Implementation Guides

Step-by-step guides and tutorials to help you implement, configure, and optimize Secure60 for your specific use cases. Whether you’re just getting started or looking to implement advanced features, our guides provide practical, hands-on instructions.

Getting Started Guides

Quick Start Implementation

• Enable Data Flow - Get your first data sources connected
• Enhance Data - Improve data quality and enrichment
• Customize - Tailor the platform to your needs

Sample Data and Testing

• Generate Sample Events, Signals, and Threats - Use test data to explore platform capabilities

Data Collection Guides

Linux and Windows

• Integrate Linux Syslog - Collect system logs from Linux servers
• Linux Audit and File Integrity Monitoring (auditd) - Audit rules, file watches, and volume control using the native audit subsystem
• Configure File Integrity Monitoring (FIM) and Audit - The Auditbeat method, for estates that already run it
• Windows Server - Windows Event Forwarding - Native Windows event forwarding integration
• NXLog Windows Integration - Collect Windows event logs
• Winlogbeat Documentation - Alternative Windows log collection

Web, Network, and Perimeter

• Nginx - Web server access and error logs, with structured JSON logging
• Firewall and Network Devices - Syslog from firewalls, routers, and switches, with vendor parsing
• Web Application Firewall (WAF) - AWS WAF, Cloudflare, Azure, F5, Imperva, and ModSecurity
• VPN and Remote Access - Remote-access authentication from Cisco, FortiGate, GlobalProtect, and cloud VPN services

Cloud and Container

• Configure Azure Cloud - Connect Azure services and logs
• Integrate GCP Pub/Sub - Google Cloud Platform integration
• Docker Logs - Container log collection and monitoring
• Integrate S3 - Amazon S3 log file processing

Security Tools

• Integrate Falco - Container runtime security monitoring
• Collector Data Enrichment - Enhance collected data with context

Configuration Guides

Search and Investigation

• Search Best Practices - Narrow a search efficiently, pick the right operator, and avoid the common traps

Rules and Detection

• Create Rules - Build custom detection rules

Privacy and Volume

• Implement Data Masking - Mask, redact, and drop sensitive data at the collector, before it leaves your environment

Advanced Features

• Entity Analytics Setup - Configure behavioral analysis
• Threat Intelligence Integration - Connect threat feeds

Governance & Compliance

• Governance & Compliance Management - Set up compliance frameworks, manage control assessments, configure review workflows, and maintain continuous compliance posture

Best Practices

Implementation Approach

1. Start Small - Begin with high-value, low-volume data sources
2. Iterate - Gradually expand coverage and complexity
3. Validate - Test each integration before moving to production
4. Monitor - Continuously monitor performance and adjust

Common Patterns

• Phased Rollout - Deploy in stages across your environment
• Test Environment - Always test configurations in a non-production environment
• Documentation - Document custom configurations and integrations
• Training - Ensure your team understands new capabilities

Need Help?

• Community Support - Join our user community for peer assistance
• Professional Services - Contact our team for implementation assistance
• Training Programs - Enroll in our certification programs
• Documentation Updates - Help us improve guides by providing feedback

Contributing

We welcome contributions to our guide library:

• Submit corrections or improvements
• Share your implementation experiences
• Suggest new guide topics
• Provide real-world examples and use cases