Security information and event management Lab

Question

Hello,

I have set up an ELK SIEM on my home laptop through Virtual Box and I am wanting to set up a server to running data through to see how the tool works and develop my skills. I know there is a cloud-based SIEM but I want to use the SIEM that I have set up. How can I go about doing this type of lab? Thank you.

V/r,
Donald S. Hunter

Answer 1

@Donald S Hunter Jr Thanks for reaching out.

This forum is dedicated for Microsoft Azure services. We will be glad to answer Microsoft SIEM solution "Sentinel" queries.
Looking at your question for elastic SIEM setup, I think the following link can help you with setting up a lab SIEM solution on elastic SIEM :

https://unicornsec.com/home/siem-home-lab-series-part-1
https://logz.io/learn/complete-guide-elk-stack/

---------------------------------------------------------------------------------------------------------

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.