Learn about using Cloud SIEM to define and automate smart actions, including enrichments and notifications, to quickly investigate, understand, and react to potential security threats.

In this session, Lukasz covers rule tuning in Sumo Logic's Cloud SIEM Enterprise.

Learn about Cloud SIEM's Outlier Rules which allow you to generate a Signal when behavior by an Entity (such as a user) is encountered that deviates from its baseline activity.

Take Control of your Cloud SIEM data with our Data Control Options.

Learn about Sumo Logic's Cloud SIEM Enterprise Audit App, containing dashboards to give you visibility into Cloud SIEM Insights, Records, Signals, and Rules.

Learn more about Cloud SIEM's new First Seen Rules, which can generate signals when certain behavior or activity is detected for the first time.

Learn more about two key tools in Cloud SIEM: the Entity Timeline and Entity Relationship Graph and how they can help analyze security incidents.

Learn more about Cloud SOAR's Automated Responder Knowledge (ARK) feature, which uses machine learning to dynamically suggest playbooks in response to incidents, based on other similar incidents.

Learn about Sumo Logic's Insight Trainer feature for Cloud SIEM Enterprise, a tool to help SOC teams reduce false positive and "no action" insights.

Learn about Sumo Logic's Global Intelligence for Security Insights system, which "crowdsources" cybersecurity information from customers around the globe to provide accurate confidence scores for security insights.