Marcus Edmondson | Threat Hunting | Information Security
A blog about threat hunting and information security.
So in this blog post I wanted to talk about my approach to hunting on the network. I won’t delve into collection of the data, but instead this will be a situation where you have a packet capture already and you don’t know where to start. So depending on the size of the packet capture […]
Read More Threat Hunting Snippets for the NetworkThese are fascinating times we find ourselves in as security professionals, never has there been so much information at our fingertips on how to do our jobs in creative and outside the box ways! It’s literally like being Neo in the Matrix, you can find and follow bona fide rockstars such as Matt Graeber, Will […]
Read More 3 Steps to Improve Your SecurityIn this post we are going to install Logstash to finish up our Elasticsearch server. So let’s start. First thing we will do is install Logstash. sudo apt-get update && sudo apt-get install logstash Now we will create our Logstash configuration file to be able to receive event logs from our Windows endpoints with Winlogbeat […]
Read More Elasticsearch Stack Install Part 3 Logstash
Marcus Edmondson | Threat Hunting | Information Security 