Frustrated with the endless games and deceptive tricks that some information and event management (SIEM) vendors play? It’s time to gain the upper hand and make informed decisions. That’s why I and other people at Exabeam have decided to launch a blog series to help you recognize and effectively counter…

Introduction Security is a big data problem. More precisely, it is a right data problem. Solving the challenge facing security operations starts with the realization that organizations need to manage a staggering complexity of the right data points with big data characteristics in terms of volume, variety, and velocity. …

CISOs interested in having a better understanding of security analytics, such as Machine Learning (ML) or User and Entity Behavior Analytics (UEBA), have limited — or shall we say poor — sources of information. …

I love the topic of security automation and have been fortunate to be in the field for many years. As an example, I was part of the original Gartner team that coined and defined Security Orchestration, Automation, and Response (SOAR) back in November 2017 (https://www.gartner.com/document/3834578). I’m very happy to see…

My good friend and colleague Sanjay Chaudhary and I were among the team representing Exabeam at the Gartner Security & Risk Summit 2022 in National Harbor, MD. We realize that not everyone had an opportunity to participate, so we thought we would share our notes with those who missed the…

I think we can all agree that one of the primary responsibilities of a SOC is to efficiently bring the organization back to a known good state after being hit by an attack. And yes, that includes detecting that an incident took place and responding to that incident. The proverbial…

In a previous blog, I described why following the XDR newsfeed felt like watching a telenovela with always a more dramatic episode around the corner. This might be fun for the casual observer, but it is really hurting CISOs and security teams, and ultimately it is detrimental to organizations’ security…

Confusing drama? Intrigue? Passion? Cliffhangers? Look no further than the XDR Telenovela and its never-ending stream of episodes. New episodes — the plot thickens If you are a technology buyer for the SOC I bet the XDR Telenovela is programming you could do without. Every day, there seems to be a new dramatic episode. Yet another…

A couple of months back, I wrote about traditional SIEMs not being adequate threat detection, investigation, and response (TDIR) tools for our new world, and how that forced the marketplace to adapt, creating a vacuum for two types of TDIR tools, namely 1) XDRs and 2) emerging SIEMs. …