Save
Upgrade to remove ads
Busy. Please wait.
Log in with Clever
or
show password
Forgot Password?
Don't have an account?  Sign up 
Sign up using Clever
or
Username is available taken
show password


Make sure to remember your password. If you forget it there is no way for StudyStack to send you a reset link. You would need to create a new account. Your email address is only used to allow you to reset your password. See our Privacy Policy and Terms of Service.

Already a StudyStack user? Log In

Reset Password
Enter the associated with your account, and we'll email you a link to reset your password.
focusNode
Didn't know it?
click below
 
Knew it?
click below
Don't Know
Remaining cards (0)
Know
0:00
edit
Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.

  Normal Size     Small Size show me how

Investigating an inc

Investigating an incident

QuestionAnswer
Security information and event monitoring (SIEM) Combination of different data sources into one tool that provides real-time analysis of security alerts generated by applications and network hardware
Log file A file that records either events that occur in an operating system or other software that runs, or messages between different users of a communication software
Syslog/Rsyslog/Syslog-ng Variations of syslog which all permit the logging of data from different types of systems in a central repository
Journalctl Mixed command wine, utility used for query and displaying logs from the journald, which is responsible for managing and storing log data on Linux machine
NXLog A multi-platform log management tool that helps to easily identify security risks, policy breaches, or analyze operational problems
Rsyslog/Syslog-ng Linux and Unix
NXlog unix, Linux, and Windows
NetFlow Network protocol system created by Cisco that collects active IP network traffic as it flows in or out of an interface, including its point of origin, destination, volume, and paths on the network
Sampled flow (SFlow) Provide a means for exporting truncated packets, together with interface counters for the purpose of network monitoring
Internet protocol flow information export (IPFIX) Universal standard of export for Internet protocol flow information from routers, probes, and other devices that are used by mediation systems, accounting and billing systems, and network management systems to facilitate services
Metadata Data that describes other data by providing an underlying definition or description by summarizing basic information about data that makes finding and working with particular instances of data easier
dashboards visually display information from various systems, used in security operation centers for a comprehensive overview
Created by: user-2044395
 

 



Voices

Use these flashcards to help memorize information. Look at the large card and try to recall what is on the other side. Then click the card to flip it. If you knew the answer, click the green Know box. Otherwise, click the red Don't know box.

When you've placed seven or more cards in the Don't know box, click "retry" to try those cards again.

If you've accidentally put the card in the wrong box, just click on the card to take it out of the box.

You can also use your keyboard to move the cards as follows:

If you are logged in to your account, this website will remember which cards you know and don't know so that they are in the same box the next time you log in.

When you need a break, try one of the other activities listed below the flashcards like Matching, Snowman, or Hungry Bug. Although it may feel like you're playing a game, your brain is still making more connections with the information to help you out.

To see how well you know the information, try the Quiz or Test activity.

Pass complete!
"Know" box contains:
Time elapsed:
Retries:
restart all cards