Log Centralization: The End Is Nigh?

Log Centralization: The End Is Nigh?

| | Log Analysis, logging
So I woke up the other day [A.C. — well, the other year as this blog has lingered] with the scary thought: what if we will run out of the opportunities to centralize logs ...
Logging 1

Logging: A Deep Dive

Our RASP product At Imperva our team builds a product called RASP which stands for Runtime Application Self Protection. As indicated by the name, it is a security product which plugs directly ...
event logging, CISA, living off the land

How Logging Eliminates Security Blindspots to Better Identify Threats

The digital landscape continues to grow increasingly complex, and security risk and operational costs rise as digital transformation accelerates. According to research by McKinsey and Company, more than 70 percent of security ...
Security Boulevard

How Isolation Changes Incident Response

Large Groups of Isolated Users Shrink Your Exposure Surface Enterprises frequently acquire an isolation solution (with Menlo for remote browser isolation) for groups of users, such as VIPs, rather than their entire ...
zscaler, red canary

Cloud Security Challenges in 2020

Cloud computing has given organizations the ability to harness the power of advanced infrastructure without incurring the upfront costs traditionally required for on-premises networks. Provisioning IT resources requires little knowledge of the ...
Security Boulevard
Graph

Time Series Databases, the Future of Monitoring and Logging

The post Time Series Databases, the Future of Monitoring and Logging appeared first on CCSI ...
Could Facebook have prevented storing sensitive data in application logs?

Could Facebook have prevented storing sensitive data in application logs?

Passwords happen to be super-sensitive data. As far as password logging goes, there are cryptographic protocols available today that could have prevented this security event at Facebook.The post Could Facebook have prevented ...
:-)

2018 Popular SIEM Starter Use Cases

One of the most popular posts (example) on my blog is “Popular SIEM Starter Use Cases.” However, this post is from 2014, and is, in fact, partially based on my earlier experiences ...
AU-6, AU-7 and AU-9 On the Cheap

AU-6, AU-7 and AU-9 On the Cheap

| | Audit, Compliance, logging, NIST
SIEM or SEIM or Log Correlation tools are generally considered expensive. I won’t get into the particulars of what is or is not expensive for you or your customer. It also depends ...
Toolsmith #126: Adversary hunting with SOF-ELK

Toolsmith #126: Adversary hunting with SOF-ELK

As we celebrate Independence Day, I'm reminded that we honor what was, of course, an armed conflict. Today's realities, when we think about conflict, are quite different than the days of lining ...