Bridge the gap between Requirements and Budget with a Security Telemetry Pipeline

No ratings

Presented at The GrrCON Cyber Security Summit and Hacker Conference 2024 by

Bill Emmet

Every day, security engineers and analysts face the challenge of aggressive threat actors and rapidly growing data volumes without their budgets growing at the same rate. Security teams are stuck in a gap between requirements and funding that is tough to bridge without innovative thinking and new approaches. Teams are working with limited staffing, so every decision and project has to be focused on efficiency. Unfortunately, too many teams are flailing, struggling with chaos, and looking for direction. SOC analysts are struggling with cases where easy access to information takes too much time, and too many details are getting missed A new approach to data SIEM architecture is vital to solving challenges around cost management, effective analytics, and meeting retention requirements. With the right toolset and security strategy, security teams have better visibility into the data sets to accelerate detection and incident response and efficiently deliver enterprise objectives. In this session, attendees will learn how to use an observability pipeline to: – Achieve best-in-class SIEM architecture. – Scale staffing to handle increased demands through automation. – Leverage a data lake to facilitate the data exchange, lower retention costs, and offer better analytics options.