CyberSOC Library

Clear ideas for operating security.

50 technically revised guides to compare models, order decisions and improve security, observability and IT operations.

50 articles available

Observability + APM
OPERATIONAL INSIGHT→
Observability + APM

How observable is your company? APM mature checklist in 15 minutes

Evaluate your company's Maturity of Observability and APM with a 20-question checklist, levels, risk signals and a 90-day roadmap.

Observability + APM
OPERATIONAL INSIGHT→
Observability + APM

Grafana vs Datadog vs Dynatrace: what really changes when choosing APM

Comparison of Grafana, Datadog and Dynatrace for observability and APM: architecture, operation, OpenTelemetry, costs and adoption scenarios.

Observability + APM
OPERATIONAL INSIGHT→
Observability + APM

Golden Signals, RED and USE: map to stop alerting all over

How to use Golden Signals, RED method and USE method to design metrics and alerts for applications and infrastructure without generating operational fatigue.

Observability + APM
OPERATIONAL INSIGHT→
Observability + APM

When an error 500 is also an attack signal: observability + SOC

How to integrate observability, APM and SOC to detect attacks in the application layer, correlate traces with events, and respond with context.

Observability + APM
OPERATIONAL INSIGHT→
Observability + APM

Kubernetes is not observed alone: metrics, logs and traces that do matter

Kubernetes Practical Observability Guide: Cluster Signals and Applications, OpenTelemetry, Prometheus, Cardinality, Alerts and Frequent Errors.

Observability + APM
OPERATIONAL INSIGHT→
Observability + APM

Monitoring, APM or observability: the difference appears when production fails

Clear comparison between monitoring, APM and observability: scope, data, use cases, costs and how to choose the right model for each application.

Observability + APM
OPERATIONAL INSIGHT→
Observability + APM

OpenTelemetry in production: how to implement it without triggering costs

Architecture, Collector, OTLP, instrumentation, sampling and costs: a practical guide for implementing OpenTelemetry in business applications.

Observability + APM
OPERATIONAL INSIGHT→
Observability + APM

APM: what it is, how it works and when it stops being just monitoring

Business APM Guide: Components, metrics, traces, use cases, implementation and criteria for choosing application performance monitoring.

Observability + APM
OPERATIONAL INSIGHT→
Observability + APM

Full stack observability: the guide to stop watching 12 dashboards

What is full stack observability, how metric correlations, logs and traces and what a company needs to implement without adding noise or hidden costs.

Observability + APM
OPERATIONAL INSIGHT→
Observability + APM

The invisible bill: how to reduce costs of observability without going blind

How to lower observability costs: cardinality, ingestion, retention, sampling, log and telemetry management without losing diagnostic capacity.

Automation
OPERATIONAL INSIGHT→
Automation

How to integrate Wazuh with n8n

Practical guide on Wazuh n8n: scope, decision criteria, implementation and key questions for Argentine companies.

SIEM and XDR
OPERATIONAL INSIGHT→
SIEM and XDR

How to choose an open source SIEM

Practical guide on SIEM open source: scope, decision criteria, implementation and key questions for Argentine companies.

Comparative
OPERATIONAL INSIGHT→
Comparative

Wazuh vs. QRadar

Practical guide on Wazuh vs QRadar: scope, decision criteria, implementation and key questions for Argentine companies.

Comparative
OPERATIONAL INSIGHT→
Comparative

Wazuh vs. Microsoft Sentinel

Practical guide on Wazuh vs Microsoft Sentinel: scope, decision criteria, implementation and key questions for Argentine companies.

Comparative
OPERATIONAL INSIGHT→
Comparative

Wazuh vs. Splunk

Practical guide on Wazuh vs Splunk: scope, decision criteria, implementation and key questions for Argentine companies.

Wazuh
OPERATIONAL INSIGHT→
Wazuh

Wazuh for SOC

Practical guide on Wazuh for SOC: scope, decision criteria, implementation and key questions for Argentine companies.

Response to incidents
OPERATIONAL INSIGHT→
Response to incidents

MTTD and MTTR in cybersecurity

Practical guide on MTTD and MTTR cybersecurity: scope, decision criteria, implementation and key questions for Argentine companies.

Response to incidents
OPERATIONAL INSIGHT→
Response to incidents

Improving Incident Response

Practical guide on incident response time: scope, decision criteria, implementation and key questions for Argentine companies.

Response to incidents
OPERATIONAL INSIGHT→
Response to incidents

Incident response playbooks

Practical guide on playbooks response to incidents: scope, decision criteria, implementation and key questions for Argentine companies.

Threat hunting
OPERATIONAL INSIGHT→
Threat hunting

What is threat hunting?

Practical guide on threats hunting: scope, decision criteria, implementation and key questions for Argentine companies.

SIEM and XDR
OPERATIONAL INSIGHT→
SIEM and XDR

How to reduce false positives in an SIEM

Practical guide on reducing false positive SIEM: scope, decision criteria, implementation and key questions for Argentine companies.

Response to incidents
OPERATIONAL INSIGHT→
Response to incidents

What is the alert triage?

Practical guide on alert triage: scope, decision criteria, implementation and key questions for Argentine companies.

CyberSOC
OPERATIONAL INSIGHT→
CyberSOC

SOC maturity checklist

Practical guide on maturity SOC: scope, decision criteria, implementation and key questions for Argentine companies.

