))
Podcast: Is The Normalized, Taxonomized Approach In A SIEM Doomed To Fail?
Manage episode 390042503 series 3538694
محتوای ارائه شده توسط Podcast Archives - Dale Peterson: ICS Security Catalyst. تمام محتوای پادکست شامل قسمت‌ها، گرافیک‌ها و توضیحات پادکست مستقیماً توسط Podcast Archives - Dale Peterson: ICS Security Catalyst یا شریک پلتفرم پادکست آن‌ها آپلود و ارائه می‌شوند. اگر فکر می‌کنید شخصی بدون اجازه شما از اثر دارای حق نسخه‌برداری شما استفاده می‌کند، می‌توانید روندی که در اینجا شرح داده شده است را دنبال کنید.https://fa.player.fm/legal
An Interview with Corey Thuen of Gravwell.
Dale and Corey discuss the value of a normalized, taxonomized approach to SIEM, which Dr. Anton Chuvakin has famously claimed is doom to fail. Corey is sympathetic to this view and tries to explain it to Dale.
The alternative is gathering and creating a data lake with more log data and pcaps that can be used by threat hunters and customized rules.
The conversation continues with what types of integration would be helpful between the OT detection products and whatever is used for organization wide detection and response, the packet encryption challenge, and the preference to just buy a product.
You can submit your audio question on this episode or other OT and ICS Security topics to the show by going to dale-peterson.com and clicking on “Record Your Question”.
The post Podcast: Is The Normalized, Taxonomized Approach In A SIEM Doomed To Fail? appeared first on Dale Peterson: ICS Security Catalyst.
7 قسمت
اشتراک گذاری
