✳flâneur — a map of the web's best reading

Major Hospital System Cuts Azure Sentinel Costs by Over 50% with Observo.ai

observo.ai · 186 words · saved by 1 readers

A large North American hospital system saw rapid increases in its Microsoft Azure Sentinel SIEM expenses primarily due to the escalating growth of security telemetry data. Their primary data sources were Fortinet Firewall logs, Windows Event Logs, Active Directory, Domain Controller, and DNS logs. All of these sources contain vital information about the nature of their security posture, but collectively their increasing volumes were straining their budget with rising costs for Sentinel, data retention, and compute costs. Query performance also began to lag with the growing amount of log data in their SIEM. Their security team was also being inundated with a large volume of false or insignificant alerts which made prioritizing important alerts and resolving critical incidents very challenging. They worried that this “alert fatigue” could be masking alerts that needed to be addressed right away and may lead to a serious attack or data breach that otherwise could have been prevented. The

WOW.js cannot detect dom mutations, please call .sync() after loading new content. , function (e) { if (locked) return; if (e.relatedTarget && e.relatedTarget.closest && e.relatedTarget.closest( ) : null; // The slide-in panel itself. We toggle `is-open` directly on this element // because, after the SCSS was wrapped in `.webui-scope`, the upstream // `.is-open &` ancestor pattern no longer matches (the `is-open` toggle on // `.navigation-mobile-menu` is a descendant of `.webui-scope`, not an // ancestor of the panel as it would be in the standalone Contentstack app). var mobileMenuPanel = mo

Explore this link on the map →

related reading