Blue Team Village·44 min
Lennart Koopmann
Demonstrates deploying and querying Graylog centralized log management for real-time threat investigation in OpenSOC.
grayloglog-managementopensoc+1
opensoc
8 talks tagged with this topic.
Filters+
Loading filters…
1–8 of 8 talks · loading…
Blue Team Village·31 min
Tim Johnson
Demonstrates using Kibana to query, visualize, and analyze security event logs during the OpenSOC defense CTF.
kibanaopensocctf+2
Blue Team Village·20 min
Bashar Shamma
Walks through full packet capture analysis, session reconstruction, and PCAP carving using Moloch in OpenSOC.
molochfull-packet-captureopensoc+1
Blue Team Village·9 min
Whitney Champion
Demonstrates using Osquery SQL syntax to query endpoint state and investigate security incidents during the OpenSOC defense CTF.
osqueryopensocctf+2
Blue Team Village·32 min
Josh
Explains how to write, tune, and inspect Suricata intrusion detection signatures to identify exploit traffic in OpenSOC.
suricataids-ipsopensoc+1
Blue Team Village·33 min
Thinkst Canary
Shows how deception technology and Thinkst Canary tokens generate high-fidelity alerts during unauthorized network traversal.
canary-tokensdeceptionopensoc+1
Blue Team Village·43 min
Mike Cohen
Demonstrates endpoint hunting, artifact collection, and forensic querying using Velociraptor VQL in OpenSOC.
velociraptorendpoint-forensicsopensoc+1
Blue Team Village·33 min
Zeek Team
Shows how to analyze network traffic, extract protocol metadata, and identify malicious connections using Zeek in OpenSOC.
zeeknetwork-securityopensoc+1