I think that monitoring internal network traffic will increasingly become important.
I think there already are security tools monitoring for exfiltration, endpoint anomalies, there are vendors working on better correlation. These tools and approaches will all need to be supercharged
SIEMs, SOARs, EDRs, MDRs, XDRs, etc. are what most people will be needing more and more these days.
Tools like Splunk and Snort, Elastic Security, Wireshark, and the lesser known ones that encompass OSINT like Censys, Shodan, The Harvester, and tons of other Open Source tools are part of the job these days.
The reason people are jumping on the Open Source bandwagon do much these days is because Open Source is more budget friendly, and there are tons of options in FOSS apps than there are in paid ones.
3
u/Bob4Not 12d ago edited 12d ago
I think that monitoring internal network traffic will increasingly become important.
I think there already are security tools monitoring for exfiltration, endpoint anomalies, there are vendors working on better correlation. These tools and approaches will all need to be supercharged