Here, if you want TL;DR, my position on XDR today is “wait and see” (boring, huh?). Unlike some of my esteemed former colleagues, I don’t really…

Now, we all agree that various cloud technologies such as SaaS SIEM help your Security Operations Center (SOC). However, there’s also a need to talk about how traditional SOCs are challenged…

2021 Threat Intelligence Use Cases

For a reason that shall remain nameless, I’ve run this quick poll focused on the use cases for…

As you are reading our recent paper “Autonomic Security Operations — 10X Transformation of the Security Operations Center”, some of you may think “Hey, marketing inserted that 10X thing in there.”

Stealing More SRE Ideas for Your SOC

As we discussed in “Achieving Autonomic Security Operations: Reducing toil” (or it’s early…

It is with much excitement that we announce a new paper about transforming your security operations; it is published under the Office of the CISO at Google Cloud.

Back in my analyst years, I rather liked the concept of NDR or Network Detection and Response. And, despite having invented the acronym EDR, I was raised on with NSM and tcpdump way before that. Hence, even though we may still live in an endpoint security…