5 min read
Security Events Everywhere and None Worth Investigating
If you’re in security, you probably have some tool somewhere showing a lot of events. Verizon Data Breach Investigation Reports consistently show...
Read More
3 min read
SIEM vs. SOAR: The Right Security Tool
Security information and event management (SIEM) and security orchestration, automation, and response (SOAR) are complementary solutions.
4 min read
SIEM 101 – Best Practices for Implementation
Security information and event management (SIEM) is about collecting, detecting, and responding. That is, collecting data into a single pane of glass...
2 min read
Looking “Left of Bang” to Increase Situational Awareness
At Netenrich, part of what we’re doing is looking "left of bang." Bang (!) is geek speak for when we see detonation of malicious content. What...
2 min read
Situational Awareness Is Key to Faster, Better Threat Detection
Threats start with risks. Understanding risks is really just situational awareness. And that awareness leads to faster and better detection. The...
3 min read
UEBA, It's Just a Use Case
"UEBA, it’s just a use case." – Netenrich CISO Chris Morales
He’s not wrong. But I’d take it a step further. User entity and behavior analytics (...
4 min read
Want to Optimize Threat Detection & Response? 5 Patterns vs. 500 Rules
One vendor uses 5 patterns, the other uses 500 rules. What’s better?
Anyone who has configured a SIEM or UEBA (e.g., QRadar, Splunk, ArcSight,...
