The Primary Function of Security Operations Has Been Subverted The Security Operations Center (SOC) provides two major enterprise services: Situation Awareness (SA) for enterprise systems in the Cyber DomainIncident Response (IR) for events that require intervention For the last 20 years, innovation in the Security Information and Event...
Read More
ThetaPoint’s Security Reference Architecture has abstracted the Security Operations Center’s (SOC) technology stack into four simple buckets: Input, Output, Transform, and Analyze...
Read More
It is amazing the number of times I hear of organizations switching from one SIEM platform to another, only to have the...
Read More
Context makes all of the difference for alert disposition and adjudication. Having all related events readily available shortens the decision cycle and...
Read More
In this blog I will share a sample implementation of the technology stack described in the ThetaPoint Security Reference Architecture for Security...
Read More
How Bad Can it git? A recent research paper described a rigorous empirical study on the rate at which secrets (cryptographic keys, API credentials,...
Read More