Cybersecurity is an arms race, pure and simple. As one side enhances its offensive capabilities, the other must respond in kind by improving their defenses. Thus, as threat actors became increasingly skilled at circumventing perimeter security through phished or brute-forced credentials, or vulnerability exploitation, network defenders responded by focusing more attention on detection and response. This is where Security Information and Event Management (SIEM) came in.
*** This is a Security Bloggers Network syndicated blog from comforte Blog authored by Erfan Shadabi. Read the original post at: https://insights.comforte.com/with-security-analytics-tools-failing-its-better-to-focus-on-data-protection