Latest SIEM topics - Discuss the Elastic Stack

Topic	Replies	Views	Activity
Detection Exception for Lenovo Temp Account Creation	1	501	September 5, 2024
Timeline template isn't being applied properly over threshold rules	1	60	September 3, 2024
My low priority alerts are not showing in alerts?	2	104	September 2, 2024
Unable to source and feed in the correct information in src country	6	52	September 1, 2024
Indicator matching rule with MISP intel with too long duration	1	51	August 20, 2024
Threshold security rule	9	587	August 12, 2024
Publish data to Elastic SIEM	4	190	August 5, 2024
Trigering Alerts for Machine learning Jobs	3	171	August 1, 2024
Versions of components used in elasticsearch:8.12.2 and 8.12.0 docker	1	116	July 17, 2024
Detecting inital of breach	2	168	July 9, 2024
Alert triage enhancement ideas	4	259	June 18, 2024
Adding alers to cases in bulk	2	161	June 12, 2024
Least-Privilege To View All Server Asset Sending Logs	1	103	June 5, 2024
Deployment Architecture Scenarios Using ELK for SIEM at Large Scale on-promise	6	769	May 29, 2024
Share cases between spaces	1	138	May 9, 2024
Machine learning rules : where to apply the high_non_zero_count function	1	127	May 27, 2024
Log Stoppage Monitoring	1	141	May 27, 2024
Create Detection Rules via TF	1	161	May 21, 2024
System Virtual Process Detection Rule	2	192	May 17, 2024
Fleet Deploy OSQuery to Windows osquery-manager	4	431	May 15, 2024
Sending the alert JSON details using Webhook Connector	8	1237	May 9, 2024
Notification from machine learning job per anomaly score	1	149	May 8, 2024
How do I adding Suricata events to Elasticsearch	8	1250	May 7, 2024
Elastic pricing for on-premises deployment license	6	1880	May 6, 2024
Elastic Stack for SIEM(Elastic Security)	2	319	May 3, 2024
Elastic Agent - Ship Windows logs for SIEM	1	198	May 2, 2024
Elastic Search not work with evebox painless	6	446	April 11, 2024
Webhook - Case Management connector JSON payload from case object variables	1	236	April 5, 2024
Orchestrate Elastic SIEM for training labs docker	3	312	March 27, 2024
Shiiping audit logs for DB with no connector available in Integrations	5	200	March 27, 2024