List: How to create a SIEM solution in OCI | Curated by Birzu Alexandru-Adrian

Sep 24, 2024
18 stories
1 save
How to create a SIEM solution in OCIHow to create a custom SIEM solution using Cloud Native and OpenSource
Hacker4U
BloodHound Community Edition (BHCE)This article will cover setting up, collecting data, analyzing the data, and providing value with that data. This will use the GOADv2…
Aug 20
1
Aug 20
1
Truvis Thornton
Part 1 : Threat Detection Engineering and Incident Response with AuditD and Sentinel — along how to…NOTE: This article is based off the following and should be followed first:
May 18
May 18
This lists contains multiple links on how to enable different OCI services to monitor your tenancy, Also it contains guides on how to implement Open Source products, to enhance the detection and use additional enhancements for Threat Hunting. I will continue to test and add other products in here.
Birzu Alexandru-Adrian
in
Learn OCI
How to use Vulnerability Scanning in OCIOracle VSS is a free service, that should be used by all OCI customers if they don’t have any implementation of Vulnerability Management in…
Dec 21, 2021
Dec 21, 2021
Birzu Alexandru-Adrian
in
Learn OCI
How to install Security Onion on OCIIf you plan to create your own Security Operation Center using open-source solutions, one of the best Threat Detection and Monitoring…
Apr 29, 2022
Apr 29, 2022
Birzu Alexandru-Adrian
in
Learn OCI
How to mirror traffic from your servers to Security Onion for Threat HuntingLast week Oracle announced the General Availability of VTAP in OCI.
May 4, 2022
May 4, 2022
Birzu Alexandru-Adrian
in
Learn OCI
How to enable custom logs in OCI InstancesOne of the features of the logging service is the ability to collect logs directly from the running instance using the existing Oracle…
Aug 1, 2022
Aug 1, 2022
Birzu Alexandru-Adrian
in
Learn OCI
How to get OCI Content and Management logs with PostmanIf you want to get the logs from OCI Content and management, at this point the only way to do it is by using Rest API’s. This 2 links are…
Jan 11, 2023
Jan 11, 2023
Birzu Alexandru-Adrian
in
Learn OCI
How to send Windows Logs to Logging Analytics from OCI LoggingIn my previous blog I have shown how you can enable Custom Logs in OCI using Logging Service. In this blog I will show you how to send…
Aug 1, 2022
Aug 1, 2022
Birzu Alexandru-Adrian
in
Learn OCI
Use Cloud Guard Insight Recipes to monitor Windows Instances against Interesting Windows Event IDs…Recently Oracle lunched a new Recipe called Insight. With this service you will be able to leverage the OCI logging service Search Options…
Aug 22, 2022
Aug 22, 2022
Birzu Alexandru-Adrian
in
Learn OCI
Use Auditd logs in OCI with Logging ServiceLogs are important because if they are properly configured , they can provide information that usually can be missed. For Windows…
Aug 29, 2022
Aug 29, 2022
Birzu Alexandru-Adrian
in
Learn OCI
Use CloudGuard to search for MITRE ATT&CK Techiniques detectionsOn my previous blog entry, I have shown how to leverage AuditD data in OCI Logging service. Now I will use the OCI Logging Service search…
Aug 29, 2022
1
Aug 29, 2022
1
Birzu Alexandru-Adrian
in
Learn OCI
How to get your IDCS Logs into OCI Logging AnalyticsToday, one of my colleagues asked me if I know this application from OCI Marketplace:
Dec 12, 2022
Dec 12, 2022
Birzu Alexandru-Adrian
in
Learn OCI
Install Sysmon on a Windows Instance in OCIThis blog is a very short one, as it’s main purpose is to install Sysmon and add additional monitoring events and variable to my OCI…
Dec 20, 2022
Dec 20, 2022
Birzu Alexandru-Adrian
in
Learn OCI
How to ingest Windows Logs into Logging AnalyticsIf you haven’t enabled OCI Logging Analytics yet in your tenancy, then now it’s time to do it. You will have a 10GB log ingestion free of…
Dec 20, 2022
Dec 20, 2022
Birzu Alexandru-Adrian
in
Learn OCI
How to get Sysmon events into Logging AnalyticsIn my previous blog entries, I have described how to install Sysmon and how to get the Windows Events directly to Logging Analytics using…
Dec 21, 2022
Dec 21, 2022
Birzu Alexandru-Adrian
in
Learn OCI
How to feed OCI metrics to Security Onion GrafanaIn my previous blog I have showcased how easy is to install Security Onion in OCI.
Jan 4, 2023
Jan 4, 2023
Birzu Alexandru-Adrian
in
Learn OCI
How to ingest Data Safe Audit Events in OCI loggingOne of the main advantages of running Oracle Databases in OCI, besides the automation, performance and advance functions, is also that you…
Jan 16, 2023
Jan 16, 2023
Birzu Alexandru-Adrian
in
Learn OCI
How to ingest Linux Logs into OCI Logging Analytics and use the Mitre ATT&CK AuditD keys to createThis is a short guide on how to collect logs from an Oracle Linux Instance, by installing the OCI Management Agent. This works for any Red…
Feb 15, 2023
Feb 15, 2023