Enriching Events with Data from a Threat List

Presented by

Desi Gavis-Hughson, Cribl

About this talk

Security engineers: This one is for you. When you’re doing an investigation, you can use Cribl LogStream’s DNS Lookup function to filter out suspicious events from known good domains.
Related topics:

More from this channel

Upcoming talks (0)
On-demand talks (111)
Subscribers (13029)
Cribl, the Data Engine for IT and Security, empowers organizations to transform their data strategy. Customers use Cribl to analyze, collect, process, and route all IT and security data, delivering the choice, control, and flexibility required to adapt to their ever-changing needs. Interested in seeing first-hand how Cribl can support your use case? Sign up for Cribl.Cloud and process up to 1TB/day, for free! https://cribl.io/cribl-cloud/try-cribl-cloud/