HomeLab reviews and mentions

• Please share about the SIEM systems you used before and how hard is it to learn?
  1 project | /r/ITCareerQuestions | 23 Jul 2021

  I've used Splunk, QRadar, ELK, Graylog, and ArcSight. After using all of them over the past 9ish years I can tell you they aren't hard to learn/use. Each has its advantages and disadvantages, along with their quirks. I suggest pulling down a docker container of elk or splunk and trying them out. I'd also suggest trying out CyberWarDogs HELK project, simply because it's easy to set up. Here's a helpful script to get an endpoint (windows host) setup for testing. https://github.com/ValcanK/HomeLab/tree/main/Endpoint-HELK-Winlog-Sysmon-Atomic