James has been building custom SIEM platforms for security operations centers for the past 5 years, for a variety of different sectors using several different technologies. Having tried and implemented solutions from several different vendors, James ended up favouring the Elastic Stack for its extreme versatility, speed, scalability and integrated machine learning (to name a few). From ingesting, manipulating, correlating and enriching logs from a plethora of different network device vendors, to creating a custom Slack bot to send alerts to SOC analysts, James has been able to do it thanks to the Elastic Stack.
