Blogs Archives

Five Modifications To Imagine a New SIEM Architecture

Sep 05, 2023

Current SIEM architecture is becoming untenable with increasing costs and limited visibility. The dream that cloud SIEM would magically make things easy didn’t play out. In...

Security Data Pipeline Is Ripe for Change

Aug 08, 2023

The advent of cloud, SaaS, and hybrid work environments have made conventional security data centralization pipelines less practical. The future is more flexibility and visibility,...

Reducing/Optimizing Data Centralization Costs

Aug 01, 2023

This blog is part 4 of a 4 blog series on Measuring and Optimizing Enterprise Security Search Costs. See Part 1, Part 2, and Part...

Reducing/Optimizing Analysts’ Search per Investigation (ASPI)

Jul 25, 2023

This blog is part 3 of a 4 blog series on Measuring and Optimizing Enterprise Security Search Costs. See Part 1 and Part 2. To manually...

MOVEit Transfer Learnings: how to prepare for zero-day security investigations

Jul 24, 2023

Investigating zero-day vulnerabilities and exploits is becoming impractical Unfortunately, zero-day vulnerability exploits are increasingly common...

Measuring Analysts Searches per Investigation blog

Measuring Analysts Searches per Investigation (ASPI)

Jul 18, 2023

This blog is part 2 of a 4 blog series on Measuring and Optimizing Enterprise Security Search Costs. See part 1 here. Security teams are collecting,...

Investigate MOVEit Transfer vulnerabilities and exploits efficiently using open federated search

Jul 11, 2023

Abstract Progress Software’s MOVEit Transfer solution is a widely used secure file transfer product. In late May, they announced a critical vulnerability that has left about...

Enterprise Security Search Costs Blog Part 1

Measuring and Optimizing Enterprise Security Search Costs

Jun 27, 2023

With the increased need to monitor more data sources, respond to security events, and analyze and investigate threats, enterprise security search costs are soaring. An...

Cyber Threat Hunting: more sources, more outcomes

Jun 22, 2023

What is Threat Hunting? Threat hunting is proactively searching for unknown threats on the network before being compromised or alerted of a known vulnerability. This is...