From tool interoperability, to integration and to collaboration By Gorka Sadowski, Chief Strategy Officer, Exabeam and founder, XDR Alliance By and large, the cybersecurity industry has been built on a “best-of-breed” approach. This means that when organizations need three solutions A, B and C, then they try to acquire the…

We’ve seen many reasons already why SIEMs should be focused on Security. In the last blog, we discussed data considerations. Here, we’ll address the simple question “Can’t we just use other correlation rules and also serve ITOM and APM use cases with our SIEM?” Finally, we will wrap up this…

Wrapping data considerations A shorter blog for today, as we wrap some of the data considerations that we addressed in Part 3 of this series of blogs. We saw that there are no massive savings in data collection and storage when using the same tool for security, ITOM and APM…

Data Considerations Tracking right along our series of blogs. The first installment was the intro to this series, with an analogy on market segmentation for cars — the perfect car for all doesn’t exist. The second blog discussed how different stakeholders, different owners, different delivery processes and different outcomes usually…

Different user needs implies different tools The previous intro blog (10 Reasons SIEM Should Remain Dedicated to Security — Part 1) paved the way for this series. It is a bad idea to use a SIEM for IT Operations, application performance management and observability use cases. These are 10 primary reasons for this: A. User needs …

The Diverging Needs of Security, IT Operations, and Application Performance Management When I was a Gartner analyst covering security operations, I would often collaborate with my colleagues covering adjacent topics. I came away convinced that it is a bad idea to use security information and event management (SIEM) solutions for IT operations management (ITOM) and application performance management (APM) use cases.

After four days in Washington D.C. — which is typically muggy in June, but this year it was smoky, too, due to the wildfires burning in Canada — I would like to share with you some of the highlights from the 2023 Gartner Security and Risk Management Summit. This year’s…

Some people believe that Microsoft Sentinel is free as part of an E5 license…. I don’t know who is at the origin of this urban legend but it is far from true. Sentinel is far from free... Really?!? In order to see more clear, let’s ask ChatGPT 4 what’s up. …

Haven’t blogged in a while, and today, we’re going to dive into a topic that is getting a lot of attention — the use of Generative AI and Large Language Models (LLM) (e.g., ChatGPT) for cybersecurity use cases, specifically for threat detection. While these AI-powered cybersecurity solutions offer tremendous benefits…