The Foundation of Continuous Host Monitoring

Without the right architecture, continuous monitoring can cause more headaches than it cures. This paper examines some of the difficulties organizations face when trying to improperly scale forensic tools and/or concepts, and provides guidance on architectural decisions to help improve continuous...

By

April 2, 2019

Login to download

I consent that SANS may provide my contact information to a third-party sponsor of this white paper, and that the sponsor may contact me to describe their goods and services related to this white paper.

By providing this information, you agree to the processing of your personal data by SANS as described in our Privacy Policy.

All papers are copyrighted. No re-posting of papers is permitted

Sponsored By

Related Webcast

The Foundation of Continuous Host Monitoring

Let's face it; deep dive forensics at scale is not realistic. Most enterprises lack time, experience, and other resources, and the deep dive approach does not scale well. Enterprises continue to struggle with incident scoping and remediation, in large part due to a lack of visibility and insight....

Related Content

Following the Trail of Threat Actors in Google Workspace Audit Logs

Digital Forensics, Incident Response & Threat Hunting

Following the Trail of Threat Actors in Google Workspace Audit Logs

Many of the events we highlight in this blog post and the cheat sheet occur as part of normal business operations...

DFIR_ICON_(1).PNG

Industrial Control Systems Security, Digital Forensics, Incident Response & Threat Hunting

The Quest to Summit | SANS ICS Security Summit 2024

Register for the ICS Security Summit to be able to participate in The Quest to Summit and win big prizes.

Security Awareness, Cybersecurity Leadership, Cloud Security, Open-Source Intelligence (OSINT), Industrial Control Systems Security, Digital Forensics, Incident Response & Threat Hunting, Cybersecurity and IT Essentials, Cyber Defense, Offensive Operations, Pen Testing, and Red Teaming, CyberLive, Workforce Development, Career Development, Why Certify, Imposter Syndrome, NetWars, Mentorship, Job Hunting, Operating System & Device In-Depth, Artificial Intelligence (AI)

A Visual Summary of SANS New2Cyber Summit 2024

Check out these graphic recordings created in real-time throughout the event for SANS New2Cyber Summit 2024