Log management system operation and security event monitoring

The goal of the project was to configure the log management solution and conduct security event monitoring in the customer GCP/Kubernetes infrastructure. False positives were filtered out. Regular Red team exercises were analyzed and detection rules were updapted. The log management was based on the Graylog/Logstash/ELK technology stack.