Author: Matthew Warner, CTO and Co-Founder, Blumira

Well ... it depends on what you're trying to accomplish, at least for now. The good news is that many modern SIEMs are starting to adopt XDR-like capabilities.

Efforts to tune or build behavior- or signature-based threat identification requires time and effort most organizations don't have.