CosmicEnergy: OT and ICS malware from Russia, maybe for red teaming. Updates on Volt Typhoon. Legion malware upgraded for the cloud. Natural-disaster-themed online fraud.
CyberWire Daily
00:00
The Importance of Log Volume in SOC Analysis
The log volume is actually a very important indicator. The tricky part here is that log volume often fluctuates a lot during the day. One way to possibly make this a little bit easier and more accurate is to establish this log floor for individual log sources. And also of average volumes that you're expecting for these sources.
Play episode from 21:07
Transcript
