Blueprint: Build the Best in Cyber Defense cover image

Strategy 7: Select and Collect the Right Data

Blueprint: Build the Best in Cyber Defense

00:00

The Importance of Time Synchronization in Data Collection

Getting everything that you're collecting from time synchronized is usually a battle that never ends, particularly when you have devices set at different time zones. So one of the things to be thoughtful of in putting together our detections and collection strategies is ways we can write detections so that we're not over indexing. The second is I've seen people, myself included, feel very strongly that end to end latency of data collection need to be measured in sub second or sub minute time frames. But think about writing detections with an economy of mechanism because without economy of mechanism comes the ability to move on to the next detection and the next data fee.

Transcript
Play full episode

The AI-powered Podcast Player

Save insights by tapping your headphones, chat with episodes, discover the best highlights - and more!
App store bannerPlay store banner
Get the app