{"id":1402,"date":"2018-03-26T12:27:30","date_gmt":"2018-03-26T16:27:30","guid":{"rendered":"https:\/\/solutionsreview.com\/security-information-event-management\/?p=1402"},"modified":"2018-03-27T14:19:44","modified_gmt":"2018-03-27T18:19:44","slug":"key-findings-solarwinds-siem-blogs-q1-2018","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/security-information-event-management\/key-findings-solarwinds-siem-blogs-q1-2018\/","title":{"rendered":"Key Findings from the SolarWinds SIEM Blog(s) Q1 2018"},"content":{"rendered":"

\"SolarWinds<\/p>\n

As always, we at Solutions Review try to keep up with the blogs of the major vendors in each distinct cybersecurity field—<\/span>Endpoint Security<\/span><\/a>, <\/span>SIEM<\/span><\/a>, and <\/span>Identity and Access Management<\/span><\/a>. Who better to teach us about the most relevant concerns and pressing threats than the troops on the ground fighting daily against hackers and malicious nation-state actors?<\/span><\/p>\n

\t\t\t

\"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n

Today we decided to dive into the blog of Texan SIEM vendor <\/span>SolarWinds<\/span><\/a>, or rather blogs. SolarWinds actually has two: the technically inclined <\/span>LogicalRead<\/span><\/a> and the more accessible learning platform <\/span>Geek Speak<\/span><\/a>. We read both, and pulled out some key SIEM findings for Q1 2018. <\/span><\/p>\n

Top Five Cyber Threats That Can Kill Your Business Growth by Josh Berman<\/b><\/a><\/span><\/h3>\n

Investors aren\u2019t exactly queuing up for enterprises that suffered a hack or a data breach. \u00a0SolarWinds points out the financial effects of a digital attack can affect global enterprises and small businesses alike. In fact, attacks on small businesses made up 43% of cybercrimes in 2015 alone, a significant jump from years past. <\/span><\/p>\n

Yet employees still remain deeply ignorant of cybersecurity threats, and thus are the most common cause of a hack. SolarWinds reminds their readers that every avenue and scrap of data is vulnerable to an attack, and to watch out for the Internet of Things, social engineering, and mobile malware in particular. <\/span><\/p>\n

Ransomware \u2013 Tips to Combat the Threats Enabled From Within by Josh Berman <\/b><\/a><\/span><\/h3>\n

A much earlier article from when the WannaCry ransomware strain prowled the Internet, the information provided in this post remains as relevant today as it did then. Ransomware continues to plague enterprises around the world, as the city of Atlanta will attest. <\/span><\/p>\n

SolarWinds points out most ransomware finds its way into corporate networks via emailed <\/span>phishing<\/span><\/a> scams. The vendor provides some solid advice on how to prevent falling victim to phishing tactics such as not trusting email display names, checking for spelling mistakes in allegedly legitimate emails, and watching for threatening language in the subject line. After that, \u00a0the next step is to ensure your employees know and act on these tips. <\/span><\/p>\n

Log Retention and Compliance by Josh Berman <\/b><\/a><\/span><\/h3>\n

There are a lot of regulatory compliance guidelines\u2014at least one for every industry. What\u2019s more, while each regulatory guideline mandates the collection and storage of logs for compliance, they specify different timeframes and what logs need to be retained. <\/span><\/p>\n

Furthermore, SolarWinds acknowledges that the buzz of activity in the typical enterprise IT environment can make log retention a near impossibility, not to mention maintaining those stored logs. SolarWinds recommends not only looking into a SIEM solution for log management, but also into syslog servers to simplify log collection, archival, and storage. The two solutions can even be paired. <\/span><\/p>\n

AMD RYZEN AND EPYC PROCESSORS A THREAT? By Dez<\/b><\/a><\/span><\/h3>\n

We covered the AMD Ryzen <\/span>controversy<\/span><\/a> in a previous article, but the writers in the SolarWinds community also expressed some thoughts on the matter. They point out that while the AMD Ryzen processors do have security flaws, they require some serious permissions to exploit. Furthermore, CTS Labs of Israel\u2014the firm that discovered the flaw\u2014has stock in the field which may have influenced their decision. SolarWinds\u2019 writers reminds us that the constantly paranoid, always-in-crisis mentality isn\u2019t terribly healthy for our industry. Instead, we should focus on proven best practices such as infrastructure monitoring and threat management. <\/span><\/p>\n

Is Syslog Useful? By Josh Berman<\/b><\/a><\/span><\/h3>\n

SolarWinds shares some of the benefits of a more proactive syslog monitoring solution: reduced downtime of servers and better alerting. They dive into the alerting that syslogs can facilitate such as security alerting, networking alerting, and application alerting. <\/span><\/p>\n

The idea is to reduce your help desk\u2019s burden, and syslogs can detect threats before they become threats. The math is pleasantly simple in this regard.<\/span><\/p>\n

\u00a0
Widget not in any sidebars
<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

