A PPT about log management from SOC angle

1. Log Management
PROACTIVE SOC

2. Log Management process
 primary log sources
 how to decide log sources
 verbosity of the collected logs
 prioritizing log sources
 log coverage and log management challenges
 best practices.

4. Key SOC Operations
1. Log Management
- is the process for generating, transmitting, storing, analyzing, and
disposing of log data.
2. Alert Management
3. Prevent and Detection
4. Incident Management & Response

5. Why do we start with log management?

6. Log Sources

7. Log sources – Security controls

8. Network Infrastructure
Operating System

9. Log sources – Application

10. Event Attributes

11. Deciding log sources

12. Deciding log sources

13. Prioritizing log sources

14. Proactive Log Management

15. Best Practices

16. THANKS
Abubacker SIddique