Badges

210 Points
8 Years
Top 5

User Activity

Over 1 year ago
Over 2 years ago
Replied to Seckin Demir The Math of SIEM Comparison
@Seckin Demir If my comments do not satisfy you about the McAfee SIEM, you can check comments from Gartner Limited advanced features and add-ons: McAfee lags behind competing SIEM vendors that offer cloud-native SIEM options, ML powered UEBA and SOAR add-on…
Over 2 years ago
@reviewer1469436 Some SIEMs keeps data(log) hot for a long time with minimal disk size. For example, for 10000 EPS and 365 days live (hot), they require 20 TB disk size.This model may be easier than your model and very fast.
Over 2 years ago
Some examples https://drertugrulakbas.medium...
Over 2 years ago
Replied to Gary Budnick The Math of SIEM Comparison
@Gary Budnick, I think it is not missing. I mentioned their UEBA capability in my article.
Over 2 years ago
Replied to Augusto Barros The Math of SIEM Comparison
@Augusto Barros my sentence is: "Exabeam and Securonix are UEBA tools. They are not correlation-based solutions". It does not mean that Exabeam and Securonix do not provide the ability to build correlation based rules. I tried to emphasize their UEBA capability.
Over 2 years ago
@CraigHeartwell, ​thanks for your spelling correction.  ArcSight acquired Interset for ML. Yes, LogRhythm can handle the logic. SIEM Comparison table is on my mind for a long time. I published the Turkish version. I need to work to extend it before publishing.
Almost 3 years ago
They are not same. For evet monitoring (log management) aggregation is enough but if you need correlation then SIEM required. Aggregation  means log parsing and correlation means developing rules to detect attacks
Almost 3 years ago
@John Stanford, you are right. A good Security Platform includes SIEM, UEBA, NTA, and SOAR. But most of the time, you have a limited budget, and you should select the best solution according to your budget. Especially for small businesses, budget is critical. If there is no…
Almost 3 years ago
@Mike Kehoe There is no technical solution that does not require maintenance. You can outsource it or use a cloud-based solution. If you use a cloud-based solution, you have to check issues like compliance, regulations and ownership of the logs.

Projects

About 1 year ago
SureLog SIEM
World's the most economical and technological SIEM solution Website http://www.surelogsiem.comThis product is intended for Cyber Security Specialist, Compliance Manager, Auditor, Cyber Security Consultant, Cyber Security Engineer, Cyber Threat Investigator, Internal Audit…

About me

Specialties:SIEM/NMS/Log Management/APM, Understanding the security data, Machine Learning, Anomaly Detection

Interesting Projects and Accomplishments

About 1 year ago