Balancing Standardization & Customization: Tailoring Security Monitoring to Your Unique Environment
So you’ve gone ahead and ingested every log you can think of and built a plethora of detections in line with frameworks and best practices. You may have even dabbled into custom alerts built from your own internal assessments and findings. Or maybe it’s the opposite; you’re still early in your journey toward security maturity or logging new or custom applications without much guidance. It can be hard to feel truly comfortable with your environment’s security in both situations. Standards are good but can be too noisy and restrictive in some places and too quiet or permissive in others.