SIEM

NTA and NDR: The Missing Piece

Most SIEM vendors acknowledge the value of network traffic data for leading indicators of attacks, anomaly detection, and user behavior analysis as being far more useful than log data. Ironically, network traffic data is often expressly excluded from SIEM deployments, because the data ingest significantly increases the required data aggregation and storage costs typically 3-5x.

How the Role of the Modern Security Analyst is Changing

As organizations began to rely more heavily on networking to carry out their operations over the past decade, IT teams added security analyst positions. These professionals focused on network security and providing regulatory compliance oversight.  Over time, the role of the security analyst has expanded to include threat hunting tasks. That is, evaluating security platform …

How the Role of the Modern Security Analyst is Changing Read More →

5 Things to Know About the New PacketSled Platform

Since its commercial launch in 2015, the PacketSled platform was rooted in the Network Forensic and Incident Response space, garnering several awards and mentions for this capability1. In Q1 2019, PacketSled launched an all-new platform combining this forensic capability with artificial intelligence that is purpose-built for false positive alert suppression. We also changed our trade name to …

5 Things to Know About the New PacketSled Platform Read More →

5 Ways to Modernize Your MSSP Security Monitoring Program

MSSPs are helping their customers deal with a fast-paced and ever-evolving threat landscape. It is critical, now more than ever, to evaluate new monitoring tools that produce more actionable data and alerts to help unearth and combat these modern threats more efficiently.    I recently read an article titled  “4 Technologies SMBs Can Use to Modernize …

5 Ways to Modernize Your MSSP Security Monitoring Program Read More →