Скачать или смотреть EP190 Unraveling the Security Data Fabric: Need, Benefits, and Futures

Guest:


• Josh Liburdi (  / joshliburdi  ) , Staff Security Engineer, Brex


Topics:


• What is this "security data fabric"? Can you explain the technology? Is there a market for this? Is this same as security data pipelines?

• Why is this really needed? Won't your SIEM vendor do it?

• Who should adopt it? Or, as Tim says, what gets better once you deploy it?

• Is reducing cost a big part of the security data fabric story?

• Does the data quality improve with the use of security data fabric tooling?

• For organizations considering a security data fabric solution, what key factors should they prioritize in their evaluation and selection process?

• What is the connection between this and federated security data search (  / log-centralization-the-end-is-nigh  ) ?

• What is the likely future for this technology?


Resources:


• BSidesSF 2024 - Reinventing ETL for Detection and Response Teams (Josh Liburdi) (   • BSidesSF 2024 - Reinventing ETL for Detect...  )

• "How to Build Your Own Security Data Pipeline (and why you shouldn't!)" (https://tarsal.co/how-to-build-your-o...) blog

• "Decoupled SIEM: Brilliant or Stupid?" (  / decoupled-siem-brilliant-or-stupid  ) blog

• "Security Correlation Then and Now: A Sad Truth About SIEM" (  / security-correlation-then-and-now-a-sad-tr...  ) blog (my #1 popular post (  / anton-on  ) BTW)

• "Log Centralization: The End Is Nigh?" (  / log-centralization-the-end-is-nigh  ) blog

• "20 Years of SIEM: Celebrating My Dubious Anniversary" (  / 20-years-of-siem-celebrating-my-dubious-an...  ) blog

• "Navigating the data current: Exploring Cribl.Cloud analytics and customer insights" (https://cribl.io/navigating-the-data-...) report

• OCSF (https://github.com/ocsf)