I’ve had the chance to work with many great security teams during my career and in 2012, I had the opportunity to join Verizon’s SOC in Germany. That was a very challenging experience considering its massive scale SecOps. It was also by that time when I realized Splunk could be used as a sort of…
Category: Infosec
Blame it on YOU for the damn false-positives!
Below is a list of 6 facts (and counting) you should know before whining and complaining around the infamous false-positive (FP) topic. If you’ve been there, feel free to comment and share your pain or your own facts. As you know, the FPs are everywhere and multiplying just like Gremlins after a shower! [Misled Millennials, click…
Splunkers on Twitter
Below is a list of Splunk users I am following on Twitter, including Splunkers, partners and awesome users. Most of them are also into #Infosec. The list is not sorted in any particular order. Missing someone, maybe you?! Please feel free to contact me for adding more. In case you want to follow a list,…
Challenge your MSSP/SOC/CSIRT: what metrics can they provide you?
I was trying to recall a famous quote related to “Metrics” for including here and below is what Mr. Google hints me: The quote has a few variations, but that seems to be the most famous one. Perhaps now it will finally stick. So, does it make sense or is it just another unquestioned corporate…