SIEM and XDR
OPERATIONAL INSIGHT→
SIEM and XDR

EDR vs. XDR

Practical guide on EDR vs XDR: scope, decision criteria, implementation and key questions for Argentine companies.

CyberSOC
OPERATIONAL INSIGHT→
CyberSOC

What reports should a managed SOC deliver?

Practical guide on managed SOC reports: scope, decision criteria, implementation and key questions for Argentine companies.

SIEM and XDR
OPERATIONAL INSIGHT→
SIEM and XDR

SIEM vs. XDR

Practical guide on SIEM vs XDR: scope, decision criteria, implementation and key questions for Argentine companies.

Compliance
OPERATIONAL INSIGHT→
Compliance

SOC and ISO 27001

Practical guide on SOC ISO 27001: scope, decision criteria, implementation and key questions for Argentine companies.

Comparative
OPERATIONAL INSIGHT→
Comparative

SOC vs. MDR

Practical guide on SOC vs MDR: scope, decision criteria, implementation and key questions for Argentine companies.

Industries
OPERATIONAL INSIGHT→
Industries

CyberSOC for health organizations

Practical guide on CyberSOC health: scope, decision criteria, implementation and key questions for Argentine companies.

Comparative
OPERATIONAL INSIGHT→
Comparative

SOC vs. SIEM

Practical guide on SOC vs SIEM: scope, decision criteria, implementation and key questions for Argentine companies.

Industries
OPERATIONAL INSIGHT→
Industries

CyberSOC for energy companies

Practical guide on CyberSOC energy: scope, decision criteria, implementation and key questions for Argentine companies.

Comparative
OPERATIONAL INSIGHT→
Comparative

SOC vs. NOC

Practical guide on SOC vs NOC: scope, decision criteria, implementation and key questions for Argentine companies.

Industries
OPERATIONAL INSIGHT→
Industries

CyberSOC for industry

Practical guide on industrial CyberSOC: scope, decision criteria, implementation and key questions for Argentine companies.

CyberSOC
OPERATIONAL INSIGHT→
CyberSOC

SOC Level 1: Functions and responsibilities

Practical guide on SOC level 1: scope, decision criteria, implementation and key questions for Argentine companies.

Comparative
OPERATIONAL INSIGHT→
Comparative

How to choose an SOC provider

Practical guide on managed SOC provider: scope, decision criteria, implementation and key questions for Argentine companies.

Industries
OPERATIONAL INSIGHT→
Industries

SOC for fintech

Practical guide on SOC for fintech: scope, decision criteria, implementation and key questions for Argentine companies.

CyberSOC
OPERATIONAL INSIGHT→
CyberSOC

When an SOC should be outsourced

Practical guide on outsourcing SOC: scope, decision criteria, implementation and key questions for Argentine companies.

Cloud security
OPERATIONAL INSIGHT→
Cloud security

SOC for cloud and hybrid environments

Practical guide on SOC cloud: scope, decision criteria, implementation and key questions for Argentine companies.

CyberSOC
OPERATIONAL INSIGHT→
CyberSOC

How to implement an SOC step by step

Practical guide on implementing an SOC: scope, decision criteria, implementation and key questions for Argentine companies.

Cloud security
OPERATIONAL INSIGHT→
Cloud security

Active Directory Critical Events

Practical guide on Active Directory monitoring: scope, decision criteria, implementation and key questions for Argentine companies.

Cloud security
OPERATIONAL INSIGHT→
Cloud security

Safety monitoring in Microsoft 365

Microsoft 365 safety practical guide: scope, decision criteria, implementation and key questions for Argentine companies.

CyberSOC
OPERATIONAL INSIGHT→
CyberSOC

SOC 24x7: what continuous coverage implies

Practical guide on SOC 24x7: scope, decision criteria, implementation and key questions for Argentine companies.

CyberSOC
OPERATIONAL INSIGHT→
CyberSOC

How much it takes to implement an SOC in Argentina

Practical guide on cost SOC Argentina: scope, decision criteria, implementation and key questions for Argentine companies.

Response to incidents
OPERATIONAL INSIGHT→
Response to incidents

Response to phishing for companies

Practical guide on phishing response: scope, decision criteria, implementation and key questions for Argentine companies.

Response to incidents
OPERATIONAL INSIGHT→
Response to incidents

How to detect ransomware from an SOC

Practical guide on ransomware detection: scope, decision criteria, implementation and key questions for Argentine companies.

Comparative
OPERATIONAL INSIGHT→
Comparative

SOC managed vs. own SOC

Practical guide on SOC managed vs SOC own: scope, decision criteria, implementation and key questions for Argentine companies.

CyberSOC
OPERATIONAL INSIGHT→
CyberSOC

CyberSOC in Argentina: services, scope and operation

Practical guide on CyberSOC in Argentina: scope, decision criteria, implementation and key questions for Argentine companies.

Automation
OPERATIONAL INSIGHT→
Automation

Artificial intelligence applied to an SOC

Practical guide on SOC artificial intelligence: scope, decision criteria, implementation and key questions for Argentine companies.

Automation
OPERATIONAL INSIGHT→
Automation

Automation of an SOC

Practical guide on SOC automation: scope, decision criteria, implementation and key questions for Argentine companies.

CyberSOC
OPERATIONAL INSIGHT→
CyberSOC

What an CyberSOC is and how it protects a company

Practical guide on what an CyberSOC is: scope, decision criteria, implementation and key questions for Argentine companies.

WhatsApp