A network security engineer wants to forward Strata Logging Service data to tools used by the Security Operations Center (SOC) for further investigation. In which best practice step of Palo Alto Networks Zero Trust does this fit?
The ''Report and Maintenance'' step of the Zero Trust model emphasizes ongoing monitoring, analysis, and reporting to ensure the environment remains secure over time.
''The Report and Maintenance phase includes continuous monitoring, log forwarding, and sharing of security telemetry to third-party tools to maintain and validate Zero Trust implementation.''
(Source: Zero Trust Best Practices)
By forwarding logs to SOC tools, the engineer ensures comprehensive visibility and proactive threat hunting.
Currently there are no comments in this discussion, be the first to comment!