Don’t dismiss event correlation.

There’s a common “myth” today that event correlation is no longer effective or necessary-that rules don’t have a place in the SOC anymore. But that’s not necessarily the case. When done in real-time, correlation gives you important context about the relationship between events and remains an effective way to quickly identify and respond to known threats.

Originally published at https://www.peerlyst.com on January 5, 2020.