I'm going to live-tweet my observations about the 2016 Verizon DBIR as I read it. Judging by past years, it won't be pretty.
-
@alexhutton Why not extract exploit use from incident data rather than import from Kenna? It's easier to map to patterns / groups that way.
@alexhutton As it is, the IDS+Scanner logs combo is measuring "weather" on the internet (subject to sig quality) more than abused vulns.