As always, we at Solutions Review try to keep up with the blogs of the major vendors in each distinct cybersecurity field—Endpoint Security, SIEM, and Identity and Access Management. Who better to teach us about the most relevant concerns and pressing threats than the troops on the ground fighting daily against hackers and malicious nation-state […]<\/p>\n","protected":false},"author":41,"featured_media":1403,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[551],"tags":[616,86,212,298,276,22,83],"acf":[],"yoast_head":"\nKey Findings from the SolarWinds SIEM Blog(s) Q1 2018<\/title>\n<meta name=\"description\" content=\"We decided to dive into the blog of Texan SIEM vendor SolarWinds, or rather blogs. SolarWinds actually has two, each with its own strengths.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/security-information-event-management\/key-findings-solarwinds-siem-blogs-q1-2018\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Key Findings from the SolarWinds SIEM Blog(s) Q1 2018\" \/>\n<meta property=\"og:description\" content=\"We decided to dive into the blog of Texan SIEM vendor SolarWinds, or rather blogs. SolarWinds actually has two, each with its own strengths.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/key-findings-solarwinds-siem-blogs-q1-2018\/\" \/>\n<meta property=\"og:site_name\" content=\"Best Information Security SIEM Tools, Software, Solutions & Vendors\" \/>\n<meta property=\"article:published_time\" content=\"2018-03-26T16:27:30+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2018-03-27T18:19:44+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/03\/solarwinds-logo-mod.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Ben Canner\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/key-findings-solarwinds-siem-blogs-q1-2018\/\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/key-findings-solarwinds-siem-blogs-q1-2018\/\",\"name\":\"Key Findings from the SolarWinds SIEM Blog(s) Q1 2018\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/key-findings-solarwinds-siem-blogs-q1-2018\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/key-findings-solarwinds-siem-blogs-q1-2018\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/03\/solarwinds-logo-mod.jpg\",\"datePublished\":\"2018-03-26T16:27:30+00:00\",\"dateModified\":\"2018-03-27T18:19:44+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"We decided to dive into the blog of Texan SIEM vendor SolarWinds, or rather blogs. SolarWinds actually has two, each with its own strengths.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/key-findings-solarwinds-siem-blogs-q1-2018\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/security-information-event-management\/key-findings-solarwinds-siem-blogs-q1-2018\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/key-findings-solarwinds-siem-blogs-q1-2018\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/03\/solarwinds-logo-mod.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/03\/solarwinds-logo-mod.jpg\",\"width\":800,\"height\":400,\"caption\":\"SolarWinds blog posts key findings\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/key-findings-solarwinds-siem-blogs-q1-2018\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Key Findings from the SolarWinds SIEM Blog(s) Q1 2018\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\",\"name\":\"Best Information Security SIEM Tools, Software, Solutions & Vendors\",\"description\":\"Buyer's Guide and Best Practices\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Key Findings from the SolarWinds SIEM Blog(s) Q1 2018","description":"We decided to dive into the blog of Texan SIEM vendor SolarWinds, or rather blogs. SolarWinds actually has two, each with its own strengths.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/security-information-event-management\/key-findings-solarwinds-siem-blogs-q1-2018\/","og_locale":"en_US","og_type":"article","og_title":"Key Findings from the SolarWinds SIEM Blog(s) Q1 2018","og_description":"We decided to dive into the blog of Texan SIEM vendor SolarWinds, or rather blogs. SolarWinds actually has two, each with its own strengths.","og_url":"https:\/\/solutionsreview.com\/security-information-event-management\/key-findings-solarwinds-siem-blogs-q1-2018\/","og_site_name":"Best Information Security SIEM Tools, Software, Solutions & Vendors","article_published_time":"2018-03-26T16:27:30+00:00","article_modified_time":"2018-03-27T18:19:44+00:00","og_image":[{"width":800,"height":400,"url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/03\/solarwinds-logo-mod.jpg","type":"image\/jpeg"}],"author":"Ben Canner","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/key-findings-solarwinds-siem-blogs-q1-2018\/","url":"https:\/\/solutionsreview.com\/security-information-event-management\/key-findings-solarwinds-siem-blogs-q1-2018\/","name":"Key Findings from the SolarWinds SIEM Blog(s) Q1 2018","isPartOf":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/key-findings-solarwinds-siem-blogs-q1-2018\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/key-findings-solarwinds-siem-blogs-q1-2018\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/03\/solarwinds-logo-mod.jpg","datePublished":"2018-03-26T16:27:30+00:00","dateModified":"2018-03-27T18:19:44+00:00","author":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"We decided to dive into the blog of Texan SIEM vendor SolarWinds, or rather blogs. SolarWinds actually has two, each with its own strengths.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/key-findings-solarwinds-siem-blogs-q1-2018\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/security-information-event-management\/key-findings-solarwinds-siem-blogs-q1-2018\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/key-findings-solarwinds-siem-blogs-q1-2018\/#primaryimage","url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/03\/solarwinds-logo-mod.jpg","contentUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/03\/solarwinds-logo-mod.jpg","width":800,"height":400,"caption":"SolarWinds blog posts key findings"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/key-findings-solarwinds-siem-blogs-q1-2018\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/security-information-event-management\/"},{"@type":"ListItem","position":2,"name":"Key Findings from the SolarWinds SIEM Blog(s) Q1 2018"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website","url":"https:\/\/solutionsreview.com\/security-information-event-management\/","name":"Best Information Security SIEM Tools, Software, Solutions & Vendors","description":"Buyer's Guide and Best Practices","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/1402"}],"collection":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/comments?post=1402"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/1402\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media\/1403"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media?parent=1402"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/categories?post=1402"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/tags?post=1402"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}