Shawn Thomas and JR Presmy

The SIEM, everyone has one, but does anyone really know how to get to most from them? There are many SIEMs out there and they can be used for many different purposes but at the core it's likely the most high maintenance security tool you have in your environment However, .with a little TLC you would be amazed the value you can get as long as long as you know what you are after. Come join these speakers as they talk about common use cases, tips, tricks, and ways to get the most out of your SIEM including maintenance and tuning, what you should be ingesting, and common practices to better your visibility and posture.

Shawn spent many years of his career as an analyst, incident responder, and SIEM user across most major SIEM platforms on the market. Recently he finds himself running SOCs to empower analysts to better find evil.

(see above)

JR has 15 years of experience in Infosec with the last half of his career as a cyber security architect. He enjoys turning massive piles of data into actionable information.\

Back to BSidesCharm 2019 list