Risk Management, Data Security, Architecture, Network security

Why security pros need multiple data sources for investigations

January 21, 2021
Schneider Electric has had great success managing its security data. Today’s columnist, Patrick Kelley of Axonius, offers insight into how better data management can help companies improve security investigations. chmee2 CreativeCommons (Credit: CC BY-SA 3.0)
  • Agents don’t work because security pros may never find or know every device to deploy the agent in the first place.
  • Scanning tools are typically a point-in-time snapshot, meaning unavailable devices are missed and the data gets quickly outdated.
  • Network-based discovery tools often aren’t deployed to every network segment. Instead, they may only contain data for devices most recently seen, and typically lack deep context for the devices they capture.
  • The data contains all assets.
  • Delivers context.
  • Deduplicates assets.
  • Deconflicts data.
  • Frequently updates data.
prestitial ad