Forum
3

We are looking for a SIEM Solution. Any recommendations?

asked by timth 25 days ago

Small team, mixed Windows and Linux, no dedicated SOC. Budget exists but is not unlimited.

2 answers

Sign in to answer.
gerald (Gerald) 7 points 25 days ago

Third one of these this month. Not having a go at you, it just tells you something that everyone asks and nobody answers.

The reason is the answer really is "it depends", and what it depends on is budget, who operates it, and what you already have. Post those three and you get useful replies instead of a list of vendor names.

aklaha 5 points 24 days ago

No dedicated SOC is the important part. That rules out anything whose value only appears if somebody watches it full time. You want something that emails you when it matters and shuts up otherwise.

Guidelines Newest Search Back to Trunc