Tackling the Data Side of Security Operations
The concept is simple enough. All security systems worth their salt now share a common API architecture, meaning they will all at least accept API requests for data, status, configuration updates, and more. That is a good start, but to overcome the challenge of security domains we need a common hub around which we can consolidate our security operation and incident response activity.