Sort of, yes.
Sort of, yes. SIEM/UEBA (and log analysis) still remains the most broad and flexible of the pillars, but not without its challenges, to be sure
Originally published at Medium.
Dr Anton Chuvakin Blog (Original)
Security writing since the mid-2000s. New posts are mirrored from Anton on Security on Medium.