Vega-Lite with Kibana to Parse and Display IP Activity over Time, (Tue, Aug 27th)

SANS Internet Storm Center, InfoCON: green 2024-08-27

Summary:

I have been curious for a while looking at Kibana&#;x26;#;39;s Vega log parsing options to try to come up with displays and layout that aren&#;x26;#;39;t standard in Kibana. A lot of the potential layouts already exists in Kibana but some of the other aren&#;x26;#;39;t easily created and using Vega [2] provides some of the building block to create some of the output that I am researching and testing with DShield sensor data captured by cowrie honeypot [4].

Link:

https://isc.sans.edu/diary/rss/31210

From feeds:

Intel Hub ยป T01 - SANS Internet Storm Center, InfoCON: green

Tags:

Date tagged:

08/27/2024, 23:19

Date published:

08/27/2024, 20:34