Webinar: Defensive Toolkit: ELK

Indhold

An alert fires in Elastic. Something is wrong, but what actually happened? Join this SagaLabs webinar for a practical introduction to investigating security incidents using the Elastic Stack (ELK).

Together, we will follow a realistic cyberattack in a simulated enterprise environment and work our way from the first suspicious alert to a clearer picture of the incident.
We will search through logs, uncover traces of attacker activity, pivot between related events, and gradually build a timeline of the attack.

The goal is to answer the questions that matter during an investigation: How did the attacker get in? What did they do? Which systems were affected? And how far did the compromise spread?

Along the way, you will learn practical methods for filtering data, following leads, separating useful evidence from noise, and turning individual log entries into a coherent incident story.

While we will use Elastic during the webinar, the investigation techniques can also be applied when working with other security platforms.

Målgruppe

Medlemmer af KODEX

Info

Webinaret afholdes på dansk.

Underviser:

SagaLabs er en dansk virksomhed specialiseret i realistisk cybersikkerhedstræning. Med rødder i Forsvaret udvikler de hands-on labs og scenarier, hvor deltagerne træner i alt fra detektering til avancerede angrebsteknikker.
Træningen foregår i deres cyber range-platform, der kombinerer teknisk realisme med praktisk læring. Instruktørerne hos SagaLabs er højt specialiserede fagfolk, der til daglig arbejder med cybersikkerhed i kritiske virksomheder og organisationer.
Dermed sikres deltagerne undervisning med direkte afsæt i den digitale frontlinje og de trusler, som danske virksomheder står overfor

Arrangør

Log ind for at tilmelde dig