Practical msticpy Use: Rainbow Bridge to SIEM for Advanced Threat Hunting

SANS Asia Pacific DFIR Summit 2023
Practical msticpy Use: Rainbow Bridge to SIEM for Advanced Threat Hunting
Speaker: Tatsuya Hasegawa

Analyzing logs with SIEM has become commonplace these days. Are you stuck with the analysis that can be done with only your SIEM? Aren't you just looking at your dashboard, are you? Data analysis should be a freedom. In other words, uniquely conceived analytical logic, unrestricted external collaboration, eccentric visualization, emphasis that is easy for readers to understand etc. On …

advanced advanced threat analysis asia asia pacific bridge can dfir hunting logs msticpy pacific sans siem speaker summit threat threat hunting