Myths in your SOCs

There is a pernicious myth floating around. It's that rule-based Security Information and Event Management (SIEM) is old technology, and is no longer worth using today. It's that modern attacks can bypass rule-based SIEMs. This is partly true, but mostly false. There are large, older companies out there that don't use SIEMs to defend their data, and they do so at their own risk.