Alienvault OTX enrichment in Graylog

Graylog Central (peer support)
1

1. Describe your incident:
My question: Has anyone enriched their logs with AlienVault OTX? How are you enriching your threat IDs with more information? Is there, for example, a CSV file that I can download or pull to enhance my Graylog with more readable information than what I currently get from AlienVault OTX? This is what I’m currently enriching my log files with, and I need more detailed information to create readable dashboards. I would appreciate an answer ! Thanks in advance :smiley:

image
image1327×248 15.9 KB

2. Describe your environment:

  • OS Information: Windows

  • Package Version: 6.0.3

  • Service logs, configurations, and environment variables:

2

PUSH PUSH PUSH PUSH

Is anyone out there using AlienVault OTX to enrich their log files or has a CSV from AlienVault to get “more specific” information about the IDs or names of the threats? Because they are not very “meaningful.”

3

PUSH PUSH PUSH PUSH PUSH PUSH PUSH PUSH PUSH PUSH PUSH

Someone has some information for me please ?

4

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.