Skip to content
Forums
Cybersecurity
SIEM and SOAR
 
Notifications
Clear all

SIEM and SOAR

Technical discussion of SIEM and SOAR. Detection engineering, data ingestion cost control, playbook design, alert fatigue, vendor comparisons.
RSS
Page 5 / 9

Is it worth paying for a managed detection rule service like Anvil?

Last post by Briana A., 7 days ago

Posts: 6
Views: 3


Anyone actually using Sentinel in production for detection engineering?

Last post by Jane I., 7 days ago

Posts: 1
Views: 2


Guide: Reducing noisy Windows Security event logs by filtering out known-good process hashes.

Last post by data_diver_42, 7 days ago

Posts: 7
Views: 3


Help: SentinelOne data not parsing correctly in our Graylog setup.

Last post by ide_tinkerer, 7 days ago

Posts: 2
Views: 0


Hot take: Most SOAR playbooks are glorified macros for the analysts they replace.

Last post by Julia Parsons, 7 days ago

Posts: 3
Views: 3


LogRhythm vs Exabeam - which is less painful for a team with no dedicated detection engineer?

Last post by HannahG, 7 days ago

Posts: 2
Views: 2


Cortex SIEM vs Microsoft Sentinel for a hybrid cloud environment

Last post by grafana_knight_shift, 1 week ago

Posts: 2
Views: 3


Show me your SOAR playbook for a contained malware incident. Need a template.

Last post by infra_architect_rebel_2, 1 week ago

Posts: 7
Views: 1


Help: XSOAR playbook keeps failing on the 'enrich IP' step for private addresses.

Last post by Integrations J., 1 week ago

Posts: 1
Views: 1


Check out this simple Sigma rule I wrote for detecting unusual AWS CloudTrail deletions.

Last post by jasonsun, 1 week ago

Posts: 1
Views: 3


Page 5 / 9
Share:
Share
Tweet
Share
Share