07 - References & Resources

Expand your knowledge on logging, SIEM, detection engineering, and automated response with these industry-standard resources.

📖 Official Documentation & Standards

• OWASP Logging Cheat Sheet: Comprehensive guide on what to log, what not to log, and how to format logs securely.
  • OWASP Logging Cheat Sheet
• Elastic Common Schema (ECS): The open-source specification for structuring log data.
  • ECS Reference
• Common Event Format (CEF): Micro Focus ArcSight's logging standard.
  • CEF Implementation Guide

🔍 Detection Engineering & Sigma

• Sigma HQ Repository: The central GitHub repository containing thousands of community-driven Sigma rules for various threats.
  • Sigma Rules GitHub
• Sigma CLI: The tool used to convert Sigma rules to specific SIEM query languages.
  • Sigma CLI GitHub
• Uncoder.io: A web-based translation tool for SIEM queries and Sigma rules.
  • Uncoder.io

🤖 SOAR Platforms & Automation

• Shuffle: An open-source SOAR platform for building security playbooks.
  • Shuffle GitHub
• Tines: A powerful, no-code automation platform heavily used in modern security teams.
  • Tines

⚖️ Compliance & Frameworks

• PCI DSS Requirements: Specific logging requirements outlined in Requirement 10.
  • PCI Security Standards Council
• NIST SP 800-92: Guide to Computer Security Log Management.
  • NIST 800-92 Document