The endpoint market has been hot for years.  At one point, there were over 80 new endpoint vendors trying to displace the traditional anti-virus vendors.  The endpoint security market was transitioning from endpoint protection to endpoint detection and response (EDR).  EDR is all the rage, but do you really need one? While the endpoint market […]

We’ve been told for years that we don’t have enough data for security.  Then we see the headlines and quotes… “Organizations must prepare for collecting, processing, analyzing, and acting upon terabytes of security data.”  “All decisions about cybersecurity strategies, program priorities, investments, etc. should be made based upon analysis of real-time and historical data.” New […]

We’ve all heard the term Immutable Infrastructure, especially with cloud deployments, but what does it really mean?  What are the security and compliance impacts of Immutable Infrastructure? Let’s start with a quick overview of Immutable Infrastructure.  Simply defined, Immutable Infrastructure means that the state of networks, servers, applications, etc. are not subjected to change in […]

In one of my previous roles, I had the great opportunity to travel around the world meeting customers to understand their challenges in vulnerability management.  The two biggest challenges they wanted solved were: Help me prioritize which of these vulnerabilities are most critical, and Help me close the loop with my patching solutions to remediate […]

There are numerous security use cases where the integration of network packet data provides additional contextual information for better actionability.  Free and open source packet capture tools do a great job capturing packets, but how do you collect, aggregate, and analyze that data at scale? Let’s start with a quick review of packet capture tools, […]

Data breaches are becoming more costly.  According to the 2019 Cost of a Data Breach Report, the average total cost of a data breach is $3.92 million, up 12% over the past five years.  The average size of a data breach is 25,575 records, up 3.9% from the previous year.  With these continued increases, how […]

We’ve all heard the phrase “the network never lies”, but as more organizations adopt cloud computing, getting access to the network in the cloud has been challenging.  Initially, cloud services, such as AWS CloudWatch and AWS CloudTrail, allowed you to collect logs, events, and metrics from your cloud environment, but not network packets or flows.  […]