McAfee Labs Report Finds 93 Percent of Security Operations Center Managers Overwhelmed by Alerts and Unable to Triage Potential Threats

admin

This is a very interesting report from our partner, Intel Security/McAfee. Some interesting bits:

Enterprise security operations center survey found 93 percent of respondents acknowledged being unable to triage all potential cyber threats.
On average, organizations are unable to sufficiently investigate 25 percent of security alerts.
67 percent of respondents reported an increase in security incidents.
26 percent acknowledge operating in a reactive mode despite having a plan for a proactive security operation.
New ransomware samples increased 80 percent since the beginning of 2016.

Check it out: https://newsroom.intel.com/news-releases/mcafee-labs-report-finds-93-percent-of-security-operations-center-managers-overwhelmed-by-alerts-and-unable-to-triage-potential-threats/

admin

Explore more

UEBA

What We Can Learn from the PGA Ransomware Attack

August 10, 2018 — Pramod Borkar

Ransomware attacks often target victims with high-value, unstructured data. In this case it was the PGA Championship and Ryder Cup files consisting of marketing materials such as PGA banners, logos, and signage, which are the type of files that organizations frequently don’t back up properly.

UEBA

What Is UEBA and Why It Should Be an Essential Part of Your Incident Response

August 10, 2018 — Luke Voigt

Quickly get up to speed on the emerging field of User and Entity Behavior Analytics (UEBA) and how information security organizations are utilizing it: Security teams are increasingly shifting towards tying technologies like UEBA to their conventional SIEMs and other legacy prevention systems.

SIEM

SIEM Threat Detection – Rules or Models?

August 3, 2018 — Pramod Borkar

Modern SIEMs provide out of the box correlation rules and sophisticated models to surface a broad range of abnormal behavior and events. Understand how to customize these resources, while adding your own rules and models for your organization’s unique cybersecurity requirements.

Exabeam provides security intelligence and management solutions to help organizations of any size protect their most valuable information.

Request a Demo