Usage

• Web Interface
  • Events visualizations
• Sending logs to MozDef
  • What should I log?
• JSON format
  • Background
  • Description
  • Mandatory Fields
  • Details substructure (mandatory if such data is sent, otherwise optional)
  • Examples
• Simple test
• Alert Development Guide
  • How to start developing your new alert
  • How to run tests on your alert
  • Background on concepts
  • Example first alert
  • Scheduling your alert
  • How to run the alert in the docker containers
  • How to get the alert in a release of MozDef?
  • Customizing the alert summary
  • Questions?
  • Resources