Collection is not detection and other rules for modernising sec ops
Security operations has always been hard. How many logs should we collect? Which logs should we collect? How to we respond and remediate things quickly? Then just when you thought you’d got it right for your on-premises, you’ve decided to move the cloud and have to start all over again… or do you?
In this talk Sarah will discuss how security operations change from on-prem to the cloud and how to optimise your security operations in a hybrid environment to make use of modern …