Dr Anton Chuvakin Blog (Original): I agree and I suspect it will have to be TD&R not just detection.

Dr. Anton Chuvakin

Security at Cisco. Before that: Google Cloud Office of the CISO, eight years as a Gartner analyst, and a long run in SIEM and log management. Author of Security Warrior, PCI Compliance, and Logging and Log Management.

I agree and I suspect it will have to be TD&R not just detection.

The Last Blog Post!

Simple Log Review Checklist Released!

Why No Open Source SIEM, EVER?

Monthly Blog Round-Up – May 2017

Monthly Blog Round-Up – January 2018