SIEM, EDR, XDR, MDR & SOAR | Cybersecurity Tools and Services | Threat Monitoring

Показать описание

Hey everyone! Today's video is going to be on various cybersecurity tools, including SIEM, EDR (endpoint detection and response), XDR (extended detection and response), MDR (managed detectionand response), and SOAR (security orchestration, automation, and response). These are tools that an organization may choose to use to defend their network. As a SOC analyst, your job may be to monitor the SIEM and respond to alerts coming from your EDR solution. You might also use a SOAR solution where you create workflows and specialize in the automation side of cybersecurity. Having a fundamental understanding of these five tools will help you be prepared not only for the Security+ but also prospective interviews. As always, thank you so much for watching, and I hope you find this video beneficial!

Attribution 4.0 International (CC BY 4.0)

Attribution 4.0 International (CC BY 4.0)

Рекомендации по теме

Комментарии

One of the best videos i've seen explaining all of this !

NK-iwrq

Clear and crisp information, I was looking for something like this for a long time, thank you so much for sharing.. Already subscribed to your content.. 🙂

manojmahajan

This is well-explained and adheres to industry standard. Great job.

bluejay

Thanks for this great video! I learned a lot!

garrisonsimon

Very interesting and informative, thanks for sharing. Found the music somewhat distracting - good info doesn't need accompaniment.

Seansaighdeoir

Nice overview of these tools. Concise and too the point! Thank you. Subscribed with the bell turned on!

gkcamden

I hope in next videos you will lower the background music. By the way this video is very informative.

paragbarot

Very nice video! But don’t you think MDR must be on top of EDR or XDR? I don’t see it as an alternative… and provoking here: what about NDR? 😁

tommone

Awesome explanation Mam
Have you any idea of next-gen firewall

yuvrajsingh-unxo

cool video, next time you should put out the music

sametsahin-ehqj

This video is good, but next-gen AV has leveraged behavioral detection for zero-days for a long time - well before EDRs came on the scene. The real distinction between an NGAV and an EDR is that NGAV tries to take a black-and-white approach - it is or is not malicious. If a threat is classified as malicious (by actual signature-type detection or by hitting some statistical threshold in behavioral detection) the threat will be blocked and quarantined. The difference with EDR is in the name - EDR will also notify (Detect) about "grey area" potential threats that can't be confidently classified as malicious, and provide the telemetry (events) needed so that a human can investigate and make a decision. EDRs also provide post-attack remediation (Response) tools such as device isolation, remote shells, etc. Good EDR solutions include comprehensive NGAV so that you don't waste a lot of time chasing potential threats that could easily have been blocked by an NGAV.

DavidCorlette