Remove Architecture Remove Data collection Remove Technology Remove Threat Detection
article thumbnail

GUEST ESSAY: Cisco-Splunk merger will boost Snowflake – here’s how security teams can benefit.

The Last Watchdog

And now, early adopters of security data lakes like Snowflake are saving more than two-thirds of what they were paying for their Splunk license. The Cisco acquisition shall exacerbate these challenges and speed up the adoption of security data lakes.

article thumbnail

Left of SIEM? Right of SIEM? Get It Right!

Anton on Security

In my opinion, this approach will help make your SIEM operation more effective and will help you avoid some still-not-dead misconceptions about this technology. Mostly data collection. Data collection sounds conceptually simple, but operationally it is still very difficult for many organizations.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

MSSP Focus: Three ways your SIEM (even NG-SIEM) is hurting your ability to grow

CyberSecurity Insiders

To that end MSSPs add new technology to their security offering stack with the hopes that prospective customers will see this addition as an opportunity to outsource some, or all, of their security monitoring. The one technology I am referring to specifically is your SIEM. We owe a lot to SIEMs.

article thumbnail

Left of SIEM? Right of SIEM? Get It Right!

Security Boulevard

In my opinion, this approach will help make your SIEM operation more effective and will help you avoid some still-not-dead misconceptions about this technology. Mostly data collection. Data collection sounds conceptually simple, but operationally it is still very difficult for many organizations. LEFT OF SIEM.

article thumbnail

How Will $1.9 Billion for Cybersecurity Protect American Infrastructure?

CyberSecurity Insiders

Division A: Title I: Subtitle E: Section 11510: Cybersecurity Tool – No later than 2 years after the date of enactment of this Act, the Administrator (Federal Highway Administration) shall develop a tool to assist transportation authorities in identifying, detecting, protecting against, responding to, and recovering from cyber incidents.

article thumbnail

GUEST ESSAY: How SIEMS, UEBAs fall short in today’s turbulent threat landscape

The Last Watchdog

The painful impact of cyber attacks on businesses is worsening despite advances in technology aimed at protecting enterprises from malicious network traffic, insider threats, malware, denial of service attacks and phishing campaigns. It requires a massive architecture overhaul. Related article: SIEMs strive for a comeback.

CISO 140
article thumbnail

More SRE Lessons for SOC: Simplicity Helps Security

Anton on Security

We can add: also for security and threatdetectability” and “investigability” (can we just say observability ?). Metrics and associated data collection? So, perhaps one practical tip: when you encounter or create a SOC process, or a piece of technology in or around your SOC, think “does this add complexity?”