Intelligence & Analytics December 21, 2022

When Logs Are Out, Enhanced Analytics Stay In

3 min read - I was talking to an analyst firm the other day. They told me that a lot of organizations purchase a security information and event management (SIEM) solution and then “place it on the shelf.” “Why would they do that?” I…

Intelligence & Analytics October 13, 2022

Tackling Today’s Attacks and Preparing for Tomorrow’s Threats: A Leader in 2022 Gartner® Magic Quadrant™ for SIEM

3 min read - Get the latest on IBM Security QRadar SIEM, recognized as a Leader in the 2022 Gartner Magic Quadrant. As I talk to security leaders across the globe, four main themes teams constantly struggle to keep up with are: The ever-evolving…

Intelligence & Analytics September 21, 2022

How IBM Secured the 2022 US Open

4 min read - Throughout the US Open Tennis Championship, the infrastructure for USOpen.org and the mobile apps can see upwards of 3 million security events. While the vast majority of events are not serious, security analysts must quickly determine which are concerning to…

Intelligence & Analytics May 10, 2022

MITRE ATT&CK and SIEM Rules: What Should Your Expectations Be?

6 min read - The MITRE ATT&CK threat framework is seemingly everywhere these days, and with good reason. It is an invaluable tool for understanding the various methods, or as MITRE refers to them Tactics and Techniques, employed by threat actors. It offers annotated…

Identity & Access March 16, 2022

Integrating IAM and SIEM to Boost Event and Anomaly Detection

2 min read - Sending information from your identity and access management (IAM) system to your security information and event management (SIEM) system can help you to find events and anomalies that you might not find otherwise. This can help you detect that an…

Intelligence & Analytics November 2, 2021

Taking Threat Detection and Response to the Next Level with Open XDR

6 min read - The challenges facing today’s security industry can easily be described as a perfect storm: increasingly sophisticated cyber attackers combined with the proliferation of security tools to cover an expanding attack surface driven by remote work and cloud adoption. These dynamics…

Intelligence & Analytics July 7, 2021

What’s Next for SIEM? A View From the 2021 Gartner SIEM Magic Quadrant

4 min read - Security information and event management (SIEM) solutions continue to evolve, as shown in the 2021 Gartner Magic Quadrant for SIEM, which is a great representation of the changing security landscape and the evolution of key capabilities and experiences that are…

Intelligence & Analytics May 13, 2021

What Is SIEM and How Does it Work? The Past, Present and Future

7 min read - Security information and event management (SIEM) solutions provide organizations centralized visibility into their IT and even sometimes OT environments. At a high level, a SIEM turns data into actionable insights by: Ingesting a vast amount of event data from across…

Intelligence & Analytics May 6, 2021

Zero Trust and Insider Threats: Was Brutus the Original Bad Actor?

2 min read - Insider threats have been a problem for as long as there have been insiders. What’s changed over time? Well, for one, Brutus and his conspirators didn’t exactly leave a trail of logs and flows when they plotted against Julius Caesar…

Intelligence & Analytics May 3, 2021

Alert Fatigue: How AI Can Help You Address Your Most Important Alerts

3 min read - When someone says the word hurricane, I hear the shrill weather-alert warning sound in my head. Having grown up in Florida and now living in North Carolina, I’ve been through many hurricanes and have the routine down — stock up…