Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Sumo Logic Cloud SIEM explainer video

Jan 29, 2024 By Sumo Logic In Sumo Logic
Sumo Logic Cloud SIEM helps teams broaden threat visibility across the entire enterprise. With uniformity, clarity and transparency, companies can bring all their security tools together for complete visibility. Cloud SIEM automates real-time threat investigation, incident management and threat response while reducing false positives and analyst fatigue. Bring your teams together with centralized data and cloud-native scale in a SaaS Log Analytics Platform that breaks down silos.
View Video
graylog

Preventing and mitigating data loss with Graylog

Jan 29, 2024 By The Graylog Team In Graylog
If you’re handling sensitive information, dealing with data loss can be more than just a headache. Log management tools such as Graylog can enhance your incident response and management strategies, and help you mitigate the damage when a breach occurs in your database. Minimizing data loss with a fast and scalable logging solution is key if you want to bring your cybersecurity to the next level.
Read Post
elastic

How Elastic AI Assistant for Security and Amazon Bedrock can empower security analysts for enhanced performance

Jan 25, 2024 By Udayasimha Theepireddy (Uday), In Elastic
Generative AI and large language models (LLMs) are revolutionizing natural language processing (NLP), offering enhanced conversational AI experiences for customer service and boosting productivity. To meet enterprise needs, it’s important to ensure the responses that are generated are accurate as well as respect the permissions model associated with the underlying content.
Read Post
Sponsored Post
eventsentry

Revealing Suspicious VPN Activity with Anomaly Detection

Jan 23, 2024 By ingmar.koecher In EventSentry
Anybody who monitors logs of any kinds, knows that the extracting useful information from the gigabytes of data being collected remains one of the biggest challenges. One of the more important metrics to keep an eye on are all sorts of logons that occur in your network – especially if they originate on the Internet – such as VPN logins.
Read Post
CrowdStrike

4 Major Falcon LogScale Next-Gen SIEM Updates That Accelerate Time-to-Insights

Jan 18, 2024 By Kasey Cross In CrowdStrike
To unlock the speed and scalability of CrowdStrike Falcon® LogScale next-gen SIEM, you must first bring your data into the powerful, cloud-native solution. And with log sources multiplying and data volumes skyrocketing, you need an easy way to collect, parse and enrich your data. Data onboarding can be complex and time-consuming in traditional SIEM tools. Data engineering teams must contend with countless evolving log sources, formats and ingestion methods.
Read Post
elastic

NEW! Elastic Security 8.12: AI Assistant alert insights, onboard major CSPs

Jan 17, 2024 By Elastic In Elastic
With the new year in swing, we’re excited to announce that Elastic® 8.12 is now available! This release supports Elastic Security’s mission to redefine security operations by pushing the boundaries of what constitutes a SIEM. Our team is prioritized on elevating your SOC with intelligent, AI powered analytics and the 8.12 release is another step toward this reality.
Read Post
graylog

Application Monitoring with a Web Application Firewall (WAF) for Network Security

Jan 16, 2024 By Jeff Darrington In Graylog
Nearly every business today uses some Software-as-a-Service (SaaS) application. From streamlined productivity to team communication, web applications drive business revenue outcomes. Simultaneously, these applications expand your company’s attack surface since every connection creates new access points that threat actors can use to compromise systems and networks.
Read Post
sumologic

No-code vs. low-code and near-no-code security automation

Jan 16, 2024 By Dario Forte In Sumo Logic
It seems that “no-code” is a term we hear more often in the security automation context these days. And this is especially true because automation has become one of the major talking points in cybersecurity. How is no-code automation implemented in cybersecurity? How do no-code and Sumo Logic automation compare to each other? We’ll discuss all these questions in the following sections.
Read Post
elastic

Is it time to replace your SIEM?

Jan 16, 2024 By Joe DeFever In Elastic
Security teams with an existing security information and event management (SIEM) investment may find themselves having to pay more to their vendor in order to ingest and index more of their data. In fact, nearly half (44%) of organizations want to augment or replace their current SIEM solution. It may be time to replace your SIEM. Fortunately, Elastic allows all users to try out a new, powerful SIEM with little to no upfront cost.
Read Post
graylog

Security intelligence analytics: Planning Increases ROI

Jan 12, 2024 By Graylog Security In Graylog
It’s been a week. A long week. After the most recent Board of Directors meeting, your senior leadership tasked you with finding a security analytics solution. Over the last month, you’ve worked with leadership to develop some basic use cases to determine which solution meets your security and budget needs. You started your research, but everything on the market seems really overwhelming.
Read Post
sumologic

Protecting identities with the Sumo Logic platform

Jan 11, 2024 By Anton Ovrutsky In Sumo Logic
Today’s cyber threat landscape necessitates that we, as defenders of the enterprise, place identities at the center of our detection, prevention and response efforts. Indeed, threat actor tactics and techniques observed in the wild demonstrate that credential theft presents a large risk to the confidentiality, integrity and availability of our systems - be they on premises or in the cloud.
Read Post
logsign

What Does a SIEM Solution Do: Logsign Perspective

Jan 9, 2024 By Raj Pagariya In Logsign

Businesses are currently witnessing improvements in cybersecurity capabilities, thanks to advancements in Artificial Intelligence (AI). However, the progress is accompanied by a parallel increase in the threat and sophistication of cyber-attacks, especially when the right event monitoring and threat detection tools are not utilized. Deloitte's latest research on security operations indicates that in 2023, 12.5% of businesses experienced more than one security event.

Read Post
devo

FedRAMP Authorization: A Value to Both Public and Private Organizations

Jan 9, 2024 By Devo In Devo

The Federal Risk and Authorization Management Program (FedRAMP®) authorization has, for years, been seen as an arduous undertaking only for companies that want to do business with government agencies and their contractors. However, with growing cybersecurity risks, coupled with tightening data privacy regulations across industries, FedRAMP’s fundamental security requirements are becoming best practices for all organizations handling sensitive data.

Read Post
senseon

4 SIEM Price Reduction Tactics Examined

Jan 9, 2024 By Laura In SenseOn
A SIEM’s price can be a bit of a shock. As we’ve covered in another blog, the price of a security information and event management (SIEM) solution is never just about licensing (or whatever you initially agree to pay a vendor for data processing). Even though SIEM licensing costs can easily be tens of thousands of pounds for a small organisation with less than 20 GB of monthly data flow.
Read Post
graylog

Improving IoT security with log management

Jan 9, 2024 By The Graylog Team In Graylog
The Internet of Things (IoT) revolution has set the beginning of a new age of data transfer. Each day, a massive number of new devices get added to all kinds of network infrastructures, transferring gargantuan amounts of data back and forth. In the next decade, we expect the number of IoTs to grow to a staggering 207 billion connected devices – practically outnumbering the human population tenfold.
Read Post
devo

3 Keys to Unlocking Data Visibility in the SOC

Jan 4, 2024 By Devo In Devo

Although SIEMs have existed for more than 20 years, many organizations still fail to achieve full data visibility into their environments. Two problems compound this challenge. First: attack surfaces. As organizations scale their digital infrastructures and bring on new applications, the amount of data analysts need to monitor and analyze increases exponentially.

Read Post

Copyright © 2026 OpsMatters™. All rights reserved.