Log Centralization: The End Is Nigh?

So I woke up the other day [A.C. — well, the other year as this blog has lingered] with the…

Debating SIEM in 2023, Part 1

Hey, it is 2023, let’s debate SIEM again!

RSA 2023: Not Under the GenAI Influence Yet!

Security business is booming! Reportedly 38K people showed up for RSA 2023, and 600+ vendors did too. It is very clear from observing the large booths of many vendors (including some that are doing well unexpectedly) that “there is lots of money in…

WTH is Modern SOC, Part 1

In recent weeks, coincidentally, I’ve had several conversations that reminded me about the confusion related to…

Decoupled SIEM: Brilliant or Stupid?

Frankly, not sure why I am writing this, I get a sense that this esoteric topic is of interest to a very small number of people. But hey … LinkedIn made me do it :-) And many of those few people are my friends or at least close industry peers.

Cooking Intelligent Detections from Threat Intelligence (Part 6)