July 25, 2022, 3:29 a.m. | /u/ReturnOpen

cybersecurity www.reddit.com

Currently one of few in my Company using SentinelOne for threat hunting, we use a lot of security software but it’s a pretty solid SIEM. But when going through the massive load of queries with like 100 companies to index; I am going through failed passwords on the network, dns queries, and just reviewing how our endpoints are communicating.

Is there any advice on specific queries I should be looking at, or is the built in A.I. and behavioral analysis …

cybersecurity search siem

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

Security Engineer, Infrastructure Protection

@ Google | Hyderabad, Telangana, India

Senior Security Software Engineer

@ Microsoft | London, London, United Kingdom

Consultor Ciberseguridad (Cadiz)

@ Capgemini | Cádiz, M, ES

Cyber MS MDR - Sr Associate

@ KPMG India | Bengaluru, Karnataka, India

Privacy Engineer, Google Cloud Privacy

@ Google | Pittsburgh, PA, USA; Raleigh, NC, USA