THREATOPS

THREAT OPS › Threat News › Make The Most of Network Firewall Logs with Elastic Security

Make The Most of Network Firewall Logs with Elastic Security

lowelastic_securityPublished 2026-02-25

This is Part 1 of a two-part series on leveraging firewall data in Elastic Security. In this post, we cover the fundamentals of firewall logs, how to collect them, and how to begin exploring your network data visually. The network firewall is one of the most critical security controls in a network. It enforces security policies by inspecting and controlling traffic between netwo

MITRE ATT&CK techniques

IP AddressesT1590.005
Cloud ServicesT1021.007

Indicators of compromise

static-www.elastic.codomain

Original source: https://www.elastic.co/security-labs/blog/make-the-most-of-network-firewall-logs-with-elastic