TLDR; * For Detection Engineering, understanding your network architecture, application ecosystem and people of network plays a major role. * In order to treat an alert as false positives, wait for at least three occurrences. Second could be a co-incidence. But, marking an alert as false positive on the first occurrence could
February 12, 2025
TLDR; * Security with AI can be bucketed into two areas. Detection based (where humans detect the spam using past experience, tone, etc in conversations) and Process based (using tools to block spams). * AI should leveraged for automating tedious manual activities. At the same time it should be verified before the
January 22, 2025
TLDR * For the success of CyberSecurity Programs, Prioritization is the Key. Follow a Risk based approach for prioritization. * CyberSecurity awareness programs should be behavior based vs tool based. It should also cover both individual and organizational goals. Most importantly, programs should have clear objectives since the landscape changes frequently be
January 08, 2025