alavret
a4e7f4deb8
correct query no 6 in AIM group
|
1 ano atrás | |
|---|---|---|
| .. | ||
| backup | 2 anos atrás | |
| README.md | 2 anos atrás | |
| README_RU.md | 2 anos atrás | |
| Use-casesANDsearches.docx | 2 anos atrás | |
| Use-casesANDsearches.pdf | 2 anos atrás | |
| Use-casesANDsearches_RU.docx | 1 ano atrás | |
| Use-casesANDsearches_RU.pdf | 1 ano atrás | |
README.md
Use cases and important security events in audit logs
This section contains use cases and important security events on the Yandex.Cloud platform.
Actual Use Cases and important security events are collected in the repository file here.Use-casesANDsearches.pdf
You can ship audit logs from the service Audit Trails in Cloud Logging or in Yandex Managed Service for Elasticsearch (ELK) or in your other own SIEM
Syntax of file
Event analysis expressions are prepared in KQL (ElsticSearch) and CloudLogging to choose
Example Analysis of Events in Cloud Logging
An example of event analysis in ELK
An example of event analysis in YQ
