting your data from GitLab’s audit logs into #Graylog for centralized analysis is easier than you might think! 🤔 😃 Take a look at this two-part guide to learn how. 👁️ 👇
This guide covers:
👉 Prerequisites for setting up the raw HTTP input for GitLab
👉 Configuring GitLab to stream logs
👉 Configuring the raw HTTP input
👉 Requirements for enriching GitLab logs with Illuminate
👉 Setup Instructions
And more...Ready to centralize GitLab Logs? Check out the guide to get started with wiring up GitLab’s Audit Event Streaming, and you'll be on your way to visualizing enriched events in a purpose-built dashboard! Let's go...
https://graylog.org/post/bringing-gitlab-logs-into-focus-with-graylog/ #cybersecurity #logmanagement #loganalysis #GraylogLabs
-
Getting your data from GitLab’s audit logs into #Graylog for centralized analysis is easier than you might think! 🤔 😃 Take a look at this two-part guide to learn how. 👁️ 👇
This guide covers:
👉 Prerequisites for setting up the raw HTTP input for GitLab
👉 Configuring GitLab to stream logs
👉 Configuring the raw HTTP input
👉 Requirements for enriching GitLab logs with Illuminate
👉 Setup Instructions
And more...Ready to centralize GitLab Logs? Check out the guide to get started with wiring up GitLab’s Audit Event Streaming, and you'll be on your way to visualizing enriched events in a purpose-built dashboard! Let's go...
https://graylog.org/post/bringing-gitlab-logs-into-focus-with-graylog/ #cybersecurity #logmanagement #loganalysis #GraylogLabs
-
Getting your data from GitLab’s audit logs into #Graylog for centralized analysis is easier than you might think! 🤔 😃 Take a look at this two-part guide to learn how. 👁️ 👇
This guide covers:
👉 Prerequisites for setting up the raw HTTP input for GitLab
👉 Configuring GitLab to stream logs
👉 Configuring the raw HTTP input
👉 Requirements for enriching GitLab logs with Illuminate
👉 Setup Instructions
And more...Ready to centralize GitLab Logs? Check out the guide to get started with wiring up GitLab’s Audit Event Streaming, and you'll be on your way to visualizing enriched events in a purpose-built dashboard! Let's go...
https://graylog.org/post/bringing-gitlab-logs-into-focus-with-graylog/ #cybersecurity #logmanagement #loganalysis #GraylogLabs
-
This hands-on guide shows how to build secure, scalable data pipelines using open source tools like Filebeat, Logstash, Kafka, and Ansible.
Learn to collect, transform, enrich, and centralize security telemetry from Windows, Linux, and network sources. A practical resource for anyone supporting detection, forensics, or incident response.
-
This hands-on guide shows how to build secure, scalable data pipelines using open source tools like Filebeat, Logstash, Kafka, and Ansible.
Learn to collect, transform, enrich, and centralize security telemetry from Windows, Linux, and network sources. A practical resource for anyone supporting detection, forensics, or incident response.
-
This hands-on guide shows how to build secure, scalable data pipelines using open source tools like Filebeat, Logstash, Kafka, and Ansible.
Learn to collect, transform, enrich, and centralize security telemetry from Windows, Linux, and network sources. A practical resource for anyone supporting detection, forensics, or incident response.
-
This hands-on guide shows how to build secure, scalable data pipelines using open source tools like Filebeat, Logstash, Kafka, and Ansible.
Learn to collect, transform, enrich, and centralize security telemetry from Windows, Linux, and network sources. A practical resource for anyone supporting detection, forensics, or incident response.
-
This hands-on guide shows how to build secure, scalable data pipelines using open source tools like Filebeat, Logstash, Kafka, and Ansible.
Learn to collect, transform, enrich, and centralize security telemetry from Windows, Linux, and network sources. A practical resource for anyone supporting detection, forensics, or incident response.
-
Alert fatigue persists... and of course we are not happy about it. 🥴 #Security teams now process more log data than ever, but legacy tools cannot keep pace. Plus, attackers are more stealthy. And, when threat signals get buried in noise, orgs don’t just lose time—they lose ground. 😱
So what can SOC teams do about this? 🤔 Let's talk about campaign-centric detection. Say what? 👀 Why yes! There IS a way to make things better. 😃
Campaign-centric detection connects isolated events to uncover a full attack narrative—which means fewer alerts, but each one is more meaningful. So, analysts spend less time chasing dead ends and more time stopping real threats. 💯 Woot! Everyone wins!
Learn more about why you need a modern #SIEM. It's time to ditch that legacy thing and find out what a new SIEM can do for you! 🫵
https://graylog.org/post/threat-campaign-detection-helps-cut-through-alert-fatigue/ #logdata #loganalysis #cybersecurity #securityoperations #alertfatigue
-
Alert fatigue persists... and of course we are not happy about it. 🥴 #Security teams now process more log data than ever, but legacy tools cannot keep pace. Plus, attackers are more stealthy. And, when threat signals get buried in noise, orgs don’t just lose time—they lose ground. 😱
So what can SOC teams do about this? 🤔 Let's talk about campaign-centric detection. Say what? 👀 Why yes! There IS a way to make things better. 😃
Campaign-centric detection connects isolated events to uncover a full attack narrative—which means fewer alerts, but each one is more meaningful. So, analysts spend less time chasing dead ends and more time stopping real threats. 💯 Woot! Everyone wins!
