4.9 Monitoring & logging
Every entry filed under Monitoring & logging and its subtopics.
Level
- Beginner 6
- Intermediate 8
- Advanced 0
What kind of help
What do these mean?
- Beginner
- You are new to this topic.
- Intermediate
- You use it, and want to get better.
- Advanced
- You know it well and need the details.
- Guided project
- Build something small from start to finish, step by step.
- Explains an idea
- Plain words on how something works and why.
- Step by step
- Numbered steps to get one task done.
- Cheat sheet
- Commands and options in a table, to look up fast.
- Fixes an error
- An error message, what it means, and how to solve it.
8 entries match these filters
- 0439 osquery: query your endpoints like a SQL database osquery exposes the state of a Linux, macOS or Windows machine as SQL tables, so you can ask which processes are listening,… Linux, macOS, Windows Repo Detection & threat hunting · Prometheus & Grafana 15 Oct 2026
- 0434 Wazuh: an open source security platform with agents, SIEM and XDR Wazuh installs a small agent on each server and sends its logs, file changes and package lists to a central manager that… Linux, macOS, Windows Repo Detection & threat hunting · Logs 15 Oct 2026
- 0440 pySigma: the Python library that converts Sigma rules into queries pySigma parses Sigma detection rules and, with backend plugins, converts them into native queries for Splunk, Elastic, Loki, Sentinel and other log… Any system Repo Detection & threat hunting · Logs 15 Oct 2026
- 0443 Security monitoring explained: IDS, SIEM, EDR and where the logs go A plain language map of the security monitoring tool families, what each one watches, how they feed one another, and where the… Beginner · Explains an idea · Any system Article Detection & threat hunting · Logs 15 Oct 2026
- 0431 What is a detection rule? Sigma explained for beginners A detection rule describes one kind of suspicious activity in logs. Sigma is the shared, tool-independent way to write such rules, so… Beginner · Explains an idea · Any system Article Alerting & dashboards · Security resources & detection 15 Oct 2026
- 0374 Alert rules that do not wake you for nothing How to design alerts people trust: alert on symptoms not causes, use for durations, separate page from ticket severities, group and inhibit… Intermediate · Explains an idea · Any system Article Alerting & dashboards 15 Oct 2026
- 0339 Uptime Kuma: self-hosted uptime monitoring Uptime Kuma is a self-hosted monitoring tool with a web UI that checks websites, TCP ports, DNS, Docker containers and more, draws… Linux, macOS, Windows Repo Alerting & dashboards · Docker basics 15 Oct 2026
- 0291 What is a log? A log is a running record of what a program did and when, written to a file so you can look back… Beginner · Explains an idea · Any system Article Logs 15 Oct 2026