header bg

Scan QR code or get instant email to install app

Question:

Seamus intends to use his organization's security information and event management (SIEM) device to verify the status of malware infections within the organization. Which SIEM dashboard will indicate whether there has been an abnormal increase in malware infections over the past few days?

A The trends dashboard.
explanation

To identify any changes in the frequency of malware detections, Seamus should review the trend data. Such an analysis can be beneficial in detecting changes resulting from new malware techniques or packages, successful attacks through malicious links or emails, or other means of accessing the organization. Following this, Seamus could consult with users whose systems have reported the malware to determine the cause. While alerts may indicate the presence of infections, they do not provide data over time as efficiently as trend analyses. While sensors display individual sources from which data is collected, and bandwidth dashboards provide useful information about the systems that consume more or less bandwidth, the trend dashboard remains the appropriate place for Seamus to investigate in this situation.

Related Information

Comments

Leave a Reply

Your email address will not be published. Required fields are marked *

*