I’ve been exploring ways to enhance threat detection mechanisms beyond just signature-based methods… Machine learning models, particularly unsupervised ones, seem promising for identifying novel threats. Has anyone had experience integrating these with existing SIEM tools, like Splunk or ELK? I’d love to hear about the challenges and successes you’ve faced.
.