Advanced Search
Search Results
262 total results found
What is a Log Source?
What is a Log Source? A log source refers to any system, application, or device that generates log data. Logs are records of events that occur within these systems, and they provide valuable information for monitoring, troubleshooting, and analyzing the perfo...
Log Sources vs. Log Collectors
Log Sources vs. Log Collectors Log Sources: Definition: Log sources are the origin points where log data is generated. These can be operating systems, applications, network devices, cloud services, and more. Examples: Windows Event Logs, Apache Web Se...
Log Collector Installation - Windows Automatic
Log Collector Installation in CyTech - Aquila This guide outlines the step-by-step process for deploying the Elastic Agent as a log collector within the CyTech - Aquila environment. Following these instructions will establish a secure and automated mechanism ...
How to uninstall Elastic Agent - Windows
Uninstall Elastic Agent There are two primary methods to uninstall the Elastic Agent on Windows: Manual Uninstallation via the Windows GUI – Navigate through the Control Panel or directly to the installation directory to initiate the uninstaller. Un...
Log Collector Installation - Windows Manual
Log Collector Installation in CyTech - Aquila This guide outlines the step-by-step process for deploying the Elastic Agent as a log collector within the CyTech - Aquila environment. Following these instructions will establish a secure and automated mechanism ...
CyTech Aquila - Cloud Security Posture Management (CSPM) Module
Cloud Security Posture Management (CSPM) Overview: CSPM helps secure your cloud infrastructure by discovering and evaluating cloud services (e.g., storage, compute, IAM) against CIS benchmarks to identify and remediate configuration risks that may affect dat...
GCP and CSPM-GCP Integration
This Google Cloud integration collects and analyzes a wide range of logs and metrics to provide comprehensive visibility into your cloud environment. It ingests Firewall Logs, VPC Flow Logs, DNS Logs, and Load Balancing Logs exported from Cloud Logging via a P...
GCP - How to enable Cloud Asset API
Please refer to these instructions to enable Cloud Asset API. To enable the Cloud Asset API for your Google Cloud project, follow these steps: Go to the Google Cloud Console: Navigate to Google Cloud Console. Select Your Project: ...
GCP - How to Add a Role
Go to the Google Cloud Console. Navigate to IAM. Click on "IAM & Admin" in the left navigation menu. Select "IAM" from the submenu. Find your service account. In the IAM permissions list, locate your existing service accoun...
GCP - Setup a Log Sink
Setup Log Sink Using Google Cloud Console Navigate to "Logging" > "Log Router" > "Create Sink". Provide a Sink name and description. For Sink destination, select "Cloud Pub/Sub topic". Choose an existing topic "cytech-elasticsearch". Unde...
Phishing Campaign - Setting Up Microsoft o365
Why Whitelist in Office 365? Whitelisting ensures the CyTech - AQUILA Phishing Simulation(PS) Module functions without issue and prevents PS emails from being automatically moved to the spam folder or notifying users about potential phishing emails. The Conne...
Cyber Monitoring Dashboard
Navigation to Cyber Monitoring Dashboard To navigate your way to the Cyber Monitoring Dashboard, you must click the redirect icon beside the "Cyber Monitoring" title. This will then redirect you to the dashboard as seen below. Here you will see the 6 mod...
Whitelist in Google Workspace
Whitelisting Simulated Phishing in Google Workspace (Gmail) For Secure Practice Simulation Emails This step-by-step guide is intended for Google Workspace administrators to allow simulated phishing emails from Secure Practice by properly configuring Gmail to...
Cyber Incident Management (SIEM and XDR)
Welcome to the Cyber Incident Management Dashboard module. The Main Dashboard serves as the central hub for viewing all critical and relevant data associated with this module. It provides a consolidated interface where key metrics, updates, and operational in...
Restart Log Collector Agent - Windows
Brief DescriptionThe Log Collector Agent is a single, unified tool that simplifies adding monitoring capabilities to yoursystems. It can collect various data types, including logs, metrics, and securityinformation, from your hosts. Locating Log Collector Agen...
Whitelist Microsoft Office 365
Why Whitelist in Office 365? Whitelisting ensures the CyTech - AQUILA Phishing Simulation(PS) Module functions without issue and prevents PS emails from being automatically moved to the spam folder or notifying users about potential phishing emails. The Conne...
CrowdStrike Integration - using API
Steps to Get Client ID and Client Secret in CrowdStrike Falcon Log in to the Falcon Console Go to: https://falcon.crowdstrike.com Use your admin credentials to log in. Navigate to API Clients and Keys Click on the "Support" (questi...
Whitelist Cisco IronPort (ESA)
Whitelist Cisco IronPort (ESA) for CyTech – AQUILA Phishing Simulation Why Whitelist in Cisco IronPort? Whitelisting ensures that the CyTech - AQUILA Phishing Simulation (PS) emails are delivered without interference from Cisco IronPort’s anti-spam and threa...
Cloud Security Posture Management CSPM
Welcome to the Cloud Security Posture Management CSPM module. The Cloud Security Posture Dashboard provides a streamlined view of your AWS compliance status. It highlights the overall security posture, identifies areas needing attention, and tracks complia...