How to design & deploy a Log Collector for MCAS

Table of Contents:
00:00:00 Introduction
00:30 Inject data into MCAS
02:22 How does a Log Collector work?
03:21 Prereqs
04:27 Network requirements
04:54 Supported firewalls/proxies
05:41 What is a Log Collector?
06:07 Log Collector performance
08:54 Deploy a Log Collector in Azure (Ubuntu)
11:40 Setup data sources in MCAS
12:37 Setup Log Collector in MCAS
13:35 Configure Docker as a Log Collector
15:49 Test the Log Collector

Resources: Log Collector docs: https://docs.microsoft.com/en-us/cloud-app-security/discovery-docker

If you want to simulate a log collector, check this out: https://github.com/microsoft/Microsoft-Cloud-App-Security/tree/master/Scripts/Simulate%20a%20Log%20Collector%20using%20Azure%20Automation

Deck from video: https://www.slideshare.net/MattSoseman/mcas-log-collector-deck

source

by Matt Soseman

linux ftp server