Security Data Lakes, Normalization and OCSF | by Jake Berkowsky | Snowflake Builders Blog: Data Engineers, App Developers, AI/ML, & Data Science | Medium
As Snowflake’s Cybersecurity Field CTO, I get asked fairly frequently around my thoughts on the Open Cybersecurity Schema Framework (OCSF) and about normalization in general. The following are things I’ve learned from conversations with the field as well as with the OCSF community. OCSF has a great community. OCSF has commitments and active support by some major players in the industry including Splunk, AWS and of course Snowflake. The contributors themselves know how to get stuff done, are welcoming and consist of industry vets, experts, startups and established companies all working together. Contributors I’ve talked to don’t complain about getting their changes in and everyone seems relatively eager to help and support each other. I highly recommend joining their Slack. OCSF is still relatively new Having only recently released its first major version, it’s still in development and you may find a lot of info stored under the “additional info” field. Many vendors who created integrat
Security Data Lakes, Normalization and OCSF Jake Berkowsky 3 min read · Jan 4, 2024 -- Listen Share Press enter or click to view image in full size As Snowflake’s Cybersecurity Field CTO, I get asked fairly frequently around my thoughts on the Open Cybersecurity Schema Framework (OCSF) and about normalization in general. The following are things I’ve learned from conversations with the field as well as with the OCSF community. OCSF has a great community . OCSF has commitments and active support by some major players in the industry including Splunk, AWS and of course Snowflake. The contributor
Explore this link on the map →saved by
related reading
- A guide to threat hunting and monitoring in Snowflake | Datadog Security Labssecuritylabs.datadoghq.com
- Baseline Hunting with the PEAK Framework | Splunksplunk.com
- How the Open Knowledge Format can improve data sharing | Google Cloud Blogcloud.google.com
- Security is about data: how different approaches are fighting for security data and what the cybersecurity data stack of the future is shaping up to look likeventureinsecurity.net
- What I Learned From The Modern Data Stack Conference 2021 - James Lejameskle.com
- Snowflake Defrosts The Data-Intensive Applicationforbes.com
- Security data lakehouse and modular designrippling.com
- How Dropbox Implemented a Modern SIEMsnowflake.com
- Behavior Analytics in Your Security Data Lake Just Got Way Easieromeronsecurity.com
- Observability Data Lake | Criblcribl.io
- Protect your organization as SIEM vendor, technology and threat landscape changeslinkedin.com
- ClickHouse Powers Dassana’s Security Data Lake | ClickHouseclickhouse.com