Questions tagged [siem]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1
vote
0answers
13 views

SIEM Dashboard/Add-On/App for Viewing Windows Registry Forensics Data

There are a number of forensically-useful areas in the Windows registry and file system like those detailed in this SANS Poster: https://www.sans.org/security-resources/posters/windows-forensic-...
1
vote
0answers
10 views

Opensource software for endpoint visibility

Looking for FLOSS platform for monitoring many remote user endpoints (varying devices and OSs) for visibility and data leak protection (eg. if notice that a particular policy is violated on a user ...
0
votes
0answers
8 views

A tool for time specific log analysis

I often have web logs when an incident happens and I need to analyse the activity to find out how it happened. So I do not have full logs, I just have it for last 2 hours before the incident or so. Is ...
2
votes
0answers
13 views

Open source SIEM for SQL Server, Active Directory, WatchGuard Firewall

I need an open source security information and event management piece of software that can manage logs from: SQL Server Active Directory WatchGuard Firewall