Exploring the Pros and Cons of a Unified View in SOC Operations

All links and images for this episode can be found on CISO Series.

Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Steve Zalewski. Joining us is our sponsored guest, Matt Eberhart, CEO, Query.

In this episode:

• Isn't the whole point of a single pane of glass making sense of your data?

• But when these dashboards are limited to a single platform, how useful are they?

• Does it seem like all they've led to is more browser tabs or more monitors crowding your analysts?

• We know we want to take action based on our data, so how do we get there?

Thanks to our podcast sponsor, Query

Query Federated Search gets to your security relevant data wherever it is - in data lakes, security tools, cloud services, SIEMs, or wherever. Query searches and normalizes data for use in security investigations, threat hunting, incident response, and everything you do. And we plug into Splunk. Visit query.ai.