Sivan Tehila, cybersecurity strategist at Perimeter 81, discusses the elements involved in creating a modern SIEM strategy for remote work and cloud-everything. Modern security threats are driving a need for layered analytics with security platforms. SIEM software uses analytics engines to match events against an organization s policies. AI, machine learning and advanced analysis ca automate the detection of anomalous behaviors and improve response time even more, stopping any potential attacks on the organization in real-time. Automation is essential to SIEM adoption and ongoing effectiveness.
Source: https://threatpost.com/building-siem-threat-landscape/166390/