Attended the Antisyphon SOC Summit. This was packed with real world advice from people running security operations centers. The biggest takeaways for me were strategies for dealing with alert fatigue and how to tune SIEM rules to actually be useful. We also went over ways to better integrate threat intel feeds into the detection pipeline. It was a great deep dive into the operational side of security and how to build a team that doesn’t burn out.
View the official training page here
View my official credential here