SIEM Buyer's Guide

Introduction

• What is SIEM?
• How does a SIEM work?
• Why do you need SIEM?
• Migrating a legacy SIEM to next-gen SIEM

SIEM Use Cases

• Data Exfiltration
• Zero-day Attacks
• Remote Access from Suspicious Location 2.4 Privilege Escalation
• Brute Force Attacks
• PowerShell Attacks
• Lateral Movement
• Insider Threats
• Malware Detection
• Unauthorized Access to the Shared Folders
• Excessive Web Activities

Evaluation Criterias

• Scalability and Big Data Infrastructure
• Data Aggregation
• Correlation and Alerts
• Security Analytics
• User and Network Behavior Analytics
• Advanced Threat Detection
• Threat Intelligence
• Search and Forensic Investigation
• Compliance
• SOC Automation
• Dashboards & Reports
• Fault Tolerant