Skip to content
Forums
Cybersecurity
SIEM and SOAR
 
Notifications
Clear all

SIEM and SOAR

Technical discussion of SIEM and SOAR. Detection engineering, data ingestion cost control, playbook design, alert fatigue, vendor comparisons.
RSS
Page 8 / 9

Has anyone tried using Humio for security? Their pricing model is attractive.

Last post by k8s_cost_ninja, 1 week ago

Posts: 2
Views: 4


Just built a Python script to correlate failed logins between CrowdStrike and Okta. Works better than our SOAR.

Last post by Eval_Newbie_2025, 1 week ago

Posts: 1
Views: 4


Top SIEM for AWS-native shops in 2026

Last post by jimmyb, 1 week ago

Posts: 3
Views: 8


What's the best way to test SOAR playbooks without triggering real actions?

Last post by alexh, 1 week ago

Posts: 1
Views: 4


How to design a SOAR playbook that doesn't break when a minor step fails?

Last post by Integrations J., 1 week ago

Posts: 3
Views: 6


Migrated from QRadar to Splunk - data ingestion and playbook design

Last post by Emma L., 1 week ago

Posts: 7
Views: 6


Palo Alto Cortex SIEM vs Microsoft Sentinel for a hybrid cloud environment

Last post by observability_guru, 1 week ago

Posts: 4
Views: 7


We're evaluating Panther vs Splunk Cloud for a startup. Anyone have long-term cost data?

Last post by benchmark_hunter, 1 week ago

Posts: 1
Views: 9


Logging best practices: What events from Azure AD/O365 are absolute must-haves for detection?

Last post by devops_grunt, 1 week ago

Posts: 3
Views: 4


Best SIEM for a 200-user shop on AWS with Python pipelines

Last post by data_meets_ops, 1 week ago

Posts: 6
Views: 5


Page 8 / 9
Share:
Share
Tweet
Share
Share