Understanding Broken Authentication
With authentication, you can face serious consequences if you follow the old motto, “if it ain’t broke, don’t fix it.” From applications to APIs, authentication tells you whether the person or technology accessing a resource is legitimate. In 2017, the Open Worldwide Application Security Project (OWASP), identified broken authentication as #2 on its list of […]
Getting Started with NGINX
If you’ve ever watched one of those rehabilitating a business show like Kitchen Nightmares, you know that the advice is often the same, “Don’t try to be everything to everyone. Pick what you’re good at and stick with it.” Essentially, the message is to pick your niche and be the best within it. For example, […]
Creating a Threat Hunting Lab in Graylog
When I was looking to break into the cybersecurity industry, I found myself overwhelmed with the sheer amount of content to learn and try. So much of the content, you had to purchase certain things, or it was way too complicated for me to understand at the time. Today, I wanted to break down create […]
Optimizing the Value of Amazon Security Lake
So many logs. So little space. If you’re like most people running an Amazon Web Services (AWS) environment, then you probably have a vast collection of log files that include things like VPC flow logs and CloudWatch data. As if that’s not enough, you’re also collecting information about everything and everyone else connected to your […]
When 200 OK Is Not OK – Unveiling the Risks of Web Responses In API Calls
In the ever-evolving landscape of cybersecurity, where the battle between defenders and hackers continues to escalate, it is crucial to scrutinize every aspect of web interactions. While the HTTP status code 200 OK is generally associated with successful API calls, there’s a dark side to its seemingly harmless appearance that often goes unnoticed. This blog […]
Log Less, Achieve More: A Guide to Streamlining Your Logs
Businesses are generating vast amounts of data from various sources, including applications, servers, and networks. As the volume and complexity of this data continue to grow, it becomes increasingly challenging to manage and analyze it effectively. Centralized logging is a powerful solution to this problem, providing a single, unified location for collecting, storing, and analyzing […]
Graylog Cluster: Navigating Shared Data Like a Pro
As data-rich solutions are important for many businesses, technical information can become overwhelming, especially regarding shared environments and multi-tenancy. In the world of Graylog, we understand these challenges and present the tools you need to keep your cluster running smoothly. Let’s dive into how you can effectively manage shared Graylog clusters. Understanding Graylog Clusters When […]
Log Wrangling: Leveraging Logs to Optimize Your System
Today, we delve into the art and science of Log Wrangling. This process involves corralling, organizing, and deriving maximum benefits from your logs like handling unpredictable livestock. Why do we do this? Managing logs can be challenging, but we can transform them from a daunting task with the correct approach into a beneficial tool… […]
Hardening Graylog – Encryptify Your Log Supply!
Welcome to Hardening Graylog, where we will help you encryptify your log supply. In this blog post, we will explore the importance of using Transport Layer Security (TLS) to secure your Graylog deployment. We will walk you through the steps to configure Graylog with certificates and keys, secure the Graylog web interface, and protect the […]
Feeding Your First SIEM with Graylog
Before diving into our blog post topic, allow me to introduce myself. My name is Joel and I work with the solution engineering team at Graylog. Our primary task is to work with our customers and prospective clients on how to manage and make the most out of Graylog in their respective IT environments. One of […]
Using VPC Flow Logs to Monitor AWS Virtual Public Cloud
While no man is an island, your Virtual Private Cloud (VPC) is, except it’s a digital island floating in the ocean of a public cloud offered by a cloud service provider (CSP). The VPC means that everything on your digital island is yours, and none of the CSPs other customers can (or should be able […]
Getting Your Daily Security News Into Graylog
For as long as I can remember, I have started my day off by reading various security news sites to figure out what I need to be aware of and any new trends that are being spotted. I used to do this on my phone while commuting, and now I work from home, but I […]
