EP125 Will SIEM Ever Die: SIEM Lessons from the Past for the Future
Cloud Security Podcast by Google
00:00
The Importance of Focusing on Business Risk
The importance of focusing on business risk passed out of knowledge in the late 1990s. "It's really hard to sell a product that solves that problem, but it's really easy to selling a product that promises to catch fancy bear," he says. He looks for patterns such as repeat failed anything, repeat failed log ends and repeat firewall drops.
Play episode from 04:40
Transcript
