Log Sources

• CSV
• Flatfile
• DHCP
• DNS
• HTTP/HTTPS
• IPFIX
• Netflow (J-flow,sFlow,v5,v9)
• JSON
• Log4j
• SNMP
• Syslog
• TCP/UDP
• XML
• Scripts
• JMX
• WMI
• Fluent
• Kafka
• Logstash
• Beats

Windows:

• Windows Server
• Windows Active Directory
• Office 365
• Windows Event Log
• Microsoft IIS

Linux:

• Linux (CentOS, RedHat, Debian, itp.)
• HP UX
• Solaris
• IBM AIX
• Oracle Linux

Cloud:

• AWS
• Azure
• Openstack

Endpoint Security:

• Trend Micro
• Symantec Endpoint Protection
• McAfee
• ESET AV
• Symantec Endpoint Protection
• uberAgent

Vulnerability Scanner:

• Nessus Professional
• Rapid 7
• Tenable.sc
• Tenable.io
• Qualys
• OpenVAS
• Wazuh

 

 

• Hadoop
• MySQL
• Oracle audit log
• MSSQL
• Postgress

• Bind 9
• Bro IDS
• Brocade
• Checkpoint
• Cisco ASA
• Cisco Firepower
• F5
• Flowmon
• Forcepoint
• Fortinet
• Fujitsu Switch
• IPTables
• Juniper Networks
• Mellanox
• PaloAlto
• pfSense
• 3com
• Alcatel Lucent Router
• Snort
• Squid
• FireEye

Hypervisors:

• VMware
• Microsoft Hyper-V
• OVM

Containerization:

• Docker
• Kubernetes

• Apache HTTP Server
• IBM Websphere
• jBoss
• Log4j
• nginx
• Sudo
• Apache Tomcat
• WebLogic
• Dynatrace

• Nagios XI
• Zabbix
• op5 Monitor
• Prometheus

• Flowmon
• ArcSight
• Splunk
• IBM Qradar
• Forescout
• uberAgent
• Wazuh
• Zeek