Anton on Security
SEPTEMBER 3, 2021
In most cases, my instinctive reaction was to argue with them, because I very clearly saw “SIEM” (or pieces of SIEM ) in what they showed me … Admittedly, my thinking has been colored by SIEM since 2002 when I joined my first SIEM vendor (a SIM vendor, to be precise).
Anton on Security
OCTOBER 21, 2021
you trust the SIEM to map the events to the correct category and not to confuse “password guessing” with “logon failure” or whatever You then trust that the detection logic (rules) is written correctly so that nobody mistyped “context.asset.vulnerability.severity” as “asset.context.vulnerability.severity” in a rule they wrote.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Anton on Security
AUGUST 30, 2021
Otherwise, 30+ years of SOC work and we’re still facing the age-old challenges we had in the past (believe it or not, “too many [IDS] alerts” was a SOC challenge in 2002!). We think that the largest current and future challenges in Security Operations can be solved with this approach.
Security Boulevard
APRIL 9, 2021
And let me tell you … that “n” is pretty damn large since my first involvement with SIEM in January 2002 (!)?—? The mission also evolved a lot over the years from alert aggregation to compliance and reporting to threat detection and response support. You want to have easier threat detection in cloud environments.
Anton on Security
APRIL 9, 2021
And let me tell you … that “n” is pretty damn large since my first involvement with SIEM in January 2002 (!)?—? The mission also evolved a lot over the years from alert aggregation to compliance and reporting to threat detection and response support. Let’s explore this topic for the (n+1)-th time. examples , examples , examples.
CyberSecurity Insiders
FEBRUARY 1, 2022
To put this in perspective, it took a group of 300,000 people and four years of work to crack a 64-bit key in 2002. Implement managed threat detection. The best way to ensure that your cybersecurity ecosystem remains intact is to implement managed threat detection through a trusted company.
Anton on Security
MAY 4, 2023
Related posts: “Detection as Code? No, Detection as COOKING!” “How How to Measure Threat Detection Quality for an Organization?” As we learned , SIEM still matters in 2023.
Expert insights. Personalized for you.
214 
Let's personalize your content