Do you have any good write-ups on use cases? It seems like everything I see about SIEMs is SOC-focused, but [bear with me] *back in my day*, detecting attacks was just one use case.
I don't have anything on it, but is one my list for the friday SEIM posts , and yes detecting is just one use-case. Is used for threat hunting, forensic investigations, compliance/regulatory requirements.
Do you have any good write-ups on use cases? It seems like everything I see about SIEMs is SOC-focused, but [bear with me] *back in my day*, detecting attacks was just one use case.
I don't have anything on it, but is one my list for the friday SEIM posts , and yes detecting is just one use-case. Is used for threat hunting, forensic investigations, compliance/regulatory requirements.