Gravwell Resources
Learn about everything from customer success stories, product info, to viewpoints from
the core team.
Blog
Not everyone is comfortable handing over the keys to their cybersecurity program to agents, and one reason is that many SIEM AI capabilities are still surface-deep. They draw conclusions solely from limited, preassembled context such as alerts, cases, and preconfigured integrations.
All
What's in a Sysmon Event Pt. 2 - Network Connections
Introducing the Gravwell CoreDNS Kit
What's in a Sysmon Event Pt. 1 - Process creation
Gravwell Weather Data Kit - Look Ma, No Ingester!
More Gravwell Fun, Now With Kits
DOCUMENTATION
All Gravwell documentation is open to everyone.
If you’re just starting out with Gravwell, we recommend reading the Quick Start first, then moving on to the Search pipeline documentation to learn more.







