SIEM & Monitoring

OTel, metrics, alerts, incident response.

Early detection

Forensic capability

Compliance

Scope of work

  • Log pipelines & normalization
  • Use cases/detections
  • Dashboards/runbooks
  • IR playbooks & exercises

Approach

  1. 1
    Plan
    Data sources/use cases.
  2. 2
    Build
    Parse, correlate, alert.
  3. 3
    Operate
    Tuning and threat hunting.
SIEM & Monitoring - Cybersecurity - Bissolux