SIEM Black Boxes | by Alexander Leonov

Recently, I examined some automated Post-SIEM products, described with a lot of buzz words: UEBA, threat intelligence, machine learning, etc. I would like to share my opinion about all this, from the vendor, and from the consumer side. What’s bad with traditional SIEMs? Some information security experts [1,2,3] say, that....