So true. Pane of glass is usually synonymous with “real time” alerting and the data/alerts populating this platform should be the most documented and vetted part of your detection process. It’s easy to fail here and count me among those guilty of not always following through.
For a SOC, your analysts pane of glass should not be the biggest learning curve they’re presented with. Strive to make data easily accessible, searchable, retainable and correlatable.
-
-
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
-
-
Letting the analysts do hands on threat hunting is a great way for them to learn.
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
-
-
Yes, this is important aspect that is rarely taught well.
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
-
-
Clear process is important, arguably more. A defined output/stakeholder of the content is key to align them with a clear frame of reference of the content they experience. This re-enforces where the key data is & how to search for it, then what to do with it.
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
-
-
If you have to explain it, it isn't effective.
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.