GCenter documentation V101

Last update 04/10/2024

Release Notes

1. Upgrade Path
2. Release Notes

Setup

1. Presentation of the equipment
- 1.1. GCenter
- 1.2. GCAP
2. Flow Matrix
3. Example of architectures
4. Configuration
- 4.1. Initial configuration
- 4.2. Global configuration

GCap

1. Presentation
2. Pairing
3. Configuration
- 3.1. Details of a GCAP
- 3.2. Set a default profile

GUM

1. Upgrade
- 1.1. Hotfix
- 1.2. Upgrade
2. Updating signatures (Update)

Malcore

1. Presentation
2. Configuration
3. Detection
- 3.1. Inspectra
- 3.2. Dashboards
4. Generated events
- 4.1. Example of a log
- 4.2. Summary table of the fields
5. Detection by gscan

Codebreaker

1. Presentation
2. Detection
3. Generated events
- 3.1. Codebreaker Shellcode
  - 3.1.1. Example of a Codebreaker Shellcode log
  - 3.1.2. Table summarising the Codebreaker Shellcode fields
- 3.2. Codebreaker Powershell
4. GScan

Sigflow

1. Presentation
2. GCAP Profiles
3. Rules management
4. Detection
- 4.1. SmartMap
- 4.2. Kibana Dashboard
5. Generated events

Machine Learning

1. Introduction to the DGA Algorithm
2. Activation
3. Exception list
4. Generated events

External integration

1. MISP (Malware Information Sharing Platform)
2. Hurukai (by HarfangLab)
3. Intelligence
- 3.1. External
- 3.2. GBox
4. Syslog
5. Using the GCENTER API

Supervision

1. Home Page
2. Embedded Dashboards
3. Nagios
4. Netdata
- 4.1. Netdata export
  - 4.1.1. Netdata - General settings
  - 4.1.2. Netdata - Encryption
5. Using a NETDATA server

User management

1. Local users
2. LDAP Integration / ActiveDirectory
3. Audit trail
- 3.1. Authentications history
  - 3.1.1. Creations/Deletions history
  - 3.1.2. Permissions history

Backup / Restore

1. Configuration
- 1.1. Operations

Maintenance

1. Data Management
- 1.1. Data deletion
2. Diagnostics
- 2.1. Log files
3. Solution logs
4. Emergency mode
5. GApps management

MPL: Details

1. MPL: reminders
2. MPL applied to GCENTER
- 2.1. Automatic action
- 2.2. Manual action

GCenter documentation V101

Index

Index

© Copyright 2024, Gatewatcher.