Gravwell is an enterprise data fusion platform that enables security teams to investigate, collaborate, and analyze data from any source, on demand, all with unlimited data collection and retention. Ingest everything. Investigate anything.
In this video, Gravwell's Co-Founder and CTO Kris will take you from the clean installation, install the Zeek kit, and end with a port scan alert using the automation SOAR interface Gravwell Flows.
Quickstart Doc:
https://docs.gravwell.io/#!quickstart/quickstart.md
Deploying Gravwell in Docker:
https://docs.gravwell.io/#!configuration/docker.md
Get started with Gravwell for personal or commercial use in Community Edition.
