Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Graylog

graylog

Centralized Log Management for TISAX Compliance

Aug 16, 2023 By The Graylog Team In Graylog
The Trusted Information Security Assessment Exchange (TISAX) is the certification process for engaging in the Verband der Automobilindustrie (VDA), the German Association of the Automotive Industry, Information Security Assessment (ISA). The ENX Association, a collection of automobile manufacturers, suppliers, and four national automotive associations, established TISAX to create an overarching industry standard and make reporting more efficient.
Read Post
graylog

Server Security: What it is and How to Implement It

Aug 2, 2023 By Jeff Darrington In Graylog
Your business runs on servers. Without your DNS server, your users wouldn’t be able to connect to online resources. Without your proxy servers, your local networks would be visible across the public internet. Without your database servers, your organization wouldn’t be able to execute the queries that enable them to make data-driven decisions. Since servers are critical to business operations, threat actors value them.
Read Post
graylog

14 Best Practices for Firewall Network Security

Jul 31, 2023 By The Graylog Team In Graylog
Back in the early days of corporate networking, IT departments typically deployed firewalls to keep employees from accessing non-work related content, like social media sites. While content filtering remains part of a firewall’s job, it’s no longer the primary reason for using one. In today’s connected world, firewalls are fundamental to network security.
Read Post

Graylog API Security Intro Demo

Jul 19, 2023 By Graylog In Graylog
Discover and Improve Your API Security with Graylog! In this quick demo, Rob from Resurface now Graylog, showcases how Graylog helps you understand and manage your API attack surface. From identifying Rogue, prohibited, and deprecated APIs to automatically discovering and summarizing common types of attacks and failures, Graylog streamlines API security. No technical expertise needed – the system categorizes API calls into meaningful buckets, providing detailed views, including full request and response details. Easily create custom signatures, export data, and receive alerts with Graylog's comprehensive API security solution.
View Video
graylog

Monitoring Networks with Snort IDS-IPS

Jul 18, 2023 By Jeff Darrington In Graylog
Networks are the data highways upon which you build your digital transformation infrastructure. Like interstate highways transmit goods, networks transmit data. Every connected user and device is a network digital on-ramp. When malicious actors gain unauthorized access to networks, organizations must detect and contain them as quickly as possible, requiring security analysts to embark on a digital high-speed chase.
Read Post
graylog

From Resurface to Graylog API Security: The Next Chapter

Jul 18, 2023 By Robert Dickinson In Graylog
When I started Resurface, my core thesis was that web and API security brought unique requirements requiring purpose-built data systems. Using Splunk at scale for API monitoring was/is prohibitively expensive. Using Hadoop or Kafka requires a nerd army to run at any scale. Few data platforms include a mature web or API monitoring model, so this has to be custom-overlaid at significant expense.
Read Post
graylog

Centralized Log Management for ANSSI and CIIP Framework Compliance

Jul 10, 2023 By Jeff Darrington In Graylog
Decree No. 2009-834 established ANSSI (Agence nationale de la sécurité des systèmes d’information) as the National Cybersecurity Agency of France in 2009. In 2013, Article 22 of the Military Programming Law defined ANSSI’s functions and responsibilities, giving the agency regulatory and enforcement powers. Further, ANSSI is France’s primary point of contact with the larger European Union (EU) Network and Information Systems (NIS) Directive, with Decree No.
Read Post
graylog

Privacy Risk Management Across the Data Lifecycle

Jun 29, 2023 By The Graylog Team In Graylog
As a kid, keeping a secret meant not telling anyone else information that a friend chose to share with you and trusted you to protect. In the digital era, protecting customer and employee sensitive data works similarly. Although establishing privacy controls and maintaining data protection are more difficult when managing complex IT environments, the principles underlying your data protection initiatives remain the same.
Read Post
graylog

A Guide to Digital Forensics and Incident Response (DFIR)

Jun 26, 2023 By The Graylog Team In Graylog
When you engage in a security incident investigation, you need to quickly sift through vast quantities of data. In that moment, tracking your attacker, containing the attack, and identifying the root cause are the activities that matter most. However, in an attack’s aftermath, the digital recovery process and post-incident paperwork becomes your new nightmare.
Read Post

Copyright © 2024 OpsMatters™. All rights reserved.