User contributions for Megan-myers77
From Wiki Spirit
A user with 1 edit. Account created on 15 October 2026.
15 October 2026
- 18:1818:18, 15 October 2026 diff hist +14,017 N Why My SIEM Missed an Intrusion on a Misconfigured Switch Created page with "<html><p> The alert arrived after the damage was done. An endpoint detection platform had flagged unusual activity on a workstation, and the investigation found that an attacker had moved across parts of the network that should have been separated. We went looking in the SIEM for a clear trail: connections, device events, perhaps an obvious policy breach. There was no useful story there.</p> <p> That did not mean the SIEM was broken. It meant the network was not giving i..." current