No more typing reviews! Try our Samantha, our new voice AI agent.
GW

Gregg Woodcock

  • Consultant at Splunxter, Inc.
  • Has 10+ Years Of Experience
Badges
75 Points8 YearsTop 20
User Activity
Almost 5 years ago
Yes. You need aggregation to show sustained activity over time which can indicate an attack, attempt to breach, or exfiltration. You need correlation to show things that happen contemporaneous which is especially useful if they should not or normally do not.
Almost 6 years ago
The SIEM is the detection/surveillance engine whereas the SOAR is the remediation/response engine
About 6 years ago
I am admittedly biased but there are very good reasons that Splunk is the leader in this space. It all depends on your requirements if it is best for you. Splunk is pricey but I assume that budget is not really one of your concerns so that is good. The major strengths of…
About 6 years ago
#1 is InfoSec #2 is BI #3 is IoT
Over 6 years ago
What am I using for SOAR What am I using for Ticketing? What am I using for communication? What am I using for ML/UBA? How quickly do I need to be operational? Will I be staffing my own SOC or farming that out (MSSP)? What is the bandwidth required for all of the data that…
Almost 7 years ago
SIEM = Security Information and Event Management. It is any tool that monitors a computer system or network for intruders and generates notable events that security analysts sort through and respond to. The king of these is Splunk and my company, Splunxter.com are experts…
About 8 years ago
Projects
About 8 years ago
We have built Splunk-based SIEMs from the ground up
We have buit SIEMs from the ground up using Splunk for some of the largest companies in the world.
Experience
Reviews
Answers
Almost 6 years ago
Security Information and Event Management (SIEM)
About 6 years ago
Security Information and Event Management (SIEM)
Over 6 years ago
Security Information and Event Management (SIEM)
Almost 7 years ago
Security Information and Event Management (SIEM)
About me
Certifications
  • Splunk Certified Architect 6.3
  • Splunk Certified Consultant I
  • Splunk Certified Admin 6.3
  • Splunk Certified Knowledge Manager 6
  • Splunk Certified IT & App Sales Rep
  • Splunk Certified Sales Rep II
  • Splunk Certified Sales Rep I
  • Splunk Certified ITSI Specialist
  • Splunk Certified Cloud SME
  • Splunk Certified Power User
  • MarkLogic Fundamentals
  • MarkLogic Semantics
Education

University of Illinois at Urbana-Champaign

Interesting Projects and Accomplishments