Defense.com

Daniel Sampson

A series of helpful how-to guides on all things SIEM related.

This guide explains how to run a SIEM Log Search using the Lucene query language.

This guide explains what Run Books are and why they're so useful.

This guide will walk you through how to raise a ticket.

This guide will walk you through everything you need to start managing and tuning the detections and alerts generated by our SIEM platform.

This guide will show you how to create scheduled reports from saved detection rules.

This guide will walk you through how to create and save detection rules.

A series of helpful guides on general SIEM topics

A series of helpful how-to guides on Installing, configuring and troubleshooting SIEM Collectors

In this guide we'll go through the steps to check the expiry date of your collector's keystore.jks file.

This guide will take you through the checks to carry out if your Linux SIEM collector stops logging to our SIEM platform.

The following will remove Logstash along with any associated configurations and dependencies.

In this guide we'll take you through the steps to check the expiry of your keystore.jks file on Windows.

This guide will take you through the checks to carry out if your Windows SIEM collector stops logging to our SIEM platform.

A series of helpful how-to guides on Installing, configuring and troubleshooting SIEM Agents

This guide will walk you through installing the auditbeat agent on Linux, for use with our SIEM service.

This guide will walk you through installing the filebeat agent on Linux, for use with our SIEM service.

This is a guide to troubleshooting logging issues with Auditbeat on Linux. It provides tips and techniques for resolving common problems.

This is a guide to troubleshooting logging issues with Filebeat. It provides tips and techniques for resolving common problems.

This guide will walk you through installing the winlogbeat agent on Windows, for use with our SIEM service.

This guide will walk you through installing the Auditbeat agent on Windows, for use with our SIEM service.