Simplified SIEM Use Case Management

Simplified SIEM Use Case Management

Explore simplified SIEM use case management in this 21-minute conference talk from Derbycon 2015. Learn about Security Incident/Event Management (SIEM) and the importance of maintaining a Use Case Database (UCDB). Discover how a UCDB can help define monitoring needs, replace manual log reviews, and prioritize alert development. Gain insights into sample reports, including concept alerts by category and responsible group. Follow along as Ryan Voloch outlines the basics of SIEM use cases, provides quick start steps, and demonstrates how to effectively manage security monitoring even without a dedicated SIEM system.