The Evolution of the SIEM: Seeing and Doing More to Stop Attacks

Security Information and Event Management (SIEM) offerings are over twenty years old. SIEM's log aggregation and compliance focus has taken a backseat to other emerging cybersecurity technologies which are more proactive. However, technological improvements have led to a resurgence in SIEM offerings. SIEMs can now enhance real-time threat detection, automate incident response, and support zero trust architectures. Most importantly, they are in a better position to support modern cloud environments and to address sophisticated cyberattacks. Tune in to the presentation from business owner and professor Charles Kolodgy, who will provide insights and examples on how SIEM improvements are enhancing cybersecurity operations, particularly in the security operations center (SOC). The discussion will cover the benefits of orchestration and automation capabilities, threat intelligence integration, and AI implementation. Join this discussion to learn: - How the SIEM has evolved from a log consolidator to an integrated security platform that can provide full visibility, alerting, and detection while adding automation and response and other capabilities. - The capabilities, advantages, and disadvantages of modern SIEM technology. - The cost savings and operational efficiencies that come with SIEM technology improvements. - The synergies between next-gen SIEM and a zero trust architecture. - How the modern SIEM can work with and integrate well with other SOC elements. - The leading advanced SIEM products.