Evidence search
Search
Search titles, summaries, topics, providers, authors, and the full open-access corpus.
Results for “SIEM”
2 publicationsTechnical guideSource-based analysisVisual briefIllustrative analysis
Testing Sigma detections before a backend change
Keep rule structure, field transformations, query conversion and event matching as separate checks when changing a Sigma detection backend.
Detection & response · SigmaHQ · By Cloud Security DeskCloud logs that never reach the SIEM
A dashboard can be healthy while the evidence behind it is incomplete. Coverage needs to be tested from event creation to searchable record.
Detection & response · AWS / Azure / Google Cloud · By Umair Akbar and Ahmed Elshekh