Meet the SIEM
-
At the request of the presenter, this session was not recorded. - UCTech 2019 Planning Committee
We'll share our experience with a top-right quadrant SIEM, including benefits, pitfalls, operation and support.
- How to learn to use the SIEM
- Best use of vendor resources
- What we expected & what we got
- Leveraging for a small team
- Metrics vs Measurements/Actionable Numbers
- Runbook-style procedures
- Extending to the cloud
- Useful dashboards/reports
- What we would do differently
Previous Knowledge
Some understanding of what a SIEM is.
Software Installation Expectation
PowerPoint, Adobe Reader
Session skill level
Intermediate
Session Track
Securing Information, Assets and Systems