You know that feeling when you discover something you think you should've discovered way earlier? I get this feeling everyday.
Yesterday i discovered #wazuh and i am stunned - like how didn't i know about it. This is too good to true.
I've installed the agent on all of my devices and couldn't be happier.

I'm leaving this here in case you don't already know about it.
https://wazuh.com

XDR : déploiement de Wazuh pour créer un lab cybersécurité https://www.it-connect.fr/xdr-deploiement-de-wazuh-pour-creer-un-lab-cybersecurite/ #Cybersécurité #wazuh #Lab #XDR

Microsoft XDR Automatic attack disruption just got better. It now takes into account the device role and criticality to preserve key network functionality while protecting the assets.

Plus IP address based containment of undiscovered devices! #XDR

https://techcommunity.microsoft.com/blog/microsoftthreatprotectionblog/automatic-attack-disruption-enhanced-containment-for-critical-assets-and-shadow-/4402157

Manufacturer protected from the severity of a ransomware attack by layered security, as reported by Bryley partner Barracuda ... [8 min. read] https://bryl.link/12g #xdr #layeredsecurity #itservices

Wazuh: A Solução SIEM Ideal para sua Empresa!

O Wazuh é uma plataforma open source que oferece monitoramento de segurança robusto e resposta a incidentes. Com funcionalidades de SIEM e XDR, ele garante proteção em tempo real para ambientes on-premise e na nuvem, ajudando sua empresa a detectar e reagir rapidamente a ameaças.

Descubra como o Wazuh pode fortalecer sua segurança: Wazuh: O SIEM Certo para sua Empresa

https://www.sunoltech.com/palo-alto-cortex-xdr-detection-and-response/
Palo Alto Cortex XDR detection and response AI-based continuous security platform. Palo Alto ENT SUP AGRMNT 1 YEAR PREM SUP TIER R PAN-ENT-PREM-ESA-R-1YR @paloalto #cortex #XDR #enterprise #support #agreement #1year #tierr @SunolTech

Wazuh: A Solução SIEM Ideal para sua Empresa!

O Wazuh é uma plataforma open source que oferece monitoramento de segurança robusto e resposta a incidentes. Com funcionalidades de SIEM e XDR, ele garante proteção em tempo real para ambientes on-premise e na nuvem, ajudando sua empresa a detectar e reagir rapidamente a ameaças.

Descubra como o Wazuh pode fortalecer sua segurança: Wazuh: O SIEM Certo para sua Empresa

Wazuh: A Solução SIEM Ideal para sua Empresa!

O Wazuh é uma plataforma open source que oferece monitoramento de segurança robusto e resposta a incidentes. Com funcionalidades de SIEM e XDR, ele garante proteção em tempo real para ambientes on-premise e na nuvem, ajudando sua empresa a detectar e reagir rapidamente a ameaças.

Descubra como o Wazuh pode fortalecer sua segurança: Wazuh: O SIEM Certo para sua Empresa

Think your disconnected environment can’t use AI-driven protection? Think again.
With Microsoft’s Streamlined Connectivity, enabling Defender for Endpoint in restricted networks has never been easier. Proxies make it possible—here’s how to do it right: https://blog.brianbaldock.net/mde-proxies-2025
#CyberSecurity #DefenderForEndpoint #XDR

Wazuh: A Solução SIEM Ideal para sua Empresa!

O Wazuh é uma plataforma open source que oferece monitoramento de segurança robusto e resposta a incidentes. Com funcionalidades de SIEM e XDR, ele garante proteção em tempo real para ambientes on-premise e na nuvem, ajudando sua empresa a detectar e reagir rapidamente a ameaças.

Descubra como o Wazuh pode fortalecer sua segurança: Wazuh: O SIEM Certo para sua Empresa

Proxies aren’t the enemy—they’re the bridge.

Defender for Endpoint needs the cloud to deliver real-time protection, but in restricted networks, proxies remain essential. With fewer URLs to allow-list in 2025, securely enabling Defender is easier than ever.

Read how to get it right: https://blog.brianbaldock.net/mde-proxies-2025

Want basic SentinelOne Data in your Grafanadashboard?

telegraf.conf.d/s1.conf:

[[inputs.http]]
urls = ["https://yourniceinstance.sentinelone.net/web/api/v2.1/threats?tenant=true&resolved=false"]
method = "GET"
json_query = "{data.@valid.#}.@pretty"
tagexclude = ["url", "host"]
name_override = "s1_unresolved_threat_count"
## Optional HTTP headers
headers = {"Authorization" = "Bearer YourNiceApiToken"}
data_format = "json"

SIEM-Technologie 2024: KI & ML treiben automatisierte Bedrohungserkennung voran. Cloud-SIEMs bieten Kosten- & Effizienzvorteile, während XDR & SOAR für Echtzeitschutz sorgen. Der Markt wächst rasant! #CyberSecurity #SIEM #AI #XDR #SOAR

Top 9 Arctic Wolf Competitors and Alternatives – Source: heimdalsecurity.com https://ciso2ciso.com/top-9-arctic-wolf-competitors-and-alternatives-source-heimdalsecurity-com/ #rssfeedpostgeneratorecho #HeimdalSecuritycom #CyberSecurityNews #heimdalsecurity #Comparisons #XDR

If you work with any Microsoft Security product #YellowHat is the conference for you.
Technical deep dives, no marketing, and an amazing speaker lineup.

Register today to join the livestream for free on https://yellowhat.live/

Secure your systems with Wazuh! Set up your lab environment for XDR and SIEM, and experience top-notch threat detection and incident response. Get started today and stay ahead in cybersecurity! #Wazuh #CyberSecurity #XDR #SIEM"

https://www.cipv6.de/worp/index.php/2025/01/30/getting-started-with-wazuh-setting-up-your-lab-environment-for-xdr-and-siem/

Revolutionize Your Cybersecurity with @heimdal® The Industry-Leading XDR Suite!

Your Benefits:
Simplified management via a unified console.
Deep bi-lateral telemetry for comprehensive oversight.
World-class support for unmatched peace of mind.

Take the next step in securing your business.

Request a Demo with @emt Distribution META : https://zurl.co/Bsafj

New Defender for Endpoint feature just dropped: Aggregated reporting.

This feature seems to bridge a gap of otherwise capped data collected.

Check the supported tables also action types in the docs

#XDR #MDE

https://learn.microsoft.com/en-us/defender-endpoint/aggregated-reporting

Ninjacats assemble. On March 6th '25 there will be the first #YellowHat conference

Free Live Stream or
attend in Amsterdam (very limited)

https://yellowhat.live/

New Year, New Blog

https://academy.bluraven.io/blog/mastering-log-ingestion-delay-in-detection-engineering