Jan. 12, 2024, 11:47 a.m. | /u/Mansori97

cybersecurity www.reddit.com

ELK stack question.

Zeek + auditd for Linux.
WinlogBeat for Windows

Is this an effective approach to begin collecting security events?

auditd collecting cybersecurity elk events linux question security security events siem stack windows zeek

CyberSOC Technical Lead

@ Integrity360 | Sandyford, Dublin, Ireland

Cyber Security Strategy Consultant

@ Capco | New York City

Cyber Security Senior Consultant

@ Capco | Chicago, IL

Sr. Product Manager

@ MixMode | Remote, US

Corporate Intern - Information Security (Year Round)

@ Associated Bank | US WI Remote

Senior Offensive Security Engineer

@ CoStar Group | US-DC Washington, DC