Just because you have 200 use cases turned on in your SIEM solution, does not mean they are actually configured to detect useful and actionable events.
Just because you have metrics of the number of use case events per day, doesn't mean those metrics are additionally useful.
If you don't have quality data and a quality plan, you don't have quality security. #focusonthefundamentals
- Brandon Rizzo
No comments:
Post a Comment