Tag: SIEM
Indicator Of Attack(IoA’s) And Activities – SOC/SIEM – A Detailed Explanation
What is an Indicator of Attack (IOA)
IoA's is some events that could reveal an active attack before indicators...
Security Information and Event Management (SIEM) – A Detailed Explanation
SIEM software products and services combine security information management (SIM) and security event management (SEM). They provide real-time analysis of security alerts...
SOC First Defense Phase – Understanding The Cyber Attack Chain – A Defense Approach...
This article will help you to understand the modern cyber threats and the most commonly used attack surfaces behind any malware/cyber-attacks. In most...
Intrusion Prevention System (IPS) In-depth Analysis – A Detailed Guide
Like an intrusion detection system (IDS), an intrusion prevention system (IPS) screens network traffic. An Intrusion Prevention System (IPS) is a framework...
SIEM Better Visibility for SOC Analyst to Handle an Incident with Event ID
We are in the complex world where attacks are increasing day by day, so today the cyber intelligence depends on SIEM as a...
