Big 3 security data problems everyone has, and how to solve them.  

 

Regardless of organization size, security teams have the same   "Big 3" data problems:

*  Volume - too much data to analyze,
*  Lack of context - constantly looking up IPs or user names from your events to understand what those mean,
* Normalization - all data sets are in different formats, or worse, need to be analyzed in different tools because of the formats.

 

With so many security tools on the market, it can be difficult to form a plan on how to attack this problem. In this session we will explore how common tools attempt to address the Big 3, where they succeed and where they fall short. We will likely mention security tools that you use now or, at least, categories of tools that you have. More importantly, we will propose a practical approach to start solving the Big 3. You will walk away with an actionable plan that should make your daily life as security practitioners easier. 

Brendan Dalpe is a Solutions Architect on the Sales Engineering Team at Cribl. He helps Cribl's largest customers solve their complex technology challenges in new, innovative, and cost-effective ways.

Brendan has extensive background in Information Security and Observability over the past decade as a practitioner and consultant. He holds a variety of certifications from vendors and professional organizations such as CISSP, CCSP, AWS Certified Solutions Architect - Professional, and many more.