• Platform
    • Threat Detection Marketplace Your Home for Threat Detection
    • Prime Hunt Augmented AI SOC Capabilities
    • Prime Architect AI-enhanced Detection Engineering
    • Prime Detect Data pipeline for routing detections
  • Active Threats
  • Use Cases
    • Fortify SIEM Posture Audit your SIEM posture to maximize threat visibility & address detection coverage gaps.
    • Obtain Rules for Alerting Get prioritized SIEM use cases ready-to-deploy as low-noise and high-value alerts.
    • Advance Threat Detection Access the world’s largest rule feed for emerging threats, manage & deploy detections at scale.
    • Elevate Detection Engineering Save time and costs, obtain CTI-enriched use cases, adapt CI/CD workflows.
    • Accelerate MDR Services Reduce customer churn, address technical debt in threat detection, and save on SIEM costs.
    • Hyperscale SIEM Migration Accelerate time-to-value and maximize the ROI of your SIEM migration project.
  • Services
    • Professional Services Overview Explore our on-demand services and training.
    • MITRE ATT&CK Audit Minimize blind spots and ensure comprehensive data visibility.
    • Custom Content Engineering Adopt out-of-the-box detection engineering capability to identify threats challenging your business.
    • SIEM Migration Services Accelerate time-to-value and maximize the ROI of your SIEM migration project.
  • Resources
    • Blog Research, guides, interviews
    • Events Stay tuned to our cybersecurity events
    • Ecosystem With Privacy, Performance and Efficiency at its Core
    • Customer Success Stories Learn how global organizations trust SOC Prime
    • Roota Open-Source Language for Collective Cyber Defence
    • Sigma History of Sigma Evolution
    • Industry Expertise
    • Center of Excellence for Microsoft Sentinel
    • Center of Excellence for Amazon Web Services
    • Splunk Migration & Support
    • Tools
    • Uncoder.IO
  • Company
    • Why SOC Prime? Collective cyber defense for a secure tomorrow
    • About Us Our story and mission
    • Industry Recognition Verified value for cybersecurity
    • Leadership Biography and DNA
    • Careers Job opportunities at SOC Prime
    • Privacy SOC Prime’s privacy-centric mindset
    • SOC 2 Type II Compliance Benchmark for security compliance
    • Partner Programs for Universities Sigma & MITRE ATT&CK® Education
  • 安排通话 →
  • 安排通话 →

如何导出Microsoft Entra ID登录日志

Posted on 23.10.202628.10.2026 by SOC Prime Team

在Microsoft Entra管理中心打开 身份 → 监控和健康 → 登录日志，设置过滤器，并选择 下载 → […]

Posted in Blog, LogTotal HOWTO

如何导出 Microsoft 365 统一审核日志

Posted on 23.10.202628.10.2026 by SOC Prime Team

Purview门户 (审核 → 搜索) 允许您搜索统一审核日志并将结果导出到CSV。完整的事件通过一个名为Au […]

Posted in Blog, LogTotal HOWTO

CVE-2026-111497：Node.js Brotli 解码器缺陷导致远程代码执行

Posted on 23.10.202628.10.2026 by SOC Prime Team

Node.js 已发布安全更新，以解决 CVE-2026-111497，这是其内置的 Brotli 解压缩代码 […]

Posted in Blog, CVEsTagged CVE

如何使用 journalctl 导出 systemd 日志

Posted on 22.10.202628.10.2026 by SOC Prime Team

使用时间范围和 -o json 运行 journalctl，每行获得一个 JSON 对象，其中包含日志中存储的 […]

Posted in Blog, LogTotal HOWTO

在哪里查找Linux auditd 日志以及如何导出它们

Posted on 22.10.202628.10.2026 by SOC Prime Team

auditd 写入 /var/log/audit/audit.log，只能由 root 读取。最快的时间窗口导 […]

Posted in Blog, LogTotal HOWTO

在哪里可以找到 Windows 上的 Sysmon 日志以及如何导出它们

Posted on 22.10.202628.10.2026 by SOC Prime Team

Sysmon 会写入其自身的事件日志频道。在事件查看器中，它位于 应用程序和服务日志 → Microsoft […]

Posted in Blog, LogTotal HOWTO

如何启用和导出PowerShell脚本块日志

Posted on 22.10.202628.10.2026 by SOC Prime Team

PowerShell 脚本块日志存在于 应用程序和服务日志 → Microsoft → Windows → P […]

Posted in Blog, LogTotal HOWTO

CVE-2026-110264：关键的 GitLab RCE 漏洞影响12年发布版本

Posted on 22.10.202628.10.2026 by SOC Prime Team

GitLab 已发布紧急安全更新，以解决 CVE-2026-110264，这是一个严重程度最高的漏洞，可能允许 […]

Posted in Blog, CVEsTagged CVE

CVE-2026-91403：严重的Oracle Java SE和GraalVM漏洞使远程攻击成为可能

Posted on 22.10.202628.10.2026 by SOC Prime Team

Oracle 发布了一个非计划安全警报，解决了 CVE-2026-91403，这是一个影响 Oracle Ja […]

Posted in Blog, CVEsTagged CVE

使用LogTotal进行日志分析

Posted on 21.10.202628.10.2026 by SOC Prime Team

什么是日志分析？ 日志分析是收集、解析、规范化和查询机器生成的事件记录以回答操作或安全问题的实践。在 SOC […]

Posted in Blog, LogTotal HOWTO

Posts navigation

← Older posts
Newer posts →
  • Platform
  • Threat Detection Marketplace
  • Prime Hunt
  • Prime Architect
  • Prime Detect
  • Ecosystem
  • Use Cases
  • Fortify SIEM Posture
  • Obtain Rules for Alerting
  • Advance Threat Detection
  • Elevate Detection Engineering
  • Accelerate MDR Services
  • Hyperscale SIEM Migration
  • Services
  • Professional Services Overview
  • MITRE ATT&CK Audit
  • Custom Content Engineering
  • SIEM Migration Services
  • Industry Expertise
  • Center of Excellence for Microsoft Sentinel
  • Center of Excellence for Amazon Web Services
  • Splunk Migration & Support
  • Tools
  • Uncoder.IO
  • Resources
  • Blog
  • Events
  • Active Threats
  • Customer Success Stories
  • Roota
  • Sigma
  • Company
  • Why SOC Prime?
  • About Us
  • Industry Recognition
  • Leadership
  • Careers
  • Privacy
  • SOC 2 Type II Compliance
  • Partner Programs for Universities
  • Change consent settings
  • Cookie Policy
  • Privacy Policy
  • LEGAL NOTICE (IMPRESSUM)
  • SOC PRIME PLATFORM TERMS OF SERVICE
  • Privacy FAQ
Engage WIth Us
  • discord
  • github
  • youtube
  • linkedin
  • facebook
  • twitter
  • bluesky

SOC Prime, SOC Prime Logo and Threat Detection Marketplace are registered trademarks of SOC Prime, Inc. All other trademarks are the property of their respective owners.

    Want to Learn More?

    We are here to help you bring order to threat detection

    By clicking Submit you confirm that you have read and agree to SOC Prime’s Privacy Policy

    Never share sensitive information (credit card numbers, social security numbers, passwords) through this form.

    We've received your form

    Thank you!

    Countries
    155
    Organizations
    11,000+
    Users
    60,000+
    Trusted by Enterprise Teams building AI SOC capabilities
    LTIMindtree
    Crowell
    BNP Paribas
    Forvis Mazars
    GOSECURE
    TAQA