76 matches found
DFIR-O365RC
Table des matières : 1. Description du module 2. Installation et prérequis 1. Utilisation de Docker 2. Installation manuelle 3. Gestion de l'application DFIR-O365RC 1. Création de l'application 2. Mise à jour de l'application 3. Suppression de l'application 4. Permissions et exigences de licence ...
grove
Grove est un framework de collecte de logs en tant que service SaaS, conçu pour prendre en charge la collecte de logs provenant de services qui ne supportent pas nativement le streaming de logs. Grove permet aux équipes de collecter les événements liés à la sécurité de leurs fournisseurs de maniè...
CorelightForSecOps
Collecter les journaux Corelight Sensor Ce document décrit comment collecter les journaux Corelight Sensor en configurant le Corelight Sensor et un forwarder Chronicle. Ce document répertorie également les types de journaux pris en charge et les versions Corelight prises en charge. Pour plus...
DShield-SIEM
Collecte des journaux du capteur DShield avec Elasticsearch Introduction Ceci est un fork et une mise à jour importante de la publication initiale sur le site Web ISC Storm Center par Scott Jensen en tant que document BACS et des scripts publiés sur Github. https://github.com/fkadriver/Dshield-EL...
HTSOC
HTSOC — Système SOC intégré pour la surveillance, la détection et l'investigation d'événements HTSOC est un système Security Operations Center auto-construit dans un environnement de laboratoire. Le système combine la collecte de logs, la détection via Splunk, la gestion des alertes/cas via...
Phant0m
Phant0m | Killer dei Log degli Eventi di Windows Svchost è essenziale nell'implementazione dei cosiddetti processi di servizio condivisi, in cui un numero di servizi può condividere un processo al fine di ridurre il consumo di risorse. Raggruppare più servizi in un unico processo conserva risorse...
EUVD-2026-53474
A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information. This vulnerability is due to the logging of sensitive information. An attacker could exploit this vulnerability by enabling a specific logging...
PT-2026-60460
Name of the Vulnerable Software and Affected Versions ubuntu-pro-client affected versions not specified Description An insecure symlink following issue exists within the pro collect-logs command framework. The utility uses predictable temporary file paths or user-accessible log directories to...
CVE-2026-10847
A local privilege escalation vulnerability exists in Check Point Identity Agent Full for Windows OS. An authenticated local user may be able to execute arbitrary code with SYSTEM privileges due to improper handling of executable resolution during the log collection process. Successful exploitatio...
EUVD-2026-36247
A local privilege escalation vulnerability exists in Check Point Identity Agent Full for Windows OS. An authenticated local user may be able to execute arbitrary code with SYSTEM privileges due to improper handling of executable resolution during the log collection process. Successful exploitatio...
CVE-2026-10847 Local Privilege Escalation vulnerability in Check Point Identity Agent Full for Windows OS
A local privilege escalation vulnerability exists in Check Point Identity Agent Full for Windows OS. An authenticated local user may be able to execute arbitrary code with SYSTEM privileges due to improper handling of executable resolution during the log collection process. Successful exploitatio...
CVE-2026-10847
CVE-2026-10847 is a local privilege escalation affecting Check Point Identity Agent Full for Windows OS. An authenticated local user may gain SYSTEM privileges by exploiting improper handling of executable resolution during log collection. The documented impact is elevated privileges on the affec...
CVE-2026-10847 Local Privilege Escalation vulnerability in Check Point Identity Agent Full for Windows OS
A local privilege escalation vulnerability exists in Check Point Identity Agent Full for Windows OS. An authenticated local user may be able to execute arbitrary code with SYSTEM privileges due to improper handling of executable resolution during the log collection process. Successful exploitatio...
PT-2026-48661
Name of the Vulnerable Software and Affected Versions Check Point Identity Agent Full for Windows OS affected versions not specified Description A local privilege escalation issue exists where an authenticated local user can execute arbitrary code with SYSTEM privileges. This occurs due to improp...
NetSecBed: A Container-Native Testbed for Reproducible Cybersecurity Experimentation
Cybersecurity research increasingly depends on reproducible evidence, such as traffic traces, logs, and labeled datasets, yet most public datasets remain static and offer limited support for controlled re-execution and traceability, especially in heterogeneous multi-protocol environments. This...
How to Change Where Logs are Stored on the Veeam Appliances
Changing Log Location Will Break Automated Log Collection The automated log collection tools built into both the Veeam Backup & Replication Web UI of the Veeam Software Appliance and the "Create support bundle" function within the Host Management Console collect logs only from the default log...
MiracleLinux 3 : sos-1.7-9.62.0.1.AXS3 (AXSA:2012-526:01)
The remote MiracleLinux 3 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2012-526:01 advisory. Sos is a set of tools that gathers information about system hardware and configuration. The information can then be used for diagnostic purposes and debugging...
Release Information for Veeam Backup for Microsoft 365 8.2 and Cumulative Patches
More Recent Version Available Please find the latest version of Veeam Backup for Microsoft 365 here: Veeam Downloads - Latest Version Build Numbers and Versions of Veeam Backup for Microsoft 365 Requirements This release can be used to: update manually from a previous Veeam Backup for Microsoft 3...
How to Collect Logs from Veeam Appliance Installer
Purpose This article documents how to collect logs from the installer for the Software Appliances included with Veeam Backup & Replication 13 Veeam Software Appliance, Veeam Infrastructure Appliance, and Veeam Hardened Repository Appliance. This procedure may be required if an installation-relate...