Abstract

Now that you have a SIEM installed, how do you make the best use of it? Often times, the default alerts and thresholds from the vendor are insufficient for truly monitoring an environment. In this session, we will talk about ways you can develop advanced alerting that will increase the odds of triggering on actionable security events.

Presented by