by Eric Ooi | Mar 6, 2023 | cool tools, featured, how-to, information security
Elastic develops the popular log analytics platform, the Elastic Stack, which supports a variety of search, observability, and security use cases through its many out of the box integrations. It’s a great platform for collecting, analyzing, and visualizing data... 
by Eric Ooi | Aug 22, 2019 | cool tools, featured, how-to, incident response, information security, network security monitoring
Zeek is my favorite network security monitoring platform, and I’ve used it throughout my career. It generates rich network metadata that’s incredibly valuable for incident response, forensics, and general troubleshooting. For most people, the main challenge with... 
by Eric Ooi | Sep 2, 2013 | certifications, featured, information security
As I mentioned in a previous post, I recently took SANS SEC 504 and have since been studying for the accompanying GIAC Certified Incident Handler (GCIH) certification. I’m happy to say that over the weekend I passed (thank you, thank you) and wanted to share my...