Skip to content
Forums
Cybersecurity
SIEM and SOAR
 
Notifications
Clear all

SIEM and SOAR

Technical discussion of SIEM and SOAR. Detection engineering, data ingestion cost control, playbook design, alert fatigue, vendor comparisons.
RSS
Add topic
Page 1 / 12

Switching from Elastic Security to Splunk ES. What should I expect in terms of learning curve?

Last post by gracej77, 2 months ago

Posts: 1
Views: 70


Anyone running a 24/7 SOC on Cortex XSIAM? Staffing and tooling lessons

Last post by clarag, 2 months ago

Posts: 5
Views: 74


Guide: Practical log source onboarding checklist we use for new clients.

Last post by benchmark_bob_42, 2 months ago

Posts: 56
Views: 518


Is a 'detection as code' approach with tools like Splunk ESCU worth the DevOps overhead?

Last post by Emma B., 2 months ago

Posts: 5
Views: 71


Best SIEM for a 200-user shop on AWS with Python pipelines

Last post by amandaj, 2 months ago

Posts: 6
Views: 73


Unpopular opinion: Spending six months tuning your SIEM before going live is a waste. Tune on real data.

Last post by Caroline M., 2 months ago

Posts: 5
Views: 77


What's the best way to test SOAR playbooks without triggering real actions?

Last post by helenj, 2 months ago

Posts: 12
Views: 92


Deploying Security Onion to 50 sensors in a retail environment

Last post by finops_auditor_ray, 3 months ago

Posts: 6
Views: 60


Help: Our SIEM isn't picking up lateral movement clues that we find manually.

Last post by alexh, 3 months ago

Posts: 38
Views: 338


Switched from AlienVault to Wazuh. Saved $60k, detection gap is minimal for our size.

Last post by gracel, 3 months ago

Posts: 4
Views: 67


Page 1 / 12
Share:
Share
Tweet
Share
Share