Thinking about the infrastructure or the main components of a detection-as-code infrastructure, what can you share with me? Do you use a third-party tool or host everything on your local infrastructure? What is your mechanism for performing detection queries? Do you have any alert management? If I want to put together a detection-as-code strategy right now, where do I start and what is the next step?
I accept personal experiences, recommendations, tools, manuals, books, articles, whatever you have to share with me! submitted by /u/Zaulao
[link] [comments]
http://dlvr.it/T1t3yc
Post Page Advertisement [Top]
Subscribe to:
Post Comments (Atom)
';
(function() {
var dsq = document.createElement('script'); dsq.type = 'text/javascript'; dsq.async = true;
dsq.src = '//' + disqus_shortname + '.disqus.com/embed.js';
(document.getElementsByTagName('head')[0] || document.getElementsByTagName('body')[0]).appendChild(dsq);
})();
No comments:
Post a Comment