Detection and response

Concepts 0

One architecture or control, defined, diagrammed and scoped in both directions.

No concepts are set in Detection and response yet. See every concept in the library — one in an adjacent category is often the closer match — or search the whole library.

Comparisons 1

Two or more approaches in one shared scene, with the delta marked.

• Comparison

  SIEM compared with XDR

  A SIEM centralises events from everything and keeps them. XDR goes deeper into one vendor's telemetry and can act on it. Most estates end up running both.

  Intermediate 4 min read

  Open the entry →

Scenarios 0

A situation followed decision by decision to the concepts it exercises.

No scenarios are set in Detection and response yet. See every scenario in the library — one in an adjacent category is often the closer match — or search the whole library.