Sysmon Security Event Processing in Real Time with KSQL and HELK
Confluent
FEBRUARY 21, 2019
During a recent talk titled Hunters ATT&CKing with the Right Data , which I presented with my brother Jose Luis Rodriguez at ATT&CKcon, we talked about the importance of documenting and modeling security event logs before developing any data analytics while preparing for a threat hunting engagement.
Let's personalize your content