Threat Hunting – Burnham Forensics

Creating a Multi-Node ELK Stack

March 17, 2019April 11, 2019 by Zachary Burnham, posted in ELK, SOC, Threat Hunting

Previously I had written a guide on Creating a Single-Node ELK Stack; covering what to do when you want create and utilize The Elastic Stack (also formally ELK) on a limited capacity, single-node basis. When assisting my roommate in creating an ELK stack of his own, I realized I had not yet described the process … Continue reading Creating a Multi-Node ELK Stack

Installing TheHive – a Security IR Platform

December 17, 2018March 17, 2019 by Zachary Burnham, posted in Incident Response, SOC, Threat Hunting

Working in a SOC environment, it is easy to get lost in the world of case management - unable to balance and juggle the information-to-incident ratio. I have recently come across one of the better solutions to this issue; TheHive. According to their website, TheHive is a "scalable 4-in-1 open source and free security incident … Continue reading Installing TheHive – a Security IR Platform