Gravwell Resources
Learn about everything from customer success stories, product info, to viewpoints from
the core team.
Blog
Not everyone is comfortable handing over the keys to their cybersecurity program to agents, and one reason is that many SIEM AI capabilities are still surface-deep. They draw conclusions solely from limited, preassembled context such as alerts, cases, and preconfigured integrations.
All
Four Tips to optimize your search through enhanced query structure
What's in a sysmon event - eventid 5, process termination
Gravwell 4.2.4 and Query Studio Tour
Gravwell 4.2 Sneak Peek - Data Explorer
IPMI and Gravwell Part 2: Making an IPMI Kit
IPMI and Gravwell Part 1: Building an IPMI Ingester
Grouping Related Entries with the Transaction Module
Enable Data Fusion & Pivot on Dataset Properties with Enrich Module
DOCUMENTATION
All Gravwell documentation is open to everyone.
If you’re just starting out with Gravwell, we recommend reading the Quick Start first, then moving on to the Search pipeline documentation to learn more.







