Monthly Blog Round-Up – January 2013

Here is my next monthly "Security Warrior" blog round-up of top 5 popular posts/topics this month:

1. “Simple Log Review Checklist Released!” is often at the top of this list – the checklist is still a very useful tool for many people. “On Free Log Management Tools” is a companion to the checklist (updated version, and, yes, I know it really needs another update)
2. My classic PCI DSS Log Review series is popular as well. The outlined log review approach is useful for building other types of log review processes and procedures, whether regulatory or not.
3. “On Choosing SIEM” is another old classic (from 2010) that shows up on my top list; it covers some tips on  choosing SIEM tools.
4. “Top 10 Criteria for a SIEM?” came from one of my last projects I did when running my SIEM consulting firm in 2009-2011.
5. “SIEM Bloggables” covers a few high-level SIEM use cases and my view (at the time) of key SIEM functions.

In addition, I’d like to draw your attention to a few posts from my Gartner blog:
Current network forensics research:

• Network Forensics Defined?

Previous SIEM research:

• My SIEM Papers Are Out

Previous DLP research:

• DLP: Education and/or Automation?
• More On Internal Data Loss Incidents
• On “Internally Lost Data” and DLP Discovery
• On Risks of DLP
• DLP and Data Classification
• DLP: Discover First or Monitor First?
• On DLP and PCI DSS
• On DLP and IP Theft
• DLP and/or/for/vs Data Security
• On DLP Processes or “No DLP For Dummies”
• On DLP Research

Also see my past monthly and annual “Top Popular Blog Posts” – 2007, 2008, 2009, 2010, 2011, 2012.

Disclaimer: all content at SecurityWarrior blog was written before I joined Gartner on Aug 1, 2011 and is solely my personal view at the time of writing. For my current security blogging, go here.
Previous post in this endless series:

• Monthly Blog Round-Up – December 2012
• All posts tagged monthly