haproxy siem load balancing config example

 

defaults
    mode tcp
    timeout connect 5000ms
    timeout client 50000ms

listen graylog
    bind *:514
    mode tcp
    balance roundrobin
    server graylog1 10.0.0.1:514
    server graylog2 10.0.0.1:514
    timeout connect 20s
    timeout server 30s

payload box

This payload database is very useful for analyzing and discovering new attack techniques. And also you can use these payloads on your SIEM environment for playing with correlation rules.




https://github.com/payloadbox

log samples

Sample log messages; these logs can be used for SIEM rule testing.

https://ossec-docs.readthedocs.io/en/latest/log_samples/