vanstechelman.eu
open-menu closeme

  • Remove whitelisted events from Splunk search results

    calendar May 6, 2015 · 4 min read · Audit Splunk Monitoring  ·
    Share on: twitter facebook linkedin copy

    Splunk is a great tool to monitor and review many different kinds of log files. In some cases it can occur that you want to be alerted of specific types of events, but only for occurrences of the events that are not defined in an exceptions whitelist. For example: you may want to be alerted of all logons to your server …


    Read More

Recent Posts

  • Phases in a DevSecOps agile cycle
  • Security roles in a DevSecOps strategy
  • Managing Windows firewall with PowerShell
  • The most common BitLocker command-line commands
  • Testing for CVE-2018-11784 - Apache Struts 2 Open Redirect vulnerability
  • Testing for impact of Infineon’s vulnerable RSA generation (CVE-2017-15361)
  • How to run the WSUS Server Cleanup Wizard from command-line
  • Scanning for CVE-2017-0143 (EternalBlue) using nmap (MS17-010)

Tags

WINDOWS 34 SECURITY 20 LINUX 12 INFRASTRUCTURE SECURITY 11 NETWORKING 10 WEB APPLICATION SECURITY TESTING 10 BASH 8 AUDIT 7 TESTING 6 NMAP 5 AUTOIT 4 MONITORING 4 BURP SUITE 3 JAVA 3 POWERSHELL 3 PROGRAMMING 3 WINDOWS EVENT LOGS 3 WMIC 3 DEVSECOPS 2 DNS 2 DRUPAL 2 DRUPAL 7 2 GOOD PRACTICES 2 SED 2 SUBINACL 2 TOOLS 2 VBSCRIPT 2 WINDOWS GROUP POLICY 2 APACHE 1 BITLOCKER 1 DEBIAN 1 EMAIL SECURITY 1 HTML5 1 HTTP 1 IIS 1 JAVASCRIPT 1 NAGIOS 1 PHP 1 RADIUS 1 RANDOMNESS TESTING 1 SDLC 1 SOFTWARE DEVELOPMENT 1 SPLUNK 1 SQL SERVER 1 TPM 1 UEFI 1 WSUS 1 XCACLS 1
vanstechelman.eu

Copyright  VANSTECHELMAN.EU. All Rights Reserved

to-top