Objectives

• Create custom log sources to utilize events from uncommon sources
• Create, maintain, and use reference data collections
• Develop and manage custom rules to detect unusual activity in your network
• Develop and manage custom action scripts to for automated rule reponse
• Develop and manage anomoly detection rules to detect when unusual network traffic patterns occur