Further reading

• Windows security log events: https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/default.aspx
• SANS detecting DNS tunneling: https://www.sans.org/readning-room/whitepapers/dns/detecting-dns-tunneling-34152
• SANS – A practical big data kill chain framework: https://www.sans.org/reading-room/whitepapers/warfare/practical-big-data-kill-chain-framework-35487
• Your everyday threat intelligence: https://yeti-platform.github.io/
• Malware Information Sharing Platform (MISP): https://www.circl.lu/doc/misp/
• MISP GDPR compliance: http://www.misp-project.org/compliance/gdpr/information_sharing_and_cooperation_gdpr.html
• Apache Metron architecture: https://cwiki.apache.org/confluence/display/METRON/Metron+Architecture
• Cyber threat intelligence and information sharing: https://www.nist.gov/publications/cyber-threat-intelligence-and-information-sharing
• Guide...