Centralized Log Management and a Successful 2021

Logs are fundamental to any IT operations or security program because they tell you everything from who’s doing what to what’s connecting where. To get you set for 2021, Graylog’s experts have identified three key areas that you can improve so that you can work faster, mitigate risk, and manage documentation for the new normal WFH and the future hybrid version of WFH and in the office.

Red Team Tools Detection and Alerting

The Graylog alert feature can detect the signature from any log source in your organization with the signature/hash value in them. This blog post walks you through the bits of information from the YARA rules and create a rule in Graylog to alert when an IoC is detected.