I just found MozDef…the Mozilla Defense platform
Form is docs, it runs in elasticsearch and mongo db abs is based on the Gelf inputs
Has anyone integrated this with Graylog , or on top of Graylog? Seems like the Siem intelligence that would he great with Graylog
Maybe I’m over simplifying?
Tp