Effective Security Logging: What and How to Monitor for Security Issues 

In today's digital landscape, understanding what to log and how to effectively monitor these logs is crucial for maintaining robust security defenses. Often, inadequate logging results in a deficiency of available telemetry, leading to gaps in detection.
During this webinar, attendees learned:
• Which logs are critical to ingest into your SIEM
• The importance of filtering and ingesting only necessary data
• Key aspects to focus on for tuning
• The risks of over-reliance on EDR endpoints or EDR tools
Join Megan Nilsen, the Attack Simulation and Detection and Tactical Awareness & Countermeasures (TAC) Practice Lead, and Carlos Perez, the Director of Security Intelligence as they delve into the essentials of security logging, providing a comprehensive guide on identifying critical events, setting up efficient logging mechanisms, and enhancing your overall security posture. Attendees gained practical insights and actionable steps to optimize their logging practices and strengthen their defenses against cyber threats.