Here are some very practical suggestions on the basic steps needed to develop SIEM related use cases. Also see: part 2 and part 3 Create a list of all your available logs (see ‘next step’ below for a long list of suggested logs) Configure your SIEM to collect those logs. Create your ‘use cases’, with … Continue reading Super Simple SIEM Use Case Guide