DangerMouse@GossiTheDog "look for abnormal" ... Many IT teams can't define what's "normal" because they don't review their own logs. Expecting cybersecurity teams to spot abnormalities in that context is unrealistic. We need to stop pushing the message that monitoring is just the SOC’s job. Non-technical IT leaders see that messaging and shift responsibility wholly to the SOC who don’t understand the systems they're supposed to monitor.
GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.
All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.