Becoming a Cloud Security Ninja: Slice Your SIEM Costs by Pre-Processing Cloud Logs

The cloud threat landscape has evolved with the complex, and dynamic nature of the cloud provider platforms and the multitude of services that are available with the click of a button. Threat actors are using various techniques to target businesses that are in the cloud, and most cloud security and SecOps teams are unable to find the needle in the haystack given the massive volume of alerts. How can you help your SecOps team’s productivity and lower SIEM costs by reducing expensive log exports?

Cloud logs such as AWS CloudTrail, Azure Activity log, GCP audit logs, etc. record every event, administrative action, and configuration change across every cloud service. These logs can serve as a great source of truth, but you can’t send all these events data to your SIEM and overwhelm the SecOps team. You need a better way to pre-process logs and prioritize the high-fidelity security signals to send to the SIEM.

During this 60-minute webinar, you will learn from a former Gartner analyst and Sysdig on how to:

• Pre-process cloud logs in your cloud that saves you time and money (no more costly exports to the SIEM)
• Rapidly identify complex threats with out-of-the-box policies and comprehensive threat intelligence feeds
• Creating custom rules based on open-source Falco to accelerate cloud threat detection and response

Speaker:

Michael Isbitski, Director of Cybersecurity Research; Brett Wolmarans, Technical Marketing Manager