Prioritizing Log Enrichment

  • Webcast Aired Tuesday, November 6, 2018 at 3:30 pm EST (2018-11-06 20:30:00 UTC)
  • Speakers: Justin Henderson, John Hubbard

Without enrichment, SIEM events and alerts can be noisy and difficult to interpret. Even when a concerning event indeed does occur, not having the context and enrichment data ready at your fingertips slows an investigation down when time is of the essence.

Join this webcast to hear Justin Henderson and John Hubbard discuss new enrichment techniques as well as some tried and true methods that will help make your SIEM data extraordinary!

Learn more about SANS new resources for SIEM including SIEM courses SEC455 'and 'SEC555.

SIEM Webcast Series: How to Avoid the Most Common SIEM Implementation Mistakes