The New Forensics: Using a SIEM for Preliminary Investigation

Are you using your SIEM as a forensic tool? With the increase of insider attacks & potentially damaging policy violations organizations have to get smarter about running their own internal investigations. Rob Ayoub, Global Program Director, Network Security, with Frost & Sullivan, talks about a preliminary internal investigation before calling in law enforcement or a costly consulting firm. He offers insight into which capabilities of a SIEM enable investigation without alerting the employee that they are being investigated.