So, you’ve done your homework, you’ve clearly defined business requirements, and you’ve decided to implement a SIEM solution into your organization. However, before you set out on this adventure there are a quite a few questions to consider.
Does anyone like receiving calls from telemarketers? Unless you use the opportunity to set up a prank and get a good laugh, odds are these calls annoy you just as much as me. These over-the-phone salespeople are frustratingly persistent as they interrupt my day, and they also missed one key step when they dialed my number: Researching whether there was any chance that I would want their product.
Over the last decade, cloud computing has revolutionized the way we handle and store data, which has, in turn, paved the way for greater innovations in technology. What can we expect from cloud computing as the technology advances?
I've been working at WebGazer for seven months. For every day I spend in this business, I feel like I'm trying to run on a tightrope. Since our job is website monitoring, I see the similar downtime tragedies every day. I was reading some old downtime stories like "Amazon has lost $3.75 million in only 20 minutes!". Then, I decided to make a research about some possible downtime tragedies might happen.
OpsMatters has launched a new site for users, developers, enthusiasts and decision-makers who seek up-to-date news and information on operational tools and applications. Daily updates include press releases, blogs, news, publications (white papers, e-books and reports), videos, a calendar of upcoming events, and open source projects.
Sematext provides a single pane of glass and machine learning powered alerts for logs, metrics, traces and user experience data. Sematext Cloud provides advanced monitoring, logging and tracing for all Docker platforms such as Docker EE, Kubernetes, GKE, AWS ECS, and IBM Cloud. Sematext’s new monitoring agent leverages the powerful eBPF Linux kernel observability functionality and uses the Kubernetes API to enrich the container and cluster level metrics.
Logagent is a modern, open-source, light-weight data shipper with out of the box and extensible log parsing, on-disk buffering, secure transport and bulk indexing to Elasticsearch and Sematext Cloud. Its low memory footprint and low CPU overhead make it suitable for deploying on edge nodes and devices, while its ability to parse and structure logs makes it a great Logstash alternative.
One of the most common security use cases, is the ability to identify connections generated by malicious actors, or internal components connecting to suspicious servers (e.g malware C&Cs). In this post, we will show how to leverage the Falco engine, to identify connections made to IPs that were flagged by multiple security sensors, and are streamed as a feed to the Falco engine.
