Documentation

• First Steps
• Network Requirements
• SGBox Manual
• SGBox Multitenant HowTo
• SGBox Quick Start

Multi Tenant

• Create end user access
• Create new tenant
• Create new tenant admin
• Register a collector

Client Configuration

• Cloud Applications

  • Sophos Central configuration

• Database

  • MariaDB - Enable audit log

• Linux

  • Rsyslog strict connection
  • Syslog configuration on AIX
  • Syslog configuration on Debian
  • Syslog configuration on Fedora
  • Syslog configuration on OpenSuse
  • Syslog configuration on RedHat
  • Syslog configuration on Solaris
  • Syslog configuration on Ubuntu
  • Syslog configuration on XenServer
  Show all articles ( 1 ) Collapse Articles

• Network Appliance

  • Syslog configuration on Bitdefender GravityZone
  • Syslog configuration on CheckPoint
  • Syslog configuration on Cisco devices
  • Syslog configuration on ESXi
  • Syslog configuration on Fortinet
  • Syslog Configuration on Kaspersky
  • Syslog configuration on MikroTik
  • Syslog Configuration on PaloAlto
  • Syslog configuration on PFSense
  • Syslog configuration on Watchguard
  Show all articles ( 2 ) Collapse Articles

• Storage

  • Syslog configuration on Synology

• Windows

  • ADE - Active Directory Engine
  • Configure SGAgent on Windows systems
  • Create Microsoft CA
  • How to Install and configure the new Windows Audit package
  • Install SGAgent on Windows Core
  • Install/Uninstall SGAgent in silent mode
  • SGAgent strict connections

• Apache web server configuration

SCM - System Control Management

• Actions

  • Configure Advanced Feed Lists
  • Configure Feed Lists
  • Create an escalation chain
  • Upload SGBox custom certificate

• Advanced Options

  • Configure a mail server
  • SGBox Alerts
  • SGBox Data Retention
  • SGBox Retention

• Applications

  • Syslog forwarding from sgbox to another server

• Dashboards

  • Create a dashboard
  • Delete a dashboard
  • Export a dashboard
  • Manage Dashboards
  • SGBox ETL

• Network

  • Create a probe
  • Create an asset

• Access to remote SGBox
• Change your own user settings
• Configure AD/LDAP Server
• Configure Strong Authentication
• Notifications
• Show SGBox SCMID

LM - Log Management

• Data Analysis

  • Events Queries
  • log decryption test
  • Multiclass Analysis
  • Queries on Logs
  • Risk Analysis

• Reporting

  • Create Executive Reports

• SGAgent Commands

  • Create a new command
  • Create FIM Command
  • Create new command for custom registry
  • Create TailFolder Command

• Automatic Vendor Recognition
• Directory Import
• Input Logs Methods
• Parameter translation

LCE - Log Correlation Engine

• Create a correlation rule
• Create a sensor
• Default Correlation Rules Explained
• Multiple events correlation rule
• Replace a Sensor with Events Queries
• Telegram BOT
• Threat Intelligence Queries

NVS - Network Vulnerabilty Scanner

• Configure OpenVAS
• Launch a Scan
• Prepare an asset to NVS
• Reset OpenVAS Password

SM - System Monitoring

• Configuration

  • Create a new test script
  • Create custom ping script

• View

  • Change Test Script
  • View test script

• Configure SNMP Service on Linux
• Configure SNMP service on Windows

PB - Playbooks

• 1 - Playbooks Base

  • Playbooks - Base settings
  • Playbooks - Basic Authentication
  • Playbooks - Generic API

• 2 - Playbooks Intermediate

  • Playbooks - Create a list
  • Playbooks - Retrieve Logs
  • Playbooks - Retrieve logs (alternative mode)

• 3 - Playbooks Advanced

  • Playbooks - IF condition
  • Playbooks - Samples Package
  • Playbooks - Trigger Node
  • Playbooks - Trigger with LCE
  • Playbooks - Trigger with Query
  • Playbooks and Dashboards

ADE - Active Directory Engine

• ADE - Active Directory Engine

IM - Incident Management

• IM - Incident Management - Preview Version

Collector

• Collectors Main Versions
• Configure a collector for a Cloud PoC
• Configure a collector for SGBox Multi tenant
• Configure a collector for SGBox Single tenant
• Configure a Probe
• Register a collector

Applications

• Backup and Restore

  • SGBox Backup
  • SGBox Restore

• Vendors integration

  • Configure MSSQL App
  • Configure MySQL App
  • Configure O365 App
  • Configure Oracle App

• AWA - Advanced Windows Audit
• Export SGBox GPG Key
• Schedule Application
• User Behavior Analytics

SGBox CLI

• Disk management

  • Extend Data Disk (SGBox V4)
  • Extend Full Disk (SGBox V5)

• Password management

  • Change CLI Password
  • Reset Admin password
  • Reset OpenVAS password

• Rsyslog configuration

  • Rsyslog TCP support
  • Rsyslog TCP TLS Support

• Troubleshooting on Collector

  • Collector TCPDump

• Troubleshooting on SGBox

  • TCPDump and SGTop

• Configure SGBox IP
• Configure SGBox Timezone

Releases

• 3.x

  • 3.2.0
  • 3.2.1

• 4.X

  • 4.0

    • 4.0.1
    • 4.0.2
    • 4.0.3

  • 4.1

    • 4.1.0
    • 4.1.1

  • 4.2

    • 4.2.0
    • 4.2.1
    • 4.2.2
    • 4.2.3
    • 4.2.4
    • 4.2.5
    • 4.2.6
    • 4.2.7
    • 4.2.8
    • 4.2.9
    Show all articles ( 2 ) Collapse Articles

  • 4.3

    • 4.3.0
    • 4.3.1
    • 4.3.2

• 5.X

  • 5.0

    • 5.0.0
    • 5.0.1
    • 5.0.2
    • 5.0.3
    • 5.0.4
    • 5.0.5
    • 5.0.6
    • 5.0.7

  • 5.1

    • 5.1.0
    • 5.1.1
    • 5.1.2
    • 5.1.3
    • 5.1.4
    • 5.1.5

  • 5.2

    • 5.2.0
    • 5.2.1
    • 5.2.2

  • 5.3

    • 5.3.0
    • 5.3.1
    • 5.3.2
    • 5.3.3
    • 5.3.4

  • 5.4

    • 5.4.0
    • 5.4.1

  • 5.5

    • 5.5.0
    • 5.5.1
    • 5.5.2
    • 5.5.3
    • 5.5.4
    • 5.5.5
    • 5.5.6
    • 5.5.7
    • 5.5.8
    • 5.5.9
    Show all articles ( 2 ) Collapse Articles

• SGBox Main Versions