How would you design and implement a SIEM solution for a mid-sized organization? Walk through the key decisions around log source selection, retention policies, correlation rules, and alert tuning.

Sample answer preview

Implementing a Security Information and Event Management solution is one of the most impactful investments an organization can make in its security posture, but it is also one of the most complex.