[This is a Guest Diary by Jeffray Spence, an ISC intern as part of the SANS.edu BACS program] Around Here, we start our day with coffee, but our day does not begin until we have our data...So much data. Where to even begin? When approaching a massive dataset, such as those from a DShield SIEM Honeypot, the first step is to actually find something to analyze.

Read the full article at SANS Internet Storm Center →