Considering cloud coverage in SIEM/XDR design

AT BsidesSLC 2025, I presented on Security Information Event Management systems and the importance of integrating cloud data sources into them. I walked through the various critical integrations necessary to understand modern attacks. I presented a mock SIEM/XDR solution and looked at what an attack would look like with and without these data sources. Last, I provided background on custom integrations I’ve created during my career for SIEM/XDR solutions.