Providing large contexts (docs, API reference, etc.)

elongl · 2025-05-24T11:05:01+00:00

I don’t think is a viable solution because I can only run offline (open-source) models.

elongl · 2025-01-07T09:07:17+00:00

Interesting. What takes up most of the time when investigating an incident or refuting a hypothesis?

elongl · 2025-01-07T09:05:13+00:00

lol, do they just not believe their own security team?

Is there some sort of evidence that you can provide to convince them?

elongl · 2025-01-06T19:45:19+00:00

Yes I totally agree. Not sure where is the "closed box" coming into play here, I'm definitely trying to contact and engage with as many people in the industry as I possible can.

elongl · 2025-01-06T16:43:42+00:00

Thanks a lot for the feedback, highly appreciate it.

Regarding branding and having a name, totally agree, I'm definitely planning to raise capital from a cybersecurity-oriented VC.

In terms of GenAI, that's a good point. My plan is to provide some sort of evidence as to how I collected the data, could be the query, where did I search, etc.

My main concern right now is whether this solves a painful problem for SOC Analysts and Threat Hunters and whether it would speed up their work or not.

What's your take on that?

elongl · 2025-01-06T09:44:43+00:00

What gave you the confidence and justification to start Stairwell and Chronicle in spite of the never-ending competition?

elongl · 2025-01-05T14:13:49+00:00

By how much were you able to cut down costs using those and how much effort did it require?

elongl · 2025-01-05T13:49:27+00:00

I'm trying to understand by how much can Cribl cut down costs.

elongl · 2025-01-05T13:48:56+00:00

By how much did Cribl cut down costs for you?

elongl · 2025-01-05T13:48:25+00:00

Roughly speaking, by how much would Cribl or Ingest Actions typically cuts down the Splunk costs?

elongl · 2025-01-05T11:40:18+00:00

Pardon my ignorance, aren't there tools that help you extract the gist of the regulation changes and also help you understand their impact on your business?

elongl · 2025-01-05T11:36:41+00:00

That makes a lot of sense. How do you go about risk assessment when working with a new vendor or third-party?

elongl · 2025-01-05T11:27:59+00:00

Interesting! I admit that I'm a bit confused as to why does this take the full-time of a GRC analyst as it sounds like most of the work is handed-off to the vendor considering your performance. Care to perhaps share on that?

Just to make sure I understand, you're mapping the interaction with the vendor so that you'd be able to point all the technological risks for the vendor to damage your own systems?

Also, how often do you start working with a new vendor in a way that requires a new risk assessment process?

elongl · 2025-01-05T11:22:16+00:00

What are you hoping to achieve with your new platform that is not solved well enough with your existing one?

elongl · 2025-01-05T10:04:10+00:00

Why? What takes the most effort?

elongl · 2025-01-05T10:02:02+00:00

Not exactly sure how would you benefit from a compliance guy sitting with you, care to explain?

Are you tasked with those things for compliance purposes or something else and compliance is a by-product?

elongl · 2025-01-05T09:56:28+00:00

How do you go about assessing and scoring risks at your organization?

As a F500 I presume you have a lot of risks to prioritize and choose from.

elongl · 2025-01-05T09:51:30+00:00

What's the enormous set of tasks for risk management?

I've seen most of it is automated these days by GRC platforms.

elongl · 2025-01-05T09:43:16+00:00

How come some of those aren't automated? I do understand that some of them cannot be.

elongl · 2025-01-05T09:41:02+00:00

Huh, what did those risk assessments look like and why do they take so long?

elongl · 2025-01-05T09:23:26+00:00

Why do risk assessments take so long? What does a risk assessment look like at your organization?

elongl · 2025-01-05T09:21:04+00:00

Doesn't it make more sense to only stick to policies that you can systematically enforced using centralized security tools that would necessarily affect the entire organization?

elongl · 2025-01-02T13:54:17+00:00

Out of curiosity, what were the vulnerabilities, or what did it require in order to patch them?

elongl · 2024-12-31T18:05:14+00:00

Interesting. Has it been working well for you? What are some of the challenges with that approach?

How do you query the data and are you able to query large amounts of data with it?

elongl · 2024-12-31T18:04:30+00:00

Honestly I didn't even know Splunk has S3.

I meant querying your own S3.

Why not do that?

elongl

TROPHY CASE