Performance Analytics for Security Operations Document

[Jon Williams]

Hello SecOps Community,

I am pleased to be able to share with you the recently finished Performance Analytics for Security Operations document. This document was put together with the hopes of de-mystifying Performance Analytics for security practitioners and aid in building valuable security reports.

This document covers the following topics:

• Components of Performance Analytics
• A Complete Breakdown of a Security Report
• How to Create a New Security Report
• Creating New Dashboards
• Adding Widgets to Dashboards

Please keep in mind this is only the first full version (v2) of the document, so any feedback and suggestions would be greatly appreciated!

Another great resource is the Performance Analytics Academy on youtube. This is a series of videos focused on expanding knowledge around performance analytics. The playlist can be found here - https://www.youtube.com/playlist?list=PLkGSnjw5y2U6HotK0MQUbCrzVog_zBWat 

[WLO]

Hi Jon, 

Do you know if there is any document where we can find and understand the relation or differences between "Performance Analytics for Security Operations" and "Performance Analytics for Security Incident Response"?

We have to different partners implementing VR and SIR in different timeline. 

Thanks 

[BarboraH]

Hi Jon,

thank you for this document, I have learned a lot and it did save me some pain.

My feedback is 'Great Job!'

In case it is relevant at all, I would be happy to provide you a list of typos I found (not that many). But maybe since it is already over a year you might have another version. Anyway I would be happy to support.

Thank you! 

Barbora

[Billylofrt]

Thank you for this informative topic. Glad to know about this. my Loyola Chart