To escalate or not to escalate…that is the question.
Speaker: John Bradshaw, Mandiant
Now what? That’s the question most often asked by security operations center (SOC) teams when HP ArcSight's correlation engine determines that something is amiss. Then it’s up to the SOC analyst to investigate and quickly separate critical threats from noise. Attend this session and learn when it’s time to escalate and when it isn’t.