May 2021
Intermediate to advanced
752 pages
23h 46m
English
book
The Modern Security Operations Center: The People, Process, and Technology for Operating SOC Services
by Joseph Muniz, Aamir Lakhani, Omar Santos, Moses Frost
Content preview from The Modern Security Operations Center: The People, Process, and Technology for Operating SOC Services
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
Start your free trial
Chapter 10
Data Orchestration
I always try not to overload my music with orchestration and to use only those instruments that are absolutely necessary.
—Abel Korzeniowski
The term data orchestration has gained popularity among many groups, including cloud and datacenter specialists who deal with lots of data. This increasing popularity of data orchestration is due to challenges that have occurred as data increases in volume and velocity. One challenge is expecting an analyst to be able to view and understand large amounts of data. Even tools such as security information and event management (SIEM) can quickly overwhelm an analyst with event data, the alarms for which represent consolidated events that take time to investigate. Another challenge ...