Learn more about why you need a modern #SIEM. It's time to ditch that legacy thing and find out what a new SIEM can do for you! 🫵
https://graylog.org/post/threat-campaign-detection-helps-cut-through-alert-fatigue/ #logdata #loganalysis #cybersecurity #securityoperations #alertfatigue
-
Alert fatigue persists... and of course we are not happy about it. 🥴 #Security teams now process more log data than ever, but legacy tools cannot keep pace. Plus, attackers are more stealthy. And, when threat signals get buried in noise, orgs don’t just lose time—they lose ground. 😱
So what can SOC teams do about this? 🤔 Let's talk about campaign-centric detection. Say what? 👀 Why yes! There IS a way to make things better. 😃
Campaign-centric detection connects isolated events to uncover a full attack narrative—which means fewer alerts, but each one is more meaningful. So, analysts spend less time chasing dead ends and more time stopping real threats. 💯 Woot! Everyone wins!
Learn more about why you need a modern #SIEM. It's time to ditch that legacy thing and find out what a new SIEM can do for you! 🫵
https://graylog.org/post/threat-campaign-detection-helps-cut-through-alert-fatigue/ #logdata #loganalysis #cybersecurity #securityoperations #alertfatigue
-
Alert fatigue persists... and of course we are not happy about it. 🥴 #Security teams now process more log data than ever, but legacy tools cannot keep pace. Plus, attackers are more stealthy. And, when threat signals get buried in noise, orgs don’t just lose time—they lose ground. 😱
So what can SOC teams do about this? 🤔 Let's talk about campaign-centric detection. Say what? 👀 Why yes! There IS a way to make things better. 😃
Campaign-centric detection connects isolated events to uncover a full attack narrative—which means fewer alerts, but each one is more meaningful. So, analysts spend less time chasing dead ends and more time stopping real threats. 💯 Woot! Everyone wins!
Learn more about why you need a modern #SIEM. It's time to ditch that legacy thing and find out what a new SIEM can do for you! 🫵
https://graylog.org/post/threat-campaign-detection-helps-cut-through-alert-fatigue/ #logdata #loganalysis #cybersecurity #securityoperations #alertfatigue
-
Alert fatigue persists... and of course we are not happy about it. 🥴 #Security teams now process more log data than ever, but legacy tools cannot keep pace. Plus, attackers are more stealthy. And, when threat signals get buried in noise, orgs don’t just lose time—they lose ground. 😱
So what can SOC teams do about this? 🤔 Let's talk about campaign-centric detection. Say what? 👀 Why yes! There IS a way to make things better. 😃
Campaign-centric detection connects isolated events to uncover a full attack narrative—which means fewer alerts, but each one is more meaningful. So, analysts spend less time chasing dead ends and more time stopping real threats. 💯 Woot! Everyone wins!
Learn more about why you need a modern #SIEM. It's time to ditch that legacy thing and find out what a new SIEM can do for you! 🫵
https://graylog.org/post/threat-campaign-detection-helps-cut-through-alert-fatigue/ #logdata #loganalysis #cybersecurity #securityoperations #alertfatigue
-
New blog post coming tomorrow (Thursday). After the success and almost viral post about Atomic Red Team, it’s time to use histograms to analyse data and find repetition and silence.
Here’s the Atomic Red Team post:
https://threathunter-chronicles.medium.com/logwatchers-zenit-02-simulating-attacks-with-atomic-red-team-d9071d42eaeb#cybersecurity #threathunting #threatdetection #loganalysis #incidentresponse #mvpbuzz #blog
-
New blog post coming tomorrow (Thursday). After the success and almost viral post about Atomic Red Team, it’s time to use histograms to analyse data and find repetition and silence.
Here’s the Atomic Red Team post:
https://threathunter-chronicles.medium.com/logwatchers-zenit-02-simulating-attacks-with-atomic-red-team-d9071d42eaeb#cybersecurity #threathunting #threatdetection #loganalysis #incidentresponse #mvpbuzz #blog
-
New blog post coming tomorrow (Thursday). After the success and almost viral post about Atomic Red Team, it’s time to use histograms to analyse data and find repetition and silence.
Here’s the Atomic Red Team post:
https://threathunter-chronicles.medium.com/logwatchers-zenit-02-simulating-attacks-with-atomic-red-team-d9071d42eaeb#cybersecurity #threathunting #threatdetection #loganalysis #incidentresponse #mvpbuzz #blog
-
A web application tool for log analysis: https://shinkensec.com/2025/05/28/log-analysis-made-easy-the-swiss-army-knife-for-logs-logtap/
-
A web application tool for log analysis: https://shinkensec.com/2025/05/28/log-analysis-made-easy-the-swiss-army-knife-for-logs-logtap/
-
As cybersecurity professionals, log analysis is one of our most powerful tools in the fight against threats
Read more 👉 https://lttr.ai/AeClJ
-
Hot off the press, and just in time for your leisurely weekend reading we have our latest #GraylogLabs post! 🕺 🎉 So let's dive in and discuss regex patterns. Regex is a well-known syntax across various programming languages and having an understanding of what it is and how to use it can help you be more efficient when trying to match patterns or manipulate strings of #data.
Learn about:
🤔 What regex means
❓ What a regex function is used for
🖊️ Writing a regular expression
✔️ Using regular expressions
💪 Getting the most from your logshttps://graylog.org/post/getting-ready-with-regex-101/ #loganalysis #cybersecurity #infosec
-
Hot off the press, and just in time for your leisurely weekend reading we have our latest #GraylogLabs post! 🕺 🎉 So let's dive in and discuss regex patterns. Regex is a well-known syntax across various programming languages and having an understanding of what it is and how to use it can help you be more efficient when trying to match patterns or manipulate strings of #data.
Learn about:
🤔 What regex means
❓ What a regex function is used for
🖊️ Writing a regular expression
✔️ Using regular expressions
💪 Getting the most from your logshttps://graylog.org/post/getting-ready-with-regex-101/ #loganalysis #cybersecurity #infosec
-
Hot off the press, and just in time for your leisurely weekend reading we have our latest #GraylogLabs post! 🕺 🎉 So let's dive in and discuss regex patterns. Regex is a well-known syntax across various programming languages and having an understanding of what it is and how to use it can help you be more efficient when trying to match patterns or manipulate strings of #data.
Learn about:
🤔 What regex means
❓ What a regex function is used for
🖊️ Writing a regular expression
✔️ Using regular expressions
💪 Getting the most from your logshttps://graylog.org/post/getting-ready-with-regex-101/ #loganalysis #cybersecurity #infosec
-
Hot off the press, and just in time for your leisurely weekend reading we have our latest #GraylogLabs post! 🕺 🎉 So let's dive in and discuss regex patterns. Regex is a well-known syntax across various programming languages and having an understanding of what it is and how to use it can help you be more efficient when trying to match patterns or manipulate strings of #data.
Learn about:
🤔 What regex means
❓ What a regex function is used for
🖊️ Writing a regular expression
✔️ Using regular expressions
💪 Getting the most from your logshttps://graylog.org/post/getting-ready-with-regex-101/ #loganalysis #cybersecurity #infosec
-
Hot off the press, and just in time for your leisurely weekend reading we have our latest #GraylogLabs post! 🕺 🎉 So let's dive in and discuss regex patterns. Regex is a well-known syntax across various programming languages and having an understanding of what it is and how to use it can help you be more efficient when trying to match patterns or manipulate strings of #data.
Learn about:
🤔 What regex means
❓ What a regex function is used for
🖊️ Writing a regular expression
✔️ Using regular expressions
💪 Getting the most from your logshttps://graylog.org/post/getting-ready-with-regex-101/ #loganalysis #cybersecurity #infosec
-
Let's take a look at extracting data from #Graylog. Follow along as Tony Reinke shows you step-by-step how to transform your raw data from unstructured to structured.
We can find logs with raw text searches, but to gain insights in to the data we need to extract the different fields and their values, which will in turn make search easier and assist you in the creation of dashboards and alerts. 👍
Ready to dive in? 🪂
https://medium.com/@coachreinke/graylog-extracting-data-5733a8416c81 #logmanagement #loganalysis #logdata #cybersecurity
-
Let's take a look at extracting data from #Graylog. Follow along as Tony Reinke shows you step-by-step how to transform your raw data from unstructured to structured.
We can find logs with raw text searches, but to gain insights in to the data we need to extract the different fields and their values, which will in turn make search easier and assist you in the creation of dashboards and alerts. 👍
Ready to dive in? 🪂
https://medium.com/@coachreinke/graylog-extracting-data-5733a8416c81 #logmanagement #loganalysis #logdata #cybersecurity
-
Let's take a look at extracting data from #Graylog. Follow along as Tony Reinke shows you step-by-step how to transform your raw data from unstructured to structured.
We can find logs with raw text searches, but to gain insights in to the data we need to extract the different fields and their values, which will in turn make search easier and assist you in the creation of dashboards and alerts. 👍
Ready to dive in? 🪂
https://medium.com/@coachreinke/graylog-extracting-data-5733a8416c81 #logmanagement #loganalysis #logdata #cybersecurity
-
Let's take a look at extracting data from #Graylog. Follow along as Tony Reinke shows you step-by-step how to transform your raw data from unstructured to structured.
We can find logs with raw text searches, but to gain insights in to the data we need to extract the different fields and their values, which will in turn make search easier and assist you in the creation of dashboards and alerts. 👍
Ready to dive in? 🪂
https://medium.com/@coachreinke/graylog-extracting-data-5733a8416c81 #logmanagement #loganalysis #logdata #cybersecurity