Security Information and Event Management (SIEM) or VM scanner that alerts on a system that has a port 445 for Server Message Block (SMB) open is ripe for exploration. To answer that question, the company needs to answer it in an enriched intelligence context to make informed decisions. Getting the right data together to make an informed decision is hard part of the hard part. The longevity gains are smaller than some headlines may lead us to believe because those headlines are based on oversimplified math and projection assumptions.”]
Source: https://securityintelligence.com/why-turning-data-into-security-intelligence-is-so-hard/