Logsign Unified SecOps Platform

Getting Started

• EPS Calculator & Disk Planning
• Logsign Unified Security Operations Platform Overview
• System Requirements
• Download and Installation
• Upgrade to Logsign Carbon on User Interface
• Installation of Ubuntu 20.04 & Logsign
• See all 8 articles

Deployment

• Large-scale Logsign Deployment Overview
• Understanding the Need for a Cluster
• Logsign Cluster Architecture and Services
• Managed Service Providers (MSS) Integration
• Defining Identity For Ldap Authentication
• Usage of Custom Plugin Tool
• See all 11 articles

Integration

• Webhook / REST API - Fortigate BAN IP
• Crowdstrike Falcon Integration
• Azure Graph Security Integration
• Advanced Linux - Suse Linux Logging Model - Manual Installation Method
• AWS SecurityHub - Event Poller
• MongoDB Integration
• See all 57 articles

Enrichment Technologies

• Nested Column Architecture
• Event Mapping Technology
• Position Based Enrichment Technology
• Location Based Enrichment Technology
• Geoip Lookup Service Capability
• Ldap / AD Connection Enrichment and Modifier Technology

Search Fundamentals / Data Aggregation

• Understanding Aggregated Data
• Basic Search with Lucene
• Ability to Use Lucene Techniques Query for Search
• Ability to Use Lucene Techniques Query in Incident Management
• Investigating Anomalies by Understanding Behavior
• Add or Remove Result Fields
• See all 10 articles

Security Analytics

• Predefined Dashboards Overview
• Creating a New Category for Dashboard
• Choosing right widgets for log set(s)
• Data Insights and Visualizations with High Possibility Incident Logs
• Health Monitoring and Maintenance Dashboard
• File Access Control Overview
• See all 18 articles

Alert Management

• Understanding Alert Rules
• Creating a New Alert Rule
• Analysis of Alerts
• List & Behaviors
• Understanding Static List
• Understanding the Statistical Lists
• See all 8 articles

Threat Intelligence Service

• Understanding of Threat Intelligence Service
• Enablement of Logsign Threat Intelligence
• Monitoring of Threat Activities

User Entity Behavior Analytics

• User Entity Behavior Analytics (UEBA) Overview
• Detecting and Investigating Insider Threats with UEBA
• Defining And Management - Identity & Assets For UEBA

Investigate

• SLA Management in Logsign
• Adding Comment and Decision in Incident Management
• Task Management
• Incident Management Overview
• Incident Investigate
• Incident Lifecycle Management
• See all 16 articles

Responses

• WinRM Response Integration
• ManageEngine - ServiceDesk Plus Response Integration
• Barracuda CloudGen Firewall Responses Integration
• FortiGate Firewall Responses Integration
• MDR Solution with Logsign
• Sonicwall Response Integration
• See all 49 articles

Data Management

• Logsign Leaf System Requirements
• EPS Stats & Reading Graphics
• Offline Report Cluster Architecture - Management
• Data Management Resilience and High Availability for Logsign
• Creation Input Filter by Regex
• Index Management in Logsign
• See all 19 articles

Account and Views ( Delegation )

• Overview of User Management
• Users
• Roles

System

• Network Interfaces
• Date & Time Settings
• Most Used Ubuntu Commands
• System Update
• Logsign StandAlone Server Power State process.
• Company Settings

Maintenance

• Logsign - External SNMP Settings
• Installing VMware Tools on Ubuntu
• Source Stats
• Support Platform
• Screen Commands in Linux
• Vlan Tagging for Network Configuration
• See all 8 articles

Troubleshooting

• Configuring a New Disk with Second LVM on Linux
• Leaf Module Detailed Technical Information and Network Troubleshooting
• Response Integration Troubleshooting
• Mail Notification Troubleshooting
• Alert Engine - Alert Trigger Troubleshooting
• Understanding Logsign System Logs
• See all 15 articles