How to write correlation rules so they don't gobble up your resources?
▶How to write correlation rules so they don't gobble up your resources? — a Positive Hack Days (PHDays) security conference talk on blue-team, threat-hunting (13:00 min). Watch the full video, indexed free on the Breach Arc Archive.
▶ Watch video on YouTube