tag: Siem · 2 items
- Engineer — Learn: Worth evaluating as a high-throughput, open-source detection pipeline if you run your own SIEM infrastructure; no vulnerability or configuration change required today.
- SOC/IR — Plan: Assess AIGuardSIEM for your detection stack: its native Sigma rule support and eBPF monitoring could expand coverage; evaluate against your current SIEM in a lab environment this quarter.
- Leader — Skip
- Engineer — Skip
- SOC/IR — Learn: If you run the DShield SIEM, this update brings ELK 8.19.15 and additional dashboards; evaluate whether to upgrade your instance this quarter.
- Leader — Skip