Kevin Lustic (2017) - Ghosts in the SIEM: Poking the Bear
▶Kevin Lustic (2017) - Ghosts in the SIEM: Poking the Bear — a 2017 SAINTCON security conference talk on blue-team (23:01 min). Watch the full video, indexed free on the Breach Arc Archive.
▶ Watch video on YouTube