Latest SIEM topics - Discuss the Elastic Stack

Topic	Replies	Views	Activity
About the SIEM category	0	2338	May 20, 2019
The suricata results shown on the [filebeat dashboard] are different from the results shown in the [security -> alerts] on kibana	1	24	October 1, 2024
How to import suricate.rules into SIEM deteciton rules?	1	24	October 1, 2024
Carbon Black Cloud: CEL alert_v7 400 bad request	5	40	September 27, 2024
Exceptions matches escaping	2	31	September 23, 2024
Problem with CrowdStrike	14	101	September 17, 2024
Fortigate Integrations	8	74	September 12, 2024
FIM and Windows Updates Best Practices	0	15	September 11, 2024
Security Case Data for Custom Dashboard	2	19	October 3, 2024
List all Rules Exceptions	4	28	September 26, 2024
Hunt dashboard dashboard	1	27	September 26, 2024
DNS Tunneling job failing to start	1	18	September 24, 2024
Timeline filter always overwriting first value	2	25	September 6, 2024
Detection Exception for Lenovo Temp Account Creation	1	38	September 5, 2024
Timeline template isn't being applied properly over threshold rules	1	20	September 3, 2024
My low priority alerts are not showing in alerts?	2	32	September 2, 2024
Unable to source and feed in the correct information in src country	6	25	September 1, 2024
Indicator matching rule with MISP intel with too long duration	1	30	August 20, 2024
Threshold security rule	9	146	August 12, 2024
Publish data to Elastic SIEM	4	95	August 5, 2024
Trigering Alerts for Machine learning Jobs	3	117	August 1, 2024
Versions of components used in elasticsearch:8.12.2 and 8.12.0 docker	1	87	July 17, 2024
Detecting inital of breach	2	140	July 9, 2024
Alert triage enhancement ideas	4	213	June 18, 2024
Adding alers to cases in bulk	2	119	June 12, 2024
Least-Privilege To View All Server Asset Sending Logs	1	96	June 5, 2024
Deployment Architecture Scenarios Using ELK for SIEM at Large Scale on-promise	6	282	May 29, 2024
Share cases between spaces	1	122	May 9, 2024
Machine learning rules : where to apply the high_non_zero_count function	1	98	May 27, 2024
Log Stoppage Monitoring	1	108	May 27, 2024