20/10 From Raw Logs to Proactive Defense: Practical Application of REGEX, LEQL, and AI in Rapid7 InsightIDR | Webinar

We invite you on October 20 to join our webinar “From Raw Logs to Proactive Defense: Practical Application of REGEX, LEQL, and AI in Rapid7 InsightIDR”, where we will cover how to turn terabytes of unstructured system data into clear Indicators of Compromise (IoC), master architecturally sound search tools, and delegate the detection of hidden anomalies to built-in ML algorithms.

Register now

AGENDA:

1. REGEX (Regular Expressions): Structuring Chaos.

• Practical application of safe RE2 syntax for Custom Parsing. Breakdown of creating named capture groups to extract critical values (IP addresses, proxy actions, HTTP statuses) from raw text without the risk of overloading the SIEM system.

2. LEQL (Log Entry Query Language): Deep Search and Analytics.

• Moving from parsed logs to real investigations. Step-by-step creation of search queries to filter events, group data, build visual dashboards, and configure precise Custom Alerts without false positives.

3. Artificial Intelligence (AI): Your Autonomous Analyst.

• Using an AI assistant to automatically generate complex REGEX expressions and LEQL queries from natural language. Demonstration of the UBA (User Behavior Analytics) engine in action to detect hidden threats and anomalies that cannot be described by static search rules.

Speaker:

Volodymyr Semenchuk — Cybersecurity Engineer (Softprom).

Softprom — Value Added Distributor of Rapid7