Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

graylog

Suricata IDS/IPS Data in Graylog

Jul 14, 2026 By Jeff Darrington In Graylog
If you’re running Suricata to watch your network, you already know how much signal lives in its logs. Graylog provides a purpose-built way to make that signal immediately actionable. The Suricata IDS/IPS Content Pack, available with an Illuminate license and Graylog Enterprise or Graylog Security, delivers ready-to-use parsing rules, streams, GIM categorization, and a dashboard so you can turn raw Suricata EVE JSON events into structured, searchable security intelligence.
Read Post
splunk

Modernizing the Mission: Splunk Victoria Experience is Now Authorized at FedRAMP High

Jul 10, 2026 By Bill Rowan In Splunk
For public sector organizations and other highly regulated industries, the balance between cutting-edge innovation and strict compliance has often felt like a trade-off. You want the latest features, but security and authorization come first. Today, we’re closing that gap. We’re excited to share that, following our FedRAMP Moderate authorization earlier this year, Splunk Victoria Experience has now officially achieved FedRAMP High authorization as well.
Read Post

Called it (mostly): Checking in on 2026 predictions so far

Jul 7, 2026 By Sumo Logic, Inc. In Sumo Logic
On this episode of Masters of Data, we revisit the predictions Adam White, Zoe Hawkins, and David Girvin made at the end of last year, checking our own scorecard halfway through 2026. The hits: agents running amok and deleting databases, MCP becoming the backbone for tracking what agents actually do, growing security gaps around personal data, and a collective rejection of low-quality AI content. The misses: we underestimated how fast companies would cut staff for AI, then quietly start rehiring once the agents couldn't cover the work, and we're still arguing about whether token burn is a cost problem or a coming attack vector.
View Video
graylog

IT Audit: What It Is and How to Prepare for One

Jul 7, 2026 By Jeff Darrington In Graylog
Cramming for an exam in school often meant late nights, large quantities of caffeine, and anxiety about potential final grades. Whether studying alone or as part of a group, you probably tried to pull together all your notes and review sheets, so you had the right information at your fingertips during the test. In some cases, these exams could determine whether you passed or failed a course.
Read Post
datadog

Preparing for OMB M-26-14: How Datadog supports federal logging maturity

Jun 29, 2026 By Chris Leffler In Datadog
Memorandum M-26-14 from the Office of Management and Budget (OMB) marks a significant evolution in federal cybersecurity guidance, establishing a new risk-based framework for logging and network visibility across the United States federal government. The memo replaces the prescriptive requirements of Memorandum M-21-31 with an approach that emphasizes continuous monitoring, threat detection, investigation, and forensic readiness.
Read Post
UTMStack

VPC Flow Logs: A Practical Guide for Security & Compliance

Jun 28, 2026 By cesmng In UTMStack
A lot of teams only realize they need VPC Flow Logs after an incident has already gone sideways. A workload starts behaving oddly. An analyst sees suspicious outbound connections. Someone asks the most basic question in cloud incident response: what else did this instance talk to, when, and was that traffic allowed or blocked? If you don't have a network record already flowing into your monitoring stack, you're left reconstructing events from fragments.
Read Post
graylog

Microsoft WinRM Data in Graylog

Jun 26, 2026 By Jeff Darrington In Graylog
If you’re running Windows in your environment, WinRM is one of the most valuable, and most abused channels in your infrastructure. Graylog provides a purpose-built way to make those logs immediately actionable. The Microsoft WinRM Content Pack, available with an Illuminate license and Graylog Enterprise or Graylog Security, delivers ready-to-use parsing rules, streams, GIM categorization, and a dashboard so you can turn raw WinRM operational events into structured, searchable security intelligence.
Read Post
graylog

The Definitive SOC 2 Compliance Guide

Jun 25, 2026 By The Graylog Team In Graylog
Every day, service organizations handle sensitive customer information covered by data protection laws and subject to security compliance requirements. In the business-to-business world, customers require that their vendors provide validation and assurance over their privacy and security controls, typically asking for independent third-party attestations and reports.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.