• Platform
    • Threat Detection Marketplace Your Home for Threat Detection
    • Prime Hunt Augmented AI SOC Capabilities
    • Prime Architect AI-enhanced Detection Engineering
    • Prime Detect Data pipeline for routing detections
  • Active Threats
  • Use Cases
    • Fortify SIEM Posture Audit your SIEM posture to maximize threat visibility & address detection coverage gaps.
    • Obtain Rules for Alerting Get prioritized SIEM use cases ready-to-deploy as low-noise and high-value alerts.
    • Advance Threat Detection Access the world’s largest rule feed for emerging threats, manage & deploy detections at scale.
    • Elevate Detection Engineering Save time and costs, obtain CTI-enriched use cases, adapt CI/CD workflows.
    • Accelerate MDR Services Reduce customer churn, address technical debt in threat detection, and save on SIEM costs.
    • Hyperscale SIEM Migration Accelerate time-to-value and maximize the ROI of your SIEM migration project.
  • Services
    • Professional Services Overview Explore our on-demand services and training.
    • MITRE ATT&CK Audit Minimize blind spots and ensure comprehensive data visibility.
    • Custom Content Engineering Adopt out-of-the-box detection engineering capability to identify threats challenging your business.
    • SIEM Migration Services Accelerate time-to-value and maximize the ROI of your SIEM migration project.
  • Resources
    • Blog Research, guides, interviews
    • Events Stay tuned to our cybersecurity events
    • Ecosystem With Privacy, Performance and Efficiency at its Core
    • Customer Success Stories Learn how global organizations trust SOC Prime
    • Roota Open-Source Language for Collective Cyber Defence
    • Sigma History of Sigma Evolution
    • Industry Expertise
    • Center of Excellence for Microsoft Sentinel
    • Center of Excellence for Amazon Web Services
    • Splunk Migration & Support
    • Tools
    • Uncoder.IO
  • Company
    • Why SOC Prime? Collective cyber defense for a secure tomorrow
    • About Us Our story and mission
    • Industry Recognition Verified value for cybersecurity
    • Leadership Biography and DNA
    • Careers Job opportunities at SOC Prime
    • Privacy SOC Prime’s privacy-centric mindset
    • SOC 2 Type II Compliance Benchmark for security compliance
    • Partner Programs for Universities Sigma & MITRE ATT&CK® Education
  • 安排通话 →
  • 安排通话 →

如何导出Windows事件日志（EVTX）

Posted on 21.10.202628.10.2026 by SOC Prime Team

简短答复：打开事件查看器，右键单击您需要的日志（例如 Windows 日志 → 安全），选择 将所有事件另存为 […]

Posted in Blog, LogTotal HOWTO

在哪里查找 Linux 上的 SSH (sshd) 日志以及如何导出它们

Posted on 21.10.202628.10.2026 by SOC Prime Team

在 Debian 和 Ubuntu 上，sshd 将日志写入 /var/log/auth.log。在 RHEL […]

Posted in Blog, LogTotal HOWTO

日志分析工具：关键特性与十佳选择

Posted on 21.10.202628.10.2026 by SOC Prime Team

多数调查都因一个简单的问题而停滞：日志在哪里，我该如何提取？在 Windows 上，事件日志以二进制 .evt […]

Posted in Blog, LogTotal HOWTO

CVE-2026-111943：eMudhra CA密钥在证书颁发机构事件后被Go Blocks破坏

Posted on 21.10.202628.10.2026 by SOC Prime Team

一个主要的公钥基础设施事件已引发跨浏览器、编程语言生态系统、证书存储及软件包的紧急安全措施。与八个 eMudh […]

Posted in Blog, CVEsTagged CVE

CVE-2026-109618 和 CVE-2026-109619：紧急安全发布因PHP关键RCE漏洞

Posted on 21.10.202628.10.2026 by SOC Prime Team

PHP 管理员正面临紧急安全更新，此前维护人员宣布了一次特别发布，用于解决两个关键漏洞。这些漏洞由安全研究人员 […]

Posted in Blog, CVEsTagged CVE

NIS2解读：要求、期限及LogTotal在欧洲的使用案例

Posted on 20.10.202628.10.2026 by SOC Prime Team

什么是NIS2？ NIS2 是指令 (EU) 2022/2555，这是欧盟针对保持能源网、水系统、医院、物流链 […]

Posted in Blog, LogTotal HOWTO

CVE-2026-110936：西门子软件中心漏洞在ClickFix攻击中被利用

Posted on 20.10.202628.10.2026 by SOC Prime Team

西门子已确认在其用于下载、安装、激活和更新西门子软件的桌面应用程序 Siemens Software Cent […]

Posted in Blog, CVEsTagged CVE

日志分析：从原始事件到检测

Posted on 19.10.202628.10.2026 by SOC Prime Team

企业环境每小时会产生数百万个事件。在事件发生时，响应者很少需要全部这些事件。他们需要的是能够讲述故事的几百个事 […]

Posted in Blog, LogTotal HOWTO

CVE-2026-102764：关键的BeyondTrust远程支持零日漏洞被中国关联黑客利用

Posted on 16.10.202628.10.2026 by SOC Prime Team

BeyondTrust 已披露 CVE-2026-102764，这是一个在远程支持 (RS) 中的严重漏洞，被 […]

Posted in Blog, CVEsTagged CVE

CVE-2026-99999：关键的PwnEscape Linux内核漏洞允许从来宾逃逸到主机

Posted on 16.10.202628.10.2026 by SOC Prime Team

一个关键的 Linux 内核漏洞（编号为 CVE-2026-99999），被称为 PwnEscape，可以破坏 […]

Posted in Blog, CVEsTagged CVE

Posts navigation

← Older posts
Newer posts →
  • Platform
  • Threat Detection Marketplace
  • Prime Hunt
  • Prime Architect
  • Prime Detect
  • Ecosystem
  • Use Cases
  • Fortify SIEM Posture
  • Obtain Rules for Alerting
  • Advance Threat Detection
  • Elevate Detection Engineering
  • Accelerate MDR Services
  • Hyperscale SIEM Migration
  • Services
  • Professional Services Overview
  • MITRE ATT&CK Audit
  • Custom Content Engineering
  • SIEM Migration Services
  • Industry Expertise
  • Center of Excellence for Microsoft Sentinel
  • Center of Excellence for Amazon Web Services
  • Splunk Migration & Support
  • Tools
  • Uncoder.IO
  • Resources
  • Blog
  • Events
  • Active Threats
  • Customer Success Stories
  • Roota
  • Sigma
  • Company
  • Why SOC Prime?
  • About Us
  • Industry Recognition
  • Leadership
  • Careers
  • Privacy
  • SOC 2 Type II Compliance
  • Partner Programs for Universities
  • Change consent settings
  • Cookie Policy
  • Privacy Policy
  • LEGAL NOTICE (IMPRESSUM)
  • SOC PRIME PLATFORM TERMS OF SERVICE
  • Privacy FAQ
Engage WIth Us
  • discord
  • github
  • youtube
  • linkedin
  • facebook
  • twitter
  • bluesky

SOC Prime, SOC Prime Logo and Threat Detection Marketplace are registered trademarks of SOC Prime, Inc. All other trademarks are the property of their respective owners.

    Want to Learn More?

    We are here to help you bring order to threat detection

    By clicking Submit you confirm that you have read and agree to SOC Prime’s Privacy Policy

    Never share sensitive information (credit card numbers, social security numbers, passwords) through this form.

    We've received your form

    Thank you!

    Countries
    155
    Organizations
    11,000+
    Users
    60,000+
    Trusted by Enterprise Teams building AI SOC capabilities
    LTIMindtree
    Crowell
    BNP Paribas
    Forvis Mazars
    GOSECURE
    TAQA