Differences between revisions 10 and 11
Revision 10 as of 2021-04-11 21:20:54
Size: 1010
Editor: scot
Comment:
Revision 11 as of 2021-04-11 21:23:41
Size: 1078
Editor: scot
Comment:
Deletions are marked like this. Additions are marked like this.
Line 11: Line 11:
 * Splunk  * Splunk (Seems to have gone for pay... probably want to try something else)

Lab 09 Dashboards - Keeping data under control

Introduction

In the last two labs particularly, we have gathered information. But how do you make sense of it all? Log analyzer and dashboards!

Take the first 15 minutes of lab to research dashboards that you might want to install and use to work with Suricata, OpenVas and your windows systems.

  • Logz.io
  • GreyLog

  • Splunk (Seems to have gone for pay... probably want to try something else)
  • Spiceworks (and other variants)
  • AlienVault (community edition)

  • Elk Stack
  • SolarWInds Paper Trail (trial version 48 hours of search 7 days of archive)

Install a system of your choice. If its not on the list, check with me first and if its ok, I'll add it. You should collect information from OpenVas, Suricata, Windows Logs and ubuntu for aggregation in the dashboard of your choice.

Show Me

In less than two minutes:

  1. Show your Dashboard working
    1. Show something from OpenVas

    2. Show something from Suricata
    3. Show something from your Windows Server

NetworkSecurity/Lab/Lab09 (last edited 2021-04-11 22:20:51 by scot)