SIEM Philosophy

I just saw the post https://www.reddit.com/r/cybersecurity/comments/vwhg72/siem_recommendations/ and now I'm a little nervous about making this post. In that post, a user was skeptical about the usefulness of a SIEM if there's only one IT person who would be reviewing the logs, which basically describes my situation. The difference is that I was not asked by my boss to investigate a SIEM solution, I am doing this on my own with Wazuh. My boss is aware of what I'm doing and …

cybersecurity philosophy siem