Matt Cauthorn is vice president of security at Extrahop, where he leads a team of technical security engineers. He discusses the “visibility triad” of endpoint detection and response, and SIEM. The triad is critical data sources for effective threat hunting and incident response, he says. In a video interview at Information Security Media Group’s Cybersecurity Summit in New York, he discusses why each of those three data sources are so critical for threat hunting, incident response and threat hunting.”]
Source: https://www.cuinfosecurity.com/tapping-visibility-triad-a-12984