Gravwell Resources
Learn about everything from customer success stories, product info, to viewpoints from
the core team.
Blog
Not everyone is comfortable handing over the keys to their cybersecurity program to agents, and one reason is that many SIEM AI capabilities are still surface-deep. They draw conclusions solely from limited, preassembled context such as alerts, cases, and preconfigured integrations.
All
What's in a Sysmon Event - Windows Registry EventIDs 12, 13, 14
What's in a sysmon event - eventid 5, process termination
Gravwell 4.2.4 and Query Studio Tour
Delve into Apache Logs with Gravwell Data Explorer
Announcing Gravwell 4.2.0 - Voyager Release
The Sky is no longer the limit. Gravwell blasts off into space.
Back-up to Backblaze with Gravwell Automations
DOCUMENTATION
All Gravwell documentation is open to everyone.
If you’re just starting out with Gravwell, we recommend reading the Quick Start first, then moving on to the Search pipeline documentation to learn more.






