Coming October 25: PeerSpot Awards will be announced! Learn more


User Activity

3 months ago
Contributed a review of IBM QRadar User Behavior Analytics: Scalable, easy to use, but lacking features and modern user interface
12 months ago
Replied to Seckin Demir The Math of SIEM Comparison
@Seckin Demir If my comments do not satisfy you about the McAfee SIEM, you can check comments from Gartner. Limited advanced features and add-ons: McAfee lags behind competing SIEM vendors that offer cloud-native SIEM options, ML powered UEBA and SOAR add-on…
About 1 year ago
@reviewer1469436 Some SIEMs keeps data(log) hot for a long time with minimal disk size. For example, for 10000 EPS and 365 days live (hot), they require 20 TB disk size.This model may be easier than your model and very fast.
About 1 year ago
Some examples https://drertugrulakbas.medium...
About 1 year ago
Replied to Gary Budnick The Math of SIEM Comparison
@Gary Budnick, I think it is not missing. I mentioned their UEBA capability in my article.
About 1 year ago
Replied to Augusto Barros The Math of SIEM Comparison
@Augusto Barros my sentence is: "Exabeam and Securonix are UEBA tools. They are not correlation-based solutions". It does not mean that Exabeam and Securonix do not provide the ability to build correlation based rules. I tried to emphasize their UEBA capability.
About 1 year ago
@CraigHeartwell, ​thanks for your spelling correction.  ArcSight acquired Interset for ML. Yes, LogRhythm can handle the logic. SIEM Comparison table is on my mind for a long time. I published the Turkish version. I need to work to extend it before publishing.
Over 1 year ago
They are not same. For evet monitoring (log management) aggregation is enough but if you need correlation then SIEM required. Aggregation  means log parsing and correlation means developing rules to detect attacks
Over 1 year ago
@John Stanford, you are right. A good Security Platform includes SIEM, UEBA, NTA, and SOAR. But most of the time, you have a limited budget, and you should select the best solution according to your budget. Especially for small businesses, budget is critical. If there is no…
Over 1 year ago
@Mike Kehoe There is no technical solution that does not require maintenance. You can outsource it or use a cloud-based solution. If you use a cloud-based solution, you have to check issues like compliance, regulations and ownership of the logs.

About me

Specialties:SIEM/NMS/Log Management/APM, understanding the security data,