Hi All, I am working on a project where we are trying to USE ELK as SIEM but i need some threat Intel sources which i can use as IOC and feeds to correlate SOC devices logs to detect Malicious Activities. i believe this will help me to use ELK in true terms of SIEM. any solution which i can host l…

Need to integrate threat Intel with ELK, which solution shall i look for, any opensource suggestion?

system (system) Closed August 2, 2018, 3:32pm 2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Threat Intel and SIEM SIEM	3	4347	December 15, 2020
Matching threat intel to data in ELK Elasticsearch	3	1743	July 6, 2017
Enrich SIEM Data SIEM	2	1188	December 20, 2020
Threat Intelligence Elasticsearch	7	1869	January 3, 2018
Threat Intel Module for Elastic cloud SIEM	8	653	May 26, 2021

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Need to integrate threat Intel with ELK, which solution shall i look for, any opensource suggestion?

Related topics