For experienced security operations team, keeping up with the evolving threat landscape, increasingly complex IT environments, and changing regulatory compliance requirements is becoming difficult day by day. According to a research survey by Enterprise Strategy Group (ESG)1, organizations use somewhere between 20-30 individual products, and most creating their own logs and creating hundreds of security alerts overload resulting in inconsistent triage. The report says 54% of those surveyed by ESG say that their organization collects, processes, and analyses more than 6TB of security data monthly, facing over 174,000 alerts per week on average, and are able to review only around 12,000 of them, which results in high MTTR (Mean Time to Respond), taking an average of 4.35 days to resolve an incident as per research findings.
