• Platform
    • Threat Detection Marketplace Your Home for Threat Detection
    • Prime Hunt Augmented AI SOC Capabilities
    • Prime Architect AI-enhanced Detection Engineering
    • Prime Detect Data pipeline for routing detections
  • Active Threats
  • Use Cases
    • Fortify SIEM Posture Audit your SIEM posture to maximize threat visibility & address detection coverage gaps.
    • Obtain Rules for Alerting Get prioritized SIEM use cases ready-to-deploy as low-noise and high-value alerts.
    • Advance Threat Detection Access the world’s largest rule feed for emerging threats, manage & deploy detections at scale.
    • Elevate Detection Engineering Save time and costs, obtain CTI-enriched use cases, adapt CI/CD workflows.
    • Accelerate MDR Services Reduce customer churn, address technical debt in threat detection, and save on SIEM costs.
    • Hyperscale SIEM Migration Accelerate time-to-value and maximize the ROI of your SIEM migration project.
  • Services
    • Professional Services Overview Explore our on-demand services and training.
    • MITRE ATT&CK Audit Minimize blind spots and ensure comprehensive data visibility.
    • Custom Content Engineering Adopt out-of-the-box detection engineering capability to identify threats challenging your business.
    • SIEM Migration Services Accelerate time-to-value and maximize the ROI of your SIEM migration project.
  • Resources
    • Blog Research, guides, interviews
    • Events Stay tuned to our cybersecurity events
    • Ecosystem With Privacy, Performance and Efficiency at its Core
    • Customer Success Stories Learn how global organizations trust SOC Prime
    • Roota Open-Source Language for Collective Cyber Defence
    • Sigma History of Sigma Evolution
    • Industry Expertise
    • Center of Excellence for Microsoft Sentinel
    • Center of Excellence for Amazon Web Services
    • Splunk Migration & Support
    • Tools
    • Uncoder.IO
  • Company
    • Why SOC Prime? Collective cyber defense for a secure tomorrow
    • About Us Our story and mission
    • Industry Recognition Verified value for cybersecurity
    • Leadership Biography and DNA
    • Careers Job opportunities at SOC Prime
    • Privacy SOC Prime’s privacy-centric mindset
    • SOC 2 Type II Compliance Benchmark for security compliance
    • Partner Programs for Universities Sigma & MITRE ATT&CK® Education
  • 安排通话 →
  • 安排通话 →

CVE-2026-115881:严重的GoAhead TLS漏洞允许已吊销的客户端证书

Posted on 28.10.202628.10.2026 by SOC Prime Team

GoAhead嵌入式网络服务器中的一个严重漏洞可能允许被吊销的客户端证书在双向TLS认证期间保持有效,这可能使 […]

Posted in Blog, CVEsTagged CVE

如何从Palo Alto和FortiGate导出防火墙日志

Posted on 27.10.202628.10.2026 by SOC Prime Team

将 Palo Alto 或 FortiGate 日志导入可供分析的文件的可靠方式是 syslog。将防火墙的日 […]

Posted in Blog, LogTotal HOWTO

如何导出Google Workspace审核日志

Posted on 27.10.202628.10.2026 by SOC Prime Team

在 Google 管理控制台中, 报告 → 审计和调查 保存日志(登录、管理员、云端硬盘、OAuth 等),每 […]

Posted in Blog, LogTotal HOWTO

在哪可以找到Windows DNS服务器日志

Posted on 27.10.202628.10.2026 by SOC Prime Team

Windows DNS 服务器日志在事件查看器中记录到三个位置,加上一个可选的文本文件: 核心导出是从提升的命 […]

Posted in Blog, LogTotal HOWTO

如何导出 Google Cloud 审计日志

Posted on 26.10.202628.10.2026 by SOC Prime Team

使用 gcloud logging read 并在 cloudaudit.googleapis.com 上应用 […]

Posted in Blog, LogTotal HOWTO

如何导出Okta系统日志

Posted on 26.10.202628.10.2026 by SOC Prime Team

在 Okta 管理控制台中, 报告 → 系统日志 允许您搜索事件并下载结果。对于 JSON,使用系统日志 AP […]

Posted in Blog, LogTotal HOWTO

在哪里找到Nginx和Apache访问日志

Posted on 26.10.202628.10.2026 by SOC Prime Team

在 Debian 和 Ubuntu 上,Nginx 的日志记录在 /var/log/nginx/access. […]

Posted in Blog, LogTotal HOWTO

如何导出 Kubernetes 审计日志

Posted on 26.10.202628.10.2026 by SOC Prime Team

Kubernetes审计日志所在位置取决于谁运行您的控制平面。在自管集群上,它们是在控制平面节点上的JSON行 […]

Posted in Blog, LogTotal HOWTO

CVE-2026-115560:新的未修补PHP RCE风险需要立即缓解

Posted on 26.10.202628.10.2026 by SOC Prime Team

PHP 已披露 CVE-2026-115560,这是一个影响使用不寻常的 PHP 会话配置和运行时行为组合的 […]

Posted in Blog, CVEsTagged CVE

如何导出AWS CloudTrail日志

Posted on 23.10.202628.10.2026 by SOC Prime Team

对于过去90天的管理事件,可以使用CloudTrail控制台(事件历史 → 下载事件 → JSON)或aws […]

Posted in Blog, LogTotal HOWTO

Posts navigation

← Older posts
  • Platform
  • Threat Detection Marketplace
  • Prime Hunt
  • Prime Architect
  • Prime Detect
  • Ecosystem
  • Use Cases
  • Fortify SIEM Posture
  • Obtain Rules for Alerting
  • Advance Threat Detection
  • Elevate Detection Engineering
  • Accelerate MDR Services
  • Hyperscale SIEM Migration
  • Services
  • Professional Services Overview
  • MITRE ATT&CK Audit
  • Custom Content Engineering
  • SIEM Migration Services
  • Industry Expertise
  • Center of Excellence for Microsoft Sentinel
  • Center of Excellence for Amazon Web Services
  • Splunk Migration & Support
  • Tools
  • Uncoder.IO
  • Resources
  • Blog
  • Events
  • Active Threats
  • Customer Success Stories
  • Roota
  • Sigma
  • Company
  • Why SOC Prime?
  • About Us
  • Industry Recognition
  • Leadership
  • Careers
  • Privacy
  • SOC 2 Type II Compliance
  • Partner Programs for Universities
  • Change consent settings
  • Cookie Policy
  • Privacy Policy
  • LEGAL NOTICE (IMPRESSUM)
  • SOC PRIME PLATFORM TERMS OF SERVICE
  • Privacy FAQ
Engage WIth Us
  • discord
  • github
  • youtube
  • linkedin
  • facebook
  • twitter
  • bluesky

SOC Prime, SOC Prime Logo and Threat Detection Marketplace are registered trademarks of SOC Prime, Inc. All other trademarks are the property of their respective owners.

    Want to Learn More?

    We are here to help you bring order to threat detection

    By clicking Submit you confirm that you have read and agree to SOC Prime’s Privacy Policy

    Never share sensitive information (credit card numbers, social security numbers, passwords) through this form.

    We've received your form

    Thank you!

    Countries
    155
    Organizations
    11,000+
    Users
    60,000+
    Trusted by Enterprise Teams building AI SOC capabilities
    LTIMindtree
    Crowell
    BNP Paribas
    Forvis Mazars
    GOSECURE
    TAQA