sans-blue-team / sec555-mdwiki-v1 Goto Github PK

• Screenshot shows "Windows event log" instead of "Windows event logs"
• Screenshot just before "Click Save YAML file" is incorrect

Section 3

lab1.1-aggregator\_only -> lab1.1-aggregator_only

Warning and Error messages in Kibana:

Log Cleared Rule Solution

$ elastalert --config... -> elastalert --config... (Remove $ )

• Several commands start with $ , so when copying and pasting, it throws an error.

• Before launching Firefox/Kibana, have the students Ctrl-c logstash and exit all terminals.

Several commands start with $ , so when copying and pasting, it throws an error.

Heading

Missing Fields

• Formatting

Frequency Analysis

• Formatting