Scoring a Technical Cyber Defense Exercise with Nagios and Selenium
summary
Builds an availability scoring pipeline using Nagios and Selenium plus Kafka, Elasticsearch and custom Python, deployed across three Nagios nodes and a Selenium box. It monitors 3,080 hosts with 31,350 services at 40–60s intervals, logging 34 million scoring checks over 16 hours (≈35,000 active checks/minute). Describes anti-evasion tactics (varying intervals, compiled user‑agents, DHCP IP churn), visualization of per‑team minute buckets, and ongoing reliability tweaks.
AI-written summary · about
chapters (6)
- 0:00Introduction and background
- 11:01Exercise overview and scoring
- 20:55Monitoring system setup
- 30:52Visualization tools and challenges
- 41:34Data analysis and future work
- 42:25Q&A session
related talks
25mAutomating Cyber Threat Intelligence: A Practical Approach to Managing Emerging Vulnerabilities
29mDetection Engineering: Defending Networks with Purpose
44mBuild yourself an Elastic Threat Hunting and Monitoring SIEM
50mScaling Security Assessment at the Speed of DevOps
43mDevSecOps on steroids - Powered by your Selenium tests
25mSecurity Automation for DevOps
35mThe Best Defense is a Great Offense: Leveraging Automated...
45mAdvanced Security Operations with Elastic